How we handle personal data
Privacy Policy
Last updated: September 19, 2026
Scope
This policy covers the Aequo marketing website (aequohr.in) and the Aequo platform operated by NAVMEDA GmbH — both the central account/billing layer and each tenant's own workspace. It explains what we process as the operator of the service. It does not cover how a customer company processes its own employees' data once entered into Aequo — see "Controller and processor" below.
Data controller
NAVMEDA GmbH, Frohsinnstraße 29, 63739 Aschaffenburg, Germany, is the controller for the processing described in this policy. Reach our data protection contact at legal@aequohr.in.
Controller and processor — two different roles
When you visit this website, request a demo, or manage your own Aequo subscription and billing, NAVMEDA GmbH is the data controller. Once your company ("tenant") starts entering employee records into Aequo, your company is the data controller for that employee data — NAVMEDA GmbH acts only as a processor, under a Data Processing Agreement (Art. 28 GDPR), following your instructions. This policy describes our own processing as controller; how your company handles its employees' data is governed by your organization's internal privacy notice, not this page.
What we process
As controller, we process: contact details you give us (name, email, company, phone) when you request a demo, start a trial, or contact sales, support, legal, or security; account and billing data for your subscription (billing contact, invoice history, subscription status — full card details are handled by Stripe, our payment processor, and never reach our systems); and technical/usage data (IP address, browser, pages visited) generated by using this website.
Legal bases
We rely on Art. 6(1)(b) GDPR (performing your subscription contract) for account and billing processing, Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries and keeping this site secure) for contact-form and technical data, and Art. 6(1)(a) GDPR (consent) for any optional marketing communications, which you can withdraw at any time.
Data location
Our infrastructure runs in the EU. The Aequo platform is architected database-per-tenant, so each customer's employee data lives in its own isolated database rather than a shared table — see our Security page for the full technical detail.
Retention
Contact and lead data is kept for as long as needed to respond and follow up, and deleted after 24 months of inactivity. Billing records are kept for the statutory German commercial and tax retention periods (currently up to 10 years). Within the Aequo platform itself, each tenant controls retention and legal holds for its own employee data using the product's built-in retention tooling.
Sub-processors and transfers
We use a limited set of sub-processors for hosting, payment processing (Stripe), and transactional email delivery. A current list is available on request — see the Security page's sub-processors section or email legal@aequohr.in. Any transfer outside the EU/EEA is covered by appropriate safeguards (e.g. Standard Contractual Clauses).
Your rights
Under Arts. 15–21 GDPR you have the right to access, rectify, erase, or restrict processing of your personal data, to receive it in a portable format, and to object to processing based on legitimate interest. You also have the right to lodge a complaint with a supervisory authority — in Germany, the data protection authority for the state of Bavaria. To exercise any of these rights against us as controller, email legal@aequohr.in.
Cookies
This website does not use third-party advertising or cross-site tracking cookies. We use only strictly necessary cookies — for example, to remember your language preference and, once you're signed in, to keep your session secure.
Changes to this policy
We may update this policy as our processing changes. We'll update the date at the top of this page, and notify active customers by email of any material change.
Contact
Questions about this policy or your data: legal@aequohr.in, or NAVMEDA GmbH, Frohsinnstraße 29, 63739 Aschaffenburg, Germany.