CinnaLab Privacy Policy

1. Who we are

CinnaLab.io is operated by Cinnamon Consulting SL, registered in Andorra la Vella, Andorra. We provide AI-powered Partner Relationship Management (PRM) software for SaaS companies. When you use our website or platform, we are the data controller.

You can contact our data team at support@cinnalab.io.

2. What data we collect

We collect data you provide directly and data generated by your use of the service:

• Account data: name, work email, company name, job title, phone number.
• Usage data: pages visited, features used, clicks, session duration, browser and device type.
• Partner program data: partner details, deal records, training completions, commission information.
• Communications: emails, support messages, and demo request information.
• Payment data: handled by PayPal. We do not store card numbers directly — all payment processing is managed securely through PayPal.

3. How we use your data

We use collected data to:

• Provide, operate, and improve the CinnaLab.io platform.
• Send transactional emails (onboarding, deal notifications, billing).
• Provide customer support and respond to enquiries.
• Send product updates and marketing communications (with your consent).
• Comply with legal obligations.

4. Legal basis (GDPR)

For users in the EEA, we rely on the following lawful bases:

• Contract performance: processing necessary to deliver the service you have subscribed to.
• Legitimate interests: product analytics, security, fraud prevention.
• Consent: marketing emails and non-essential cookies.
• Legal obligation: compliance with applicable laws.

5. Data sharing

We do not sell your personal data. We share data only with trusted sub-processors required to operate the service, including: cloud hosting (Render), email delivery (Resend), analytics, and payment processing (PayPal). All sub-processors are contractually bound to GDPR-compliant data handling.

6. Data retention

We retain account data for the duration of your subscription plus 2 years, unless a shorter period is required by law. You may request deletion of your data at any time by contacting us.

7. Your rights

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your data ("right to be forgotten").
• Object to or restrict certain processing.
• Data portability — receive your data in a machine-readable format.
• Withdraw consent at any time for consent-based processing.

8. Cookies

We use essential cookies (required for the service to function) and analytics cookies (to understand usage). You can manage cookie preferences via the banner on your first visit. We do not use advertising cookies.

9. Contact

To exercise your rights or ask questions about this policy, email support@cinnalab.io.

Questions about this policy? Contact us at support@cinnalab.io