Privacy Policy — Podiyem

Last updated: 2026-09-21 Effective date: 2026-09-21

1. Introduction

1.1 This Privacy Policy explains how Dabe Softwares LLC, a Wyoming limited liability company doing business as Podiyem ("Podiyem", "we", "us", or "our"), collects, uses, discloses and protects personal data in connection with:

our public website at podiyem.com (the "Website");
the Service; and
Public Share Links.

This Privacy Policy is intended to apply globally. Depending on where you are located or where personal data is processed, additional or different requirements may apply under local privacy and data-protection law. Where applicable law provides additional rights or protections, we will comply with those requirements to the extent they apply to our processing.

Capitalised terms used but not defined in this Privacy Policy have the meanings given to them in the Podiyem Terms & Conditions.

1.2 Our roles. Our role depends on the personal data, processing activity and applicable law.

We generally act as a controller, business or equivalent responsible entity for personal data relating to:

Website visitors;
people who contact us;
Account holders and Authorised Users; and
Account administration, subscriptions, billing, security, legal compliance and our own operational activities.

We generally act as a processor, service provider or equivalent processing entity on behalf of a Customer for:

personal data contained in Customer Content; and
Viewer engagement data processed through Public Share Links on the Customer's behalf.

References in this Privacy Policy to "controller" and "processor" include equivalent concepts under applicable law where appropriate.

1.3 Viewers. If you are a Viewer, the Customer that sent or made the Public Share Link available generally determines why the relevant Pitch is published and why associated Viewer analytics are used.

Podiyem generally processes that data on the Customer's behalf, although Podiyem may separately act as controller or equivalent for limited processing carried out for its own security, fraud-prevention, legal or operational purposes where permitted by applicable law.

Questions concerning Customer-controlled processing should normally be directed to the relevant Customer. You may also contact us at [email protected] and, where appropriate, we will assist or refer the request to the relevant Customer.

1.4 Website visitors. If you only browse the Website and do not create an Account, the provisions concerning Website visitors, cookies and enquiries apply to you. Provisions concerning Accounts, Workspaces and Customer Content apply where relevant once you register for, or are invited to, the Service.

2. Personal Data We Collect

2.1 Website visitors

When you use the Website, we and our service providers may process:

IP address;
browser and device information;
referring URL;
pages requested;
timestamps;
server and security logs;
information submitted through contact forms, including name, email address, firm name and message;
technical information associated with requests for externally hosted resources such as Google Fonts; and
where permitted and any required consent has been obtained, Website analytics information collected through Google Analytics.

We do not currently use advertising or social-media pixels or use personal data collected through the Website for cross-context behavioural advertising.

If this changes, we will update this Privacy Policy and implement any notice, consent or other mechanism required by applicable law.

2.2 Account and profile data

When an Account is created or used, we may process:

first and last name;
email address;
password, stored only as a salted hash;
Account role and Workspace membership;
email-verification information and associated tokens;
password-reset information;
login, authentication and session information;
Subscription Plan, trial and Account-administration information; and
two-factor authentication information where enabled.

2.3 Workspace and company data

Customers and their Authorised Users may provide information about their organisation within a Workspace, including company name, branding, address and contact information, website and other organisational information.

Where this contains personal data supplied by a Customer for use within a Workspace, Podiyem generally processes that information on the Customer's behalf.

Podiyem separately processes Subscription Plan, billing, trial and related administrative information where necessary for its own contractual, billing and operational purposes.

Where the applicable Subscription Plan includes audit or activity functionality, the Service may maintain logs recording actions taken by Authorised Users within a Workspace.

2.4 Billing and payment data

Purchases of paid Subscription Plans are made through Paddle, which acts as Podiyem's authorised reseller and Merchant of Record.

Podiyem does not itself store full payment-card numbers.

Paddle may independently process information including name, email address, billing address, payment details, transaction information, fraud-prevention information and tax information in accordance with its own Privacy Notice:

https://www.paddle.com/legal/privacy

Paddle may share with Podiyem limited buyer and transaction information, including contact details, subscription and transaction information, purchasing history and related transactional information, as necessary to provide and administer the Service.

Podiyem may process this information to activate and administer Subscription Plans, maintain appropriate business and accounting records, provide support and manage its relationship with Customers.

2.5 Customer Content

Customer Content may include:

Projects and case studies;
client and prospective-client information;
sectors, countries, regions and other locations;
dates, contract values and currencies;
descriptions, narratives and milestones;
images;
Pitches;
company, experience and geographic information;
uploaded files, logos and associated metadata; and
other information selected by Customers or Authorised Users for inclusion in a Workspace or material generated through the Service.

Customer Content may contain personal data relating to clients, prospective clients, employees or other third parties, as well as confidential or commercially sensitive information.

The Customer determines what Customer Content is submitted and, subject to applicable law, the purposes for which Customer-controlled personal data is processed.

Podiyem does not use Customer Content to train generative artificial-intelligence or machine-learning models unless expressly agreed with the Customer in writing.

2.6 Spreadsheet imports

Where an Authorised User imports Projects from a CSV or Excel file, the source file is read locally in the browser and is not uploaded to Podiyem as a file. Only records selected or confirmed for import are transmitted to and stored by the Service.

2.7 Public Share Link analytics

When a Viewer opens a Public Share Link, the Service may process:

the date and time of a view;
a browser-generated session identifier;
return activity associated with that identifier;
where enabled, information about progression through or interaction with the Pitch;
engagement indicators or scores derived from that activity; and
technical server information, potentially including IP address, user agent and request metadata.

The analytics functionality does not, by itself, require a Viewer to create an Account or provide Podiyem with a name or email address.

Session identifiers, IP addresses and associated activity may nevertheless constitute personal data or an equivalent regulated category of information under applicable law.

Customers may be able to view activity associated with a particular session through engagement or visitor drill-down functionality.

2.8 Technical and security data

When the Service is used, we may process logs, diagnostic information, IP addresses, browser and device information and technical identifiers to operate, maintain, troubleshoot and secure the Service and prevent fraud, abuse or unauthorised access.

2.9 Communications and enquiries

We process information submitted through support requests, emails, Website forms and other communications with us to respond to enquiries, provide support and administer our relationship with the relevant person or Customer.

2.10 Sensitive personal data

The Service is not designed for the storage or processing of special-category, sensitive or similarly protected personal data.

Customers should not submit such information unless Podiyem has expressly agreed otherwise in writing and appropriate legal and technical safeguards have been implemented.

3. How and Why We Process Personal Data

The legal grounds on which personal data may be processed differ between jurisdictions.

Depending on applicable law and the circumstances, processing may be based on:

performance of a contract;
legitimate interests or an equivalent lawful basis;
consent;
compliance with legal obligations; or
another basis recognised by applicable law.

Where Podiyem acts as processor, service provider or equivalent on behalf of a Customer, we generally process Customer-controlled personal data on the Customer's documented instructions, and the Customer is responsible for establishing the lawful basis applicable to its processing.

Where GDPR or UK GDPR applies, our principal legal bases may include performance of a contract, legitimate interests, consent and compliance with legal obligations, as appropriate.

Where another national or regional privacy law applies, we rely on the legal basis or condition for processing recognised under that law.

We process personal data for purposes including:

creating and administering Accounts;
authenticating Authorised Users;
providing and operating the Service;
processing Customer Content on Customers' behalf;
providing Public Share Link functionality and Viewer analytics;
administering Subscription Plans, trials and billing;
providing customer support;
securing the Website and Service;
detecting fraud, misuse and unauthorised access;
diagnosing technical errors;
responding to enquiries;
sending transactional and service communications;
sending marketing communications where permitted;
complying with legal obligations; and
establishing, exercising or defending legal claims.

We do not process Customer-controlled personal data for materially different independent purposes except where permitted or required by applicable law or expressly agreed with the Customer.

4. Service Providers and Sub-processors

We use third-party providers to help us operate the Website and Service.

Provider categories may include:

application and Website hosting;
database hosting;
cloud object storage;
transactional email;
diagnostics and error monitoring;
Website analytics; and
payment and transaction services.

Where a provider processes personal data on our behalf, we implement contractual or other safeguards required by applicable law.

Where Podiyem acts as processor, providers engaged to process Customer-controlled personal data on our behalf may act as sub-processors or their equivalent under applicable law.

A current list of material sub-processors used in connection with Customer-controlled personal data, including relevant processing locations, is available on request at [email protected] and, where applicable, under our DPA.

Paddle may act as an independent controller or equivalent regulated entity for payment, fraud-prevention, tax and compliance activities. Paddle's Privacy Notice is available at:

https://www.paddle.com/legal/privacy

We do not sell personal data and do not currently use personal data for cross-context behavioural advertising.

5. Cookies and Similar Technologies

5.1 Service. We use cookies, browser storage and similar technologies necessary for authentication, sessions, Account security and Service functionality.

5.2 Public Share Links. When a Viewer opens a Public Share Link, Podiyem may store or access a browser-generated session identifier on the Viewer's device to distinguish sessions, recognise return activity and provide engagement analytics.

The identifier is not used by Podiyem for advertising.

Depending on the Viewer's location and applicable law, storing or accessing information on the Viewer's device or using that information for analytics may require notice, consent or another legal basis.

The Customer is responsible for legal requirements arising from its decision to use Public Share Links and Viewer analytics, including notices and consents that applicable law requires the Customer to provide or obtain.

Podiyem remains responsible for legal requirements that apply directly to Podiyem or to technologies operated by Podiyem and that cannot lawfully be transferred to the Customer.

5.3 Website. Optional Website analytics cookies and similar technologies are used only where permitted under applicable law and any required consent has been obtained.

Technical server logs may be processed independently of optional analytics technologies where necessary to operate and secure the Website.

5.4 Choices. Where applicable, you may manage optional cookie preferences through the Website's cookie controls or your browser.

Blocking cookies or browser storage necessary for the Service may prevent certain functionality from operating.

6. Disclosure of Personal Data

We may disclose personal data:

to service providers, processors and sub-processors used to operate and support the Website and Service;
to Paddle in connection with purchases, subscriptions and related transaction administration;
to Authorised Users according to Workspace roles and permissions;
through Public Share Links where a Customer chooses to publish Customer Content;
to professional advisers, auditors and insurers where reasonably necessary and subject to appropriate confidentiality obligations;
in connection with a merger, acquisition, financing, restructuring or sale of all or part of our business or assets;
where required or permitted by applicable law, legal process or lawful governmental request;
where reasonably necessary to establish, exercise or defend legal rights or protect the security and integrity of Podiyem, the Service, Customers or others; and
with consent or at the direction of the relevant person or Customer.

A Public Share Link may be forwarded beyond its intended recipient. Unless an available access restriction is enabled, anyone who obtains the URL may be able to access the published Pitch.

7. International Processing and Data Transfers

7.1 Podiyem is operated by a United States company. Personal data may therefore be processed in the United States and in other countries in which Podiyem or its service providers operate.

7.2 Where applicable law restricts the transfer, disclosure, storage or remote access of personal data outside a particular jurisdiction, we will use a transfer mechanism, contractual safeguard or other measure required or permitted under that law, to the extent applicable to Podiyem's processing.

Depending on the jurisdiction, these measures may include:

adequacy or equivalent recognised transfer arrangements;
standard contractual clauses or equivalent contractual safeguards;
the European Commission's Standard Contractual Clauses;
the UK International Data Transfer Agreement or UK Addendum;
standard contractual or other transfer safeguards recognised under applicable Middle Eastern data-protection laws; or
another lawful transfer mechanism, exemption or derogation.

7.3 Local transfer and localisation requirements. Customers operating in jurisdictions that impose data-localisation or international-transfer requirements remain responsible for determining whether their use of the Service and submission of Customer Content is permitted under laws specifically applicable to them, their industry or their data.

Podiyem will provide reasonably available information concerning its processing locations and safeguards and will comply with transfer obligations directly applicable to Podiyem.

Where local law requires a specific transfer assessment, contractual mechanism, regulatory approval or other safeguard, additional arrangements may be required before the relevant data is processed or transferred.

8. Data Retention

8.1 We retain personal data only for as long as reasonably necessary for the purposes for which it was processed and to meet applicable legal, accounting, security and dispute-resolution requirements.

8.2 Indicative retention periods. Unless a different period is required by applicable law, contract, legal hold or DPA:

following expiry of a trial or paid subscription, the Workspace ordinarily remains available on a read-only basis for 21 days;
the Workspace may then be locked and Customer Content ordinarily retained for up to a further 90 days for reactivation or data retrieval;
following termination or closure of a Workspace, Customer Content is ordinarily retained for up to 30 days before deletion from active systems;
Public Share Link view events may be retained for up to 12 months;
Website enquiries may be retained for up to 12 months after closure;
server and error logs may be retained for up to 90 days; and
transaction and accounting records are retained for the periods required by applicable law.

We may retain information for longer where required by applicable law, necessary for security or fraud prevention, subject to a legal hold, or reasonably necessary to establish, exercise or defend legal claims.

8.3 Backups. Deleted information may remain temporarily in backup systems until those backups cycle through their normal retention periods.

9. Privacy Rights

9.1 Depending on applicable law, you may have rights including:

to be informed about processing;
to access personal data;
to correct inaccurate personal data;
to request deletion or destruction;
to restrict or object to certain processing;
to withdraw consent;
to receive certain data in a portable format;
to object to or opt out of certain marketing, targeted advertising, sale or sharing activities where applicable;
to request review of certain automated decisions where applicable; and
to complain to a competent privacy or data-protection authority.

The existence and scope of these rights vary by jurisdiction.

9.2 Customer-controlled data. Where Podiyem processes personal data on behalf of a Customer, the Customer is generally responsible for responding to requests relating to that data.

If you submit such a request to Podiyem, we may refer it to the relevant Customer and assist the Customer as required by applicable law and any applicable DPA.

9.3 Exercising rights. Requests concerning personal data for which Podiyem acts as controller or equivalent may be submitted to [email protected].

We may take reasonable steps to verify identity and authority before fulfilling a request and will respond within the period required by applicable law.

9.4 Complaints and appeals. Depending on applicable law, you may have the right to complain to a competent privacy, data-protection or regulatory authority and, in some jurisdictions, appeal a decision made in response to a privacy-rights request.

10. Security

10.1 We implement technical and organisational measures designed to protect personal data against unauthorised or unlawful access, alteration, disclosure, loss or destruction.

These measures may include, as appropriate:

password hashing;
encryption in transit;
protection of authentication information at rest;
token-based authentication;
access controls;
security headers;
rate limiting;
input validation;
logging; and
error monitoring.

10.2 No information system or method of transmission is completely secure.

Authorised Users are responsible for safeguarding Account credentials, and Customers are responsible for deciding what Customer Content is appropriate to publish through Public Share Links and for using available access restrictions where appropriate.

10.3 Personal-data breaches. Where we become aware of a personal-data breach, we will investigate and take appropriate measures to contain, mitigate and address it.

We will notify Customers, affected individuals and/or competent authorities where and within the timeframe required by applicable law or our contractual obligations.

Where Podiyem acts as processor, we will provide the relevant Customer with information and assistance required under applicable law and any applicable DPA.

11. Children's Privacy

The Service is a business-to-business service intended for professional and commercial use.

An individual must be at least 18 years old, or the applicable age of legal majority if higher, to create an Account.

We do not knowingly permit children to create Accounts.

12. Marketing Communications

We send marketing communications only where permitted by applicable law.

Where consent is required, we will obtain it before sending the relevant communication.

You may opt out of marketing communications at any time. This does not prevent transactional, billing, security or Service-related communications.

13. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to the Service, processing activities, service providers or applicable law.

We will publish the updated version with a revised "Last updated" date and provide additional notice where required by applicable law.

14. Local Privacy Requirements

Privacy and data-protection laws vary between countries and regions. This Privacy Policy is intended to provide a global description of Podiyem's principal processing activities and does not limit additional rights or protections available under applicable local law.

Where a privacy or data-protection law applies to Podiyem's processing and imposes requirements additional to or different from those described in this Privacy Policy, Podiyem will comply with those requirements to the extent applicable.

This may include laws applicable in jurisdictions in which Podiyem, its Customers or relevant individuals are located, including jurisdictions in the Middle East, Europe, the United Kingdom, North America and elsewhere.

Certain Customers, industries or categories of data may also be subject to sector-specific, localisation or regulatory requirements. The Customer is responsible for determining requirements arising specifically from its business, industry, professional obligations or its decision to submit particular Customer Content to the Service.

15. Contact

Dabe Softwares LLC doing business as Podiyem c/o Northwest Registered Agent 30 N Gould St Ste N Sheridan, Wyoming 82801 United States

General: [email protected] Privacy / Data Protection: [email protected] Legal Notices: [email protected]