HolyWater Reports Privacy Policy
Important privacy information
To use the Service, you sign in with your email address or your Google account. We also automatically receive technical data from your browser, such as your IP address, browser type and the time of access. We need this data to confirm that you are allowed to access the Service and to keep it secure.
We host the Service with third-party cloud providers, so some data is stored and processed on their servers. We do not use your data for advertising and we do not sell it.
Please read the Privacy Policy below to learn what we do with your data (Section 3), which privacy rights you have (Section 6) and who the data controller is (Section 1). If you have questions, contact us at analytics.team@holywater.tech.
This Privacy Policy explains what personal data is collected when you use HolyWater Reports, a web application that gives authorized users access to analytics reports (the "Service"), and how that data is processed.
By using the Service, you confirm that you have read and understood this Privacy Policy and that you are over 16 years of age. If you do not agree, do not use the Service.
"GDPR" means the General Data Protection Regulation (EU) 2016/679. "EEA" includes all current member states of the European Union and the European Free Trade Association. For the purpose of this policy, the EEA includes the United Kingdom. "Process", in respect of personal data, includes to collect, store and disclose to others.
1. Personal data controller
Holy Water Limited, a legal entity under the laws of Cyprus, with its registered office at Kypranoros 13, EVI BUILDING, 2nd floor, Flat/Office 201, 1061, Nicosia, Cyprus, and its affiliates (as may be applicable), will be the controller of your personal data.
2. Categories of personal data we collect
Data you give us
Your email address, which you enter to receive a sign-in link. You may also give us your email when you contact us.
Data provided by third parties
When you sign in with Google, we receive your email address and a Google account identifier from your Google Account. We do not request access to any other Google data. You can revoke the access you gave us on your Google Account's permissions page.
Data we collect automatically
Device and log data. IP address, browser type and version, operating system, the pages you request, and the date and time of access.
Cookies. After you sign in, we set cookies that keep you signed in for a limited period. These cookies are strictly necessary for the Service to work. We do not use advertising or analytics cookies.
3. For what purposes we process your personal data
To provide our Service
We use your email address or Google account to authenticate you, to check that you are authorized to access the Service, and to send you sign-in links. We use cloud hosting, authentication and email delivery services from third-party providers (such as Google Cloud) to do this.
To keep the Service secure and working
We use log data to prevent unauthorized access, investigate misuse, and fix errors and technical issues.
To communicate with you
We may email you about your access to the Service, security matters, or changes to these documents.
To enforce our Terms of Service and comply with legal obligations
We may process or disclose data to enforce our agreements, to prevent fraud and unauthorized use, or when the law requires it.
4. Under what legal bases we process your personal data
This section applies only to users based in the EEA. We process your personal data:
- to perform our contract with you or your organization, to provide the Service and communicate with you about it;
- for our legitimate interests, to keep the Service secure, to restrict access to authorized people, and to enforce our Terms of Service, unless those interests are overridden by your interests or fundamental rights;
- to comply with legal obligations.
5. With whom we share your personal data
Service providers. We share personal data with providers that host the Service, authenticate users and deliver email on our behalf and under our instructions, such as Google Cloud and Google Workspace.
Law enforcement agencies and other public authorities. We may disclose personal data to protect our rights and safety, or those of others, and to respond to lawful requests from courts, law enforcement and other authorities.
Third parties as part of a merger or acquisition. We may share information with affiliated entities, or transfer it as part of a corporate transaction such as a merger, sale of assets or reorganization.
Google user data. HolyWater Reports' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
6. How you can exercise your privacy rights
- Accessing, reviewing and correcting your personal data. You may ask us for a copy of your personal data and ask us to correct it.
- Deleting your personal data. You can request erasure of your personal data as permitted by law. Deleting your data ends your access to the Service.
- Objecting to or restricting the use of your personal data. You can ask us to stop using all or some of your personal data, or to limit our use of it.
Additional information for EEA-based users. You also have the right to data portability and the right to lodge a complaint with a data protection supervisory authority, in particular in the EU Member State where you live or work.
To exercise any of these rights, email analytics.team@holywater.tech.
7. Age limitation
We do not knowingly process personal data of anyone under 16. If you learn that someone younger than 16 has given us personal data, please contact us.
8. International data transfers
We may transfer personal data to countries other than the one where it was collected, including the United States, to provide the Service. When we transfer personal data from the EEA to countries without an adequate level of data protection, we rely on the Standard Contractual Clauses approved by the European Commission or on the Commission's adequacy decisions.
9. Changes to this Privacy Policy
We may modify this Privacy Policy from time to time. If we make material changes, we will notify you by available means such as email. By continuing to use the Service after the changes take effect, you agree to the revised Privacy Policy.
10. U.S. states privacy notice
If you live in a U.S. state with consumer privacy laws, you may have the right to know what personal information we collect, and to request access to it, correction of it or deletion of it. We collect identifiers (email address, account identifier, IP address) and internet activity (log data), only for the purposes described in Section 3. We do not sell or share personal information for targeted advertising, and we do not use sensitive personal information. To make a request, email analytics.team@holywater.tech. You will not be discriminated against for exercising these rights.
11. Data retention
We keep your personal data for as long as reasonably necessary for the purposes in this Privacy Policy. In practice, that is for as long as you are authorized to use the Service, plus any period needed to comply with legal obligations, resolve disputes and enforce our agreements.
12. Contact us
You may contact us at any time about this Privacy Policy at analytics.team@holywater.tech.