How your evidence and personal data are handled
Definition: This policy states what personal data STRATAFORM processes to establish decision confidence on a property, on what legal basis, for how long, and how you exercise your rights. It covers the guided Journey and the Property Decision Dossier it produces.
Chainplug Srl (VAT IT06730770481) is the controller. This policy follows Regulation (EU) 2016/679 and describes processing in plain terms before the legal detail.
Responsible entity
The entity responsible for this service, and for the processing of personal data connected to it, is:
Chainplug Srl — Via dei Colatori 12 — 50019 Sesto Fiorentino (FI), Italia. VAT IT06730770481. REA FI-651684. hello@chainplug.ai · chainplug@legalmail.it.
Given the nature and scale of the processing carried out, Chainplug Srl is not required to appoint a Data Protection Officer under Article 37 GDPR. Every request may be sent to the contact address above.
Personal data processed
Account data: email address, name where provided, authentication identifiers.
Property inputs: listing links, property details and answers you provide.
Payment data: handled directly by the payment provider. We retain transaction references and entitlement status only.
Technical data: IP address in server logs, browser and device information, language preference.
Usage data: pages opened and actions taken inside the service.
Purposes and legal bases
Delivering the service: Opening records, gathering evidence, producing conclusions and granting access. Legal basis: performance of a contract, Art. 6(1)(b) GDPR.
Payments and accounting: Processing payments and keeping accounting records. Legal bases: performance of a contract and legal obligation, Art. 6(1)(b) and 6(1)(c) GDPR.
Security and abuse prevention: Protecting accounts and infrastructure. Legal basis: legitimate interest, Art. 6(1)(f) GDPR.
Service communications: Sending the messages required to run the service. Optional messages are sent only with consent, Art. 6(1)(a) GDPR, and consent can be withdrawn at any moment.
Processors and recipients
Personal data is disclosed only to providers appointed as processors under Art. 28 GDPR: cloud hosting and database infrastructure, payment processing, transactional email delivery, and the model providers used to draft language inside a record. Data is never sold and never used for advertising.
Where a provider processes data outside the European Economic Area, the transfer relies on the European Commission’s Standard Contractual Clauses together with the additional measures required by Chapter V GDPR.
Retention
Account data: for as long as the account exists, then deleted within thirty days of closure.
Records and their evidence: ten years, so that a decision taken today remains verifiable tomorrow.
Accounting and tax records: ten years, as required by Italian law.
Server logs: twelve months.
Security of processing
Data is encrypted in transit and at rest. Access is denied by default and granted per identity and per record. Every access path is enforced on the server, never in the browser.
Your rights
You may request access, rectification, erasure, restriction, portability, and you may object to processing based on legitimate interest. Where processing rests on consent, you may withdraw it at any time without affecting what came before.
You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Roma) or with the supervisory authority of your country of residence.
No automated decision-making about people
No processing produces legal effects concerning you, or similarly significant effects, within the meaning of Art. 22 GDPR. No profiling and no scoring of individuals takes place.
Contact and requests
Written requests receive a written answer within thirty days. Use the certified address for formal notices and the contact address for everything else.
Chainplug Srl — Via dei Colatori 12 — 50019 Sesto Fiorentino (FI), Italia. VAT IT06730770481. REA FI-651684. hello@chainplug.ai · chainplug@legalmail.it.
Governing law and jurisdiction
Italian law governs this document and the service it describes. Disputes fall to the competent Italian court. Mandatory consumer rights under Italian and European Union law remain untouched, including the right to bring proceedings before the court of your place of residence.
Questions buyers ask
Is payment card data stored?
No. Payment is handled by the payment provider; STRATAFORM receives only the payment status.
Are decisions made about me automatically?
No. Model outputs support a human decision and are reviewed before anything is published as established.
Next step
Exercise your rights — hello@chainplug.ai
Continue on STRATAFORM