Privacy at CUTO

Controller and contact

CUTO Technology, LLC is the controller for the own purposes described in this notice.

Serviceable address

Privacy contact

What this notice covers

It applies to the public CUTO website, contact and demo requests, registration and sign-in, account and business-relationship administration, and privacy, support, security and procurement requests where CUTO determines the purposes and means of processing.

Data, purposes and sources by interaction

The data involved depends on how you use CUTO. The following information separates each interaction.

Visiting the website

Connection, request and security data transmitted by your browser or network when accessing the site.

Deliver the website, detect errors and prevent misuse.

Your browser, device and participating networks.

Legal basis

Contact, demo or procurement

Contact details, company, role, selected request type and the content you send us.

Handle, route and answer your request and prepare a requested business relationship.

You or a person acting on your behalf.

Legal basis

Registering, signing in and recovering an account

Account, identity, verification, authentication, session and recovery data, plus security-relevant technical data.

Provide your account, verify identity, secure sessions and recover access.

You, a customer administrator and system events generated during use.

Legal basis

Administering accounts, organizations and projects

Identity, role, organization, project, invitation and administrative usage data.

Administer memberships, roles, permissions and organizational access to the service.

You, customer administrators and the service.

Legal basis

Contracts and billing

Business contact, contract, invoice, payment and tax-related data.

Prepare and perform contracts, bill services and maintain legally required records.

You, your organization and involved payment or billing parties.

Legal basis

Handling privacy requests

Contact, request, identity and representation data to the extent needed for secure handling.

Route your request, verify identity and authority, manage deadlines and document the response.

You or an authorized representative.

Legal basis

Recipients, processing locations and international transfers

Personal data is available only to internal teams and external providers that need it for the relevant purpose. The published information identifies recipient categories, processing locations and, where relevant, the third country, applicable safeguard and route to further information.

The detail table identifies the actual recipients, countries and applicable safeguards for each processing activity, together with the route for obtaining further information.

Retention and deletion

We retain personal data only for as long as required by the relevant purpose, an applicable retention obligation, or the establishment, exercise or defense of legal claims. The data is then deleted or anonymized under the applicable deletion rules; documented expiry periods apply to backup copies.

Your privacy rights

Subject to the applicable conditions, you may request access, rectification, erasure, restriction, data portability and objection. Where processing is based on your consent, you may withdraw it with effect for the future.

Send your request to our privacy contact. Before handling it, we verify your identity and, if you act for another person, your authority.

You also have the right to lodge a complaint with a competent data protection supervisory authority.

Cookies and similar technologies

The Cookie Notice explains which strictly necessary and optional analytics functions the public website uses and how to change your choice.

Effective date and changes

This version applies from the date shown below. We update it when relevant purposes, data categories, recipients, locations, retention rules or legal assessments change. Earlier versions are kept in a versioned archive.

Effective from

Version