Privacy Policy

Effective Date: 1st January, 2025

This Privacy Policy explains how Platform48 Limited (“we”, “us”, “our”) collects, uses, and protects your personal data when you use platform201.com(the “Site”).

By using this Site, you agree to the collection and use of information in accordance with this policy. This policy also satisfies the disclosure requirements set out by Google for applications using Google Sign-In.

Data Accessed

When you sign in with Google, we receive the following data from your Google account:

  • Your name and email address (from your Google profile);
  • A unique Google account identifier.

We do not access your Google Drive, Gmail, Contacts, Calendar, or any other Google service data. We request only the minimum permissions required to authenticate your identity.

Data Usage

We use your Google account data solely to:

  • Create and identify your Platform201 account;
  • Send service-related communications such as account alerts and billing notices;
  • Provide customer support.

We do not use your data for advertising, profiling, or any purpose unrelated to operating the Platform201 platform. Your data will not be used to train AI or machine learning models.

Data Sharing

We do not sell your personal data. We share it only with the following categories of third parties, and only to the extent necessary to operate the service:

  • Kinde (authentication provider) — to create and manage your sign-in sessions;
  • Stripe (payments processor) — your billing name and email only; no raw Google account data is passed to Stripe;
  • Legal and regulatory authorities — if required to do so by applicable law or a valid legal order.

No Google user data is shared with third parties for marketing or advertising purposes.

Data Storage & Protection

We take the security of your data seriously. Our practices include:

  • Data is stored on servers located within the EU (Google Cloud Platform, europe-west2 region);
  • All data is transmitted over HTTPS/TLS at all times;
  • Access to personal data is restricted to authorized Platform48 personnel only;
  • Authentication tokens are handled by Kinde; we do not store raw Google OAuth tokens on our systems.

Data Retention & Deletion

We retain your account data for as long as your account remains active. When your account is deleted, your personal data is permanently removed from our systems within 30 days.

To request deletion of your data, please contact us by:

  • Email: hello@platform48.com with the subject line Data Deletion Request; or
  • Post: Platform48 Limited, 86-90 Paul Street, London, EC2A 4NE.

We will respond to all deletion requests within 30 days.

Cookies

We use session cookies to maintain your authenticated state. These are strictly necessary for the Site to function and cannot be disabled. We do not use advertising or tracking cookies.

Your Rights

Under applicable data protection law (including UK GDPR), you have the right to:

  • Access the personal data we hold about you;
  • Request correction of inaccurate data;
  • Request deletion of your data;
  • Object to or restrict certain processing;
  • Lodge a complaint with the Information Commissioner's Office (ICO).

To exercise any of these rights, contact us at hello@platform48.com.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on the Site. Continued use of the Site after changes are posted constitutes your acceptance of the updated policy.

Contact Details

If you have any questions or concerns about this Privacy Policy, please contact us:

Email: hello@platform48.com

Post: Platform48 Limited, 86-90 Paul Street, London, EC2A 4NE