Privacy policy
Definitions
Personal Data Regulations – All applicable data protection legislation, particularly Regulation (EU) 2016/679 (“GDPR”).
Personal Data – Any information relating to an identifiable natural person (data subject), such as name, ID number, email, location, IP address, or behavioral data.
Processing – Any operation performed on Personal Data, such as collection, storage, access, transfer, modification, or deletion.
Controller – The legal entity determining the purposes and means of Processing Personal Data.
Recipient – A natural or legal person who receives access to Personal Data, whether a third party or not.
Data Subject (“you”) – Any individual using or subscribing to the Powerpop.ai platform.
Controller
The Controller of your Personal Data is:
Diffservices s.r.o.
Rybna 716
110 00 Prague 1
Czech Republic
VAT ID: CZ05046297
Personal Data Processed
Users/Subscribers (creating a Powerpop account, using trial or subscription)
Identification: name, surname
Contact: professional email, phone number
Log-in: Google account details (if used), cookie/session data
Usage Data: behavioral interaction, event logs, campaign preferences
Prospects (contacting us for demos or newsletters)
Name, email, company, job title
Job Applicants
Identity: name, birth date, nationality
Contact: email, phone, mailing address
Resume & professional data: education, experience, qualifications
Suppliers
Identity and contact info, business registration details, IBAN
Requirement
Some Personal Data is required for contractual purposes (e.g. billing, user login). Without it, access to the Services may be restricted.
Automated Decisions
Powerpop does not perform any automated decision-making within the meaning of Article 22 of the GDPR.
Purpose, Legal Basis, and Retention
Context | Purpose | Legal BasisRetention | Retention
User/Subscriber | Account creation, service delivery | Contract performance | 12 months (User), or contract + 5 years (Subscriber)
Invoicing and payment | Legal obligation (e.g., tax compliance)| As required by applicable law
Marketing, support, and analytics | Legitimate interest | Up to 3 years post-interaction
Prospect |Direct marketing, demos | Legitimate interest |3 years from last contact
Applicant |Recruitment, CV database | Legitimate interest / contract necessity | 2 years
Supplier |Contract, payment, legal obligations | Contract performance | Contract + 5 years; 10 years for invoicing data
Data Recipients and Transfers
Recipients
Your Personal Data is accessible only to authorized Powerpop staff and third-party providers who help us deliver our services, such as:
Hosting (cloud infrastructure)
Payment processing
Customer support
Email and marketing automation
Web analytics (e.g., Google Analytics)
Accounting firms and legal advisors
Recipients
Some providers may be based outside the EU. In such cases, Powerpop ensures appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) and supplementary measures.
Google Services
Powerpop uses Google Ads and Google Analytics to measure and optimize visitor experience. By using Powerpop.ai, you agree to Google's Privacy & Terms.
Your Rights
In accordance with the GDPR, you have the following rights:
Access – Request a copy of your Personal Data.
Rectification – Correct inaccurate or incomplete data.
Erasure – Request deletion when data is no longer necessary or lawful.
Restriction – Limit processing, e.g., during a dispute.
Objection – Object to processing based on legitimate interest.
Portability – Request your data in a structured, machine-readable format.
Post-mortem – Define how your data should be handled after death.
Lodge a Complaint – With the Czech Data Protection Authority (ÚOOÚ).
To exercise your rights, email us at privacy@powerpop.ai or support@powerpop.ai.
Updates
This Privacy Policy may be updated from time to time to reflect legal changes or service updates. We will notify you of material changes. The latest version is always available at https://powerpop.ai/privacy