Custodi

Privacy Policy

This privacy policy explains how we collect, use, and protect your personal information.

Data Controller

Company information

Data Protection Officer

Contact information for DPO

Purposes of Processing

  • User authentication and account management
  • Organization and property management
  • Meter reading and utility data processing
  • Security and fraud prevention
  • Analytics and service improvement
  • Real-time synchronization and notifications

Your Rights

  • Right to access your personal data
  • Right to restrict processing
  • Right to data portability
  • Right to lodge a complaint

Subprocessors

We use the following subprocessors to provide our services

Vercel Inc.

Added: 5 жовт. 2025 р.
Purpose:Hosting & CDN
Location:USA
Server Location:Deutschland (Frankfurt)
Safeguards:Standard Contractual Clauses (SCC)

Neon Tech Inc.

Added: 5 жовт. 2025 р.
Purpose:Database Hosting
Location:USA
Server Location:Deutschland (Frankfurt)
Safeguards:Standard Contractual Clauses (SCC)

Resend Inc.

Added: 5 жовт. 2025 р.
Purpose:Email Service
Location:USA
Server Location:Ireland
Safeguards:Standard Contractual Clauses (SCC)

Perplexity AI Inc.

Added: 18 жовт. 2025 р.
Purpose:AI-powered meter reading analysis
Location:USA
Server Location:USA
Safeguards:Standard Contractual Clauses (SCC)
Legal Basis:Art. 6(1)(b) GDPR - Contract performance; Art. 6(1)(f) GDPR - Legitimate interest in automated meter reading
Data Categories:
  • Meter reading images (utility consumption data)
  • Property identification data
  • Timestamp and location metadata
  • Processing results and accuracy metrics

Redis Labs Ltd.

Added: 19 жовт. 2025 р.
Purpose:Real-time synchronization infrastructure
Location:USA/Israel
Server Location:Deutschland (Frankfurt)
Safeguards:Standard Contractual Clauses (SCC)
Legal Basis:Art. 6(1)(f) GDPR - Legitimate interest in providing real-time data synchronization across user devices
Data Categories:
  • Technical synchronization identifiers (non-personal)
  • Cache invalidation events
  • Temporary session coordination data

Mapbox Inc.

Added: 12 лист. 2025 р.
Purpose:Address geocoding, map visualization, and location services
Location:USA
Server Location:Global CDN (EU nodes available)
Safeguards:Standard Contractual Clauses (SCC)
Legal Basis:Art. 6(1)(b) GDPR - Contract performance; Art. 6(1)(f) GDPR - Legitimate interest in providing accurate location-based services
Data Categories:
  • Property addresses (search queries)
  • Geographic coordinates (latitude/longitude)
  • IP address (for rate limiting)
  • Browser user agent (technical requirement)

Cookies

Information about cookie usage

Security Measures

How we protect your data

International Data Transfers

Information about data transfers

Data Retention

How long we keep your data

  • User accounts: Until the account is deleted
  • Meter readings: Until account deletion or mandatory statutory retention ends
  • Activity logs: 12 months
  • Backups: 30 days
  • Consent records: 3 years
  • Real-time sync data: 60 seconds (automatic expiration)

Additional retention information

Last updated: 12 листопада 2025 р.