Privacy Policy

Last updated: May 2026

1. Data Controller

GiaNet Media di Francesco Giannetta, based in Otranto (LE), Italy. Privacy contact: support system.

2. Service

NotifyHub (notify.trovido.com) is a multi-channel notification SaaS platform enabling message delivery across 8 channels: WhatsApp, Telegram, Email, Push, Discord, Slack, Messenger, and Instagram DM. The platform includes AI features (message classification, conversational assistant, knowledge base) and a multi-tenant workspace system.

3. Data We Collect

3.1 Account data

Name, email, password (hashed), language preferences, billing information.

3.2 Recipient data

Depending on channels used by the customer:

• WhatsApp/Messenger/Instagram DM: phone numbers, platform user IDs
• Telegram: Telegram user IDs, usernames
• Email: recipient email addresses
• Push: browser subscription tokens
• Discord/Slack: channel IDs, webhook URLs

3.3 Message content

Message content is retained for delivery logs and conversational inbox features. Messages are deleted according to plan retention (30-365 days).

3.4 AI data

The AI Router classifies incoming messages for automatic routing. The conversational assistant processes messages to generate responses. Documents uploaded to the Knowledge Base are indexed for RAG (Retrieval-Augmented Generation). No data is used to train third-party models.

3.5 Technical data

IP address, user-agent, access logs, action timestamps, HMAC tokens for callbacks.

4. Legal Basis

• Art. 6(1)(b) GDPR: performance of the service contract
• Art. 6(1)(c) GDPR: legal and tax obligations
• Art. 6(1)(f) GDPR: legitimate interest (security, abuse prevention, service improvement)

5. Data Retention

Delivery logs and message content are retained based on plan tier: Free 30 days, Pro 90 days, Agency 180 days, Agency+ 365 days. Account data is retained for the duration of the contractual relationship plus 10 years for tax obligations.

6. Data Processors

• Hetzner Online GmbH (hosting, Germany)
• Stripe Inc. (payments)
• Meta Platforms (WhatsApp Business API, Messenger, Instagram DM)
• Telegram FZ-LLC (Telegram Bot API)
• Discord Inc. / Slack Technologies (webhooks)
• AI providers: OpenAI, Anthropic, Google (for AI features, when enabled)

7. International Transfers

Some sub-processors are based in the USA. Transfers rely on EU Standard Contractual Clauses (SCCs) and/or the EU-US Data Privacy Framework.

8. Workspace Data Isolation

Each workspace is logically isolated. Members of one workspace cannot access data from other workspaces. Roles (owner, admin, member) control access levels.

9. Your Rights

Access, rectification, erasure, portability, restriction, objection. Contact: support system. You may also lodge a complaint with the Italian Data Protection Authority (Garante).