Privacy Policy
Introduction
Lassare (“we”, “our”, or “us”), operated by Stooj S.r.l. (VAT/P.IVA: 03932870920), with registered office in Quartu Sant’Elena (CA), Sardinia, Italy, is the data controller responsible for your personal data. You can reach us at hello@lassare.com.
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.
Information We Collect
Information You Provide
- Account Information: When you create an account, we collect your name, email address, and password.
- Profile Information: Optional information such as company name and role.
- Communication Data: When you contact us, we collect the information you provide in your messages.
Information Collected Automatically
- Usage Data: Information about how you use our services, including features accessed and actions taken.
- Device Information: Browser type, operating system, and device identifiers.
- Log Data: IP address, access times, and pages viewed.
Information from Third Parties
- OAuth Providers: If you sign in via Google or other OAuth providers, we receive your name and email.
- Slack/Teams: When you connect Slack or Microsoft Teams, we access only the channels and permissions you explicitly authorize.
How We Use Your Information
We use your information to:
- Provide, maintain, and improve our services
- Process transactions and send related information
- Send technical notices and support messages
- Respond to your comments and questions
- Monitor and analyze usage patterns
- Detect, prevent, and address technical issues
Legal Basis for Processing
We process your personal data on the following legal grounds under GDPR:
| Purpose | Legal Basis |
|---|---|
| Providing and maintaining our services | Contractual necessity (Art. 6(1)(b)) |
| Processing transactions | Contractual necessity (Art. 6(1)(b)) |
| Account management and authentication | Contractual necessity (Art. 6(1)(b)) |
| Technical notices and support | Legitimate interest (Art. 6(1)(f)) |
| Usage monitoring and analytics | Legitimate interest (Art. 6(1)(f)) |
| Detecting and addressing technical issues | Legitimate interest (Art. 6(1)(f)) |
| Retaining billing records | Legal obligation (Art. 6(1)(c)) |
| Marketing communications | Consent (Art. 6(1)(a)) — opt-in only |
Data Sharing
We do not sell your personal information. We may share information:
- With service providers who assist in our operations (hosting, analytics)
- To comply with legal obligations
- To protect our rights and the rights of others
- With your consent
Data Security
We implement appropriate technical and organizational measures to protect your data, including:
- Encryption in transit (TLS) and at rest
- Regular security assessments
- Access controls and authentication
Data Retention
We retain your data for as long as your account is active or as needed to provide services. Specific retention periods:
| Data Category | Retention Period |
|---|---|
| Account data (name, email) | Duration of account + 30 days |
| Authentication data (sessions, tokens) | Duration of account |
| Ask query content | Deleted after delivery; Slack message deleted per your preference (immediate, 1 hour, or 24 hours) |
| Usage data (API requests, feature usage) | 12 months |
| Billing references | 7 years (legal requirement) |
Upon account deletion, personal data is removed within 30 days, except where retention is required by law. You can request deletion of your data at any time.
Your Rights
Depending on your location, you may have the right to:
- Access your personal data
- Correct inaccurate data
- Delete your data
- Object to processing
- Data portability
- Withdraw consent
Cookies
Marketing Website (lassare.com): This website does not use cookies for tracking or analytics. The only cookies that may be set are by Cloudflare Turnstile (contact form protection), which are strictly necessary security cookies.
Customer Portal (portal.lassare.com): Essential cookies are used for authentication and session management. We do not use tracking cookies or third-party advertising cookies.
International Transfers
Your data may be transferred to and processed in countries outside your country of residence, including the United States, where our infrastructure and sub-processors operate:
- Amazon Web Services (AWS) — cloud infrastructure (US)
- Stripe — payment processing (US/EU)
- Slack Technologies — notification delivery (US)
- Microsoft Corporation — Teams notification delivery (US/EU)
These transfers are protected by Standard Contractual Clauses (SCCs) approved by the European Commission, the UK International Data Transfer Addendum where applicable, and supplementary measures including encryption in transit and at rest.
Children’s Privacy
Our services are not directed to children under 16. We do not knowingly collect data from children.
Changes to This Policy
We may update this policy from time to time. We will notify you of significant changes via email or through our services.
Contact Us
For questions about this Privacy Policy, contact us at:
Email: hello@lassare.com
Company: Stooj S.r.l. Registered Office: Quartu Sant’Elena (CA), Sardinia, Italy VAT (P.IVA): 03932870920