Privacy Policy
Privacy Policy — ProcuChain GO
Data Controller: Fabulosos SRL · Jurisdiction: RO Identification: 33968578 · Office: Str. Valea Oltului, nr. 8, Bl. A6, Ap. 36, Sector 6, București, RO Version: v2.2 · Effective from: 31 May 2026 · DPO contact: dpo@4pro.io
1. Who we are
Fabulosos SRL ("we", the "Controller"), with its office at Str. Valea Oltului, nr. 8, Bl. A6, Ap. 36, Sector 6, București, RO, is the controller of personal data processed through the ProcuChain GO platform (procuchain.com). As an entity established in Romania (European Union), processing complies with Regulation (EU) 2016/679 (GDPR) and applicable Romanian data-protection law.
2. What data we process
- Account and business data: name, business email, phone, organization, role, password (stored using hashing functions).
- Usage data: logs, in-Platform actions, Connector configurations.
- Data imported via Connectors: products, orders, stock, suppliers — which may occasionally contain contact details of the Tenant's customers.
- Billing data: needed to issue invoices and process payment.
- Technical data: IP address, device type, needed for security and operation.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Providing the Platform and account | Performance of contract |
| Synchronizing data via Connectors | Performance of contract / legitimate interest |
| Billing and financial obligations | Legal obligation |
| Security, fraud prevention | Legitimate interest |
| Commercial communications (if any) | Consent |
4. Who we share data with (sub-processors and recipients)
| Sub-processor / source | Service | Processing location |
|---|---|---|
| E-commerce platforms (Shopify, WooCommerce, Salla, Zid, Noon, Amazon) | Data sources via Connectors | Per each platform |
| Hosting/infrastructure provider | Servers, database, storage | EU / EEA |
| Payment processors | Subscription payment processing | Per processor |
| AI / analytics providers | Demand forecasting (no unnecessary identifiers) | Per provider (SCCs where applicable) |
We do not sell data. Current list: legal.knowbest.ro/en/sub-processors/procuchaingo2.
5. Retention periods
We retain data for the duration of the contract. Upon termination, data is deleted or anonymized within a reasonable period after the export window, except financial records (tax law) and data needed to defend a legal claim.
6. Data subject rights
You have the rights of access, rectification, erasure, restriction, portability and objection, under the GDPR. For data imported via Connectors that belongs to a Tenant's customers, requests are generally addressed to the Tenant (the controller of that data). Contact: dpo@4pro.io or legal.knowbest.ro.
7. Data security
We apply appropriate technical and organizational measures: encryption in transit (TLS), passwords stored using hashing functions, role-based access control, multi-tenant isolation, logging and backups.
8. International transfers
Fabulosos SRL is an entity established in Romania (European Union), and the GDPR applies directly to its processing. Data is primarily stored and processed within the European Economic Area (EEA).
Transfers to third countries (outside the EEA) may arise only at the level of certain sub-processors (for example, AI or hosting providers located outside the EEA, such as US-based providers). In such cases, transfers are protected by an appropriate mechanism under Chapter V of the GDPR: the EU-US Data Privacy Framework where the provider is certified, or the EU Standard Contractual Clauses under Decision (EU) 2021/914, supplemented with additional measures where necessary.
9. Cookies
We use strictly necessary cookies (authentication, security) and, with consent, analytics cookies. Details in the Cookie Policy.
10. Contact and supervisory authority
Questions or complaints: dpo@4pro.io. Data subjects in the European Union have the right to lodge a complaint with the competent supervisory authority under Article 77 of the GDPR. For Romania, the competent authority is the National Supervisory Authority for Personal Data Processing (ANSPDCP).
11. Changes
We may update this Policy; material changes are notified. Published versions: legal.knowbest.ro/en/privacy/procuchaingo2.