Data protection

1. Who is responsible

PREST OFFICE LIMITED, registered in England and Wales under company number 16426682, is the controller for your account data. For the exchanges you import into your workspace, you are the controller and we act as processor.

2. The data we handle

Account data, the content you import, and the technical logs the service needs to run.

• Account: email address, display name, language, currency, time zone
• Content: emails, notes and transcripts you add, and the items drawn from them
• Technical: access logs, timestamps, hashed IP addresses for client approval pages
• Billing: subscription identifiers passed on by Stripe, with no card data

3. Why we handle them

To perform our contract with you, to meet our legal and accounting obligations, and under our legitimate interest in securing the service and preventing abuse. No processing takes place for advertising.

4. For how long

Your content stays as long as your workspace exists. Deleting a workspace runs after a 14-day grace period, then erases the associated records. Technical logs are kept for 12 months. Accounting records are kept for the applicable statutory period.

5. Where your data sits

The database and file storage are located in Ireland. Some processors operate from third countries; those transfers rely on the European Commission's standard contractual clauses. The full list is on the Subprocessors page.

6. Your rights

You have rights of access, rectification, erasure, restriction, objection and portability. Full export and deletion are available directly from your settings, without going through us. For anything else, use the Contact page.

7. Complaints

If our answer does not satisfy you, you may complain to the supervisory authority in your country of residence, in France the CNIL, or to the Information Commissioner's Office in the United Kingdom.