Privacy Policy

Data controller

The data controller is PETRA IMMOBILIARE SRL, via Capitano Alessio 181/b, 36027 Rosà (VI), Italy — VAT and tax code 03015710241. For anything concerning your data, write to privacy@looprix.com.

Data we collect

• Account data: name, email address and interface language.
• Billing data: company or personal name, address, VAT number and tax code. They are needed to issue your invoice and are not requested before your first purchase.
• Addresses typed into forms: as you type an address, the text is sent to the Geoapify address lookup service, which returns the suggestions.
• Usage data: campaigns created, content uploaded, interactions with displays.
• Payment metadata processed by Stripe. We never receive or store your card details.
• Aggregated, non-identifying browsing data: pages visited, device type, referrer. We use no cookies to collect it and we do not reconstruct any individual's journey.
• Technical browser signals, assessed by the Cloudflare Turnstile anti-abuse system when you sign in or register, to tell a person from an automated program.

Why we use them

• To run the service: creating and managing your account, campaigns and content, and playing the ads on the displays.
• To take payments through Stripe.
• To issue invoices and transmit them to the Italian Interchange System (Sistema di Interscambio) through Fatture in Cloud. Italian electronic invoicing law requires it: the tax data needed for the invoice therefore also reaches the Italian Revenue Agency.
• To check EU VAT numbers against the European Commission's VIES service, where it is needed to apply the correct tax treatment.
• To send you service emails: address confirmation, receipts, campaign alerts, password recovery.
• To prevent abusive automated registrations and sign-ins.
• To meet our accounting, tax and legal obligations.

On what legal basis

• Performance of the contract: account, campaigns, content and payments. Without this data the service cannot be provided to you.
• Legal obligation: issuing, transmitting and retaining fiscal documents.
• Legitimate interest: preventing abuse at registration and sign-in, securing the service, and measuring traffic in aggregate. You may object at any time to processing based on legitimate interest by writing to privacy@looprix.com.

Who else processes your data

We rely on the providers listed here, which process data on our behalf and only for the stated purposes. We do not sell your data and we do not pass it to advertising networks.

• Supabase — database and authentication.
• Stripe — payment processing.
• Fatture in Cloud — invoice issuing and transmission to the Italian Interchange System.
• Cloudflare — anti-abuse system on the sign-in and registration pages.
• Geoapify — address search and completion, on OpenStreetMap data.
• Vercel — website hosting and aggregated traffic measurement.
• Railway — application server hosting.
• Resend — sending service emails.

Transfers outside the European Union

Some of the providers listed above are based on, or run infrastructure, outside the European Union, in particular in the United States. In those cases the transfer relies on the safeguards of Chapter V of the GDPR: an adequacy decision of the European Commission, or standard contractual clauses agreed with the provider.

How long we keep them

Some of these periods are not a case-by-case decision of ours: they are automatic deletions, carried out by the system.

• Account data and content: for as long as the account exists. When it is deleted they are removed, except for what the law requires us to keep.
• Registrations never confirmed: deleted automatically after 7 days.
• Display pairing requests: deleted automatically on expiry, every hour.
• Technical identifiers of the playback data batches sent by displays: deleted automatically after 90 days.
• Invoices and fiscal documents: kept for ten years, as Italian law requires.

Cookies and local storage

We use no advertising, profiling or tracking cookies. The only things stored on your device are those needed to let you use the service: the technical cookies that keep you signed in and remember your chosen language; the temporary save of the campaign you are composing, so it is not lost on the way through payment; the memory of a notice you have already dismissed; and an anti-abuse token, stored by Cloudflare under its own domain and usable only on this site. Traffic measurement is aggregated and stores nothing on your device. This is why we show you no consent banner: nothing we store falls outside what is strictly necessary for the service you asked for.

Your rights

You may at any time ask to access your data, to correct it, to erase it, to restrict its processing, to receive it in a format another service can read (portability), and to object to processing based on our legitimate interest. If you believe your data is being processed unlawfully, you may also lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it).

How to contact us

To exercise your rights, or for any question about this policy, write to privacy@looprix.com. We reply within one month, as the GDPR provides.