Legal
Privacy policy
How Búzios e Tartarugas, Lda. handles personal data for Prood. Last updated 2 November 2026.
Who we are
BÚZIOS E TARTARUGAS - LDA (Búzios e Tartarugas, Lda.), NIPC and VAT number 515001708, Rua Gil Vicente 2, 2775-198 Parede, Portugal, operates Prood. We're the data controller for the accounts of people who use Prood. For your store's shoppers, you're the controller and we're your processor.
What we collect
The account details you give us when you sign up, the store and order data needed to run your store, and technical logs we use to keep the service secure and working.
How we use it
To host your store, sign you in, keep your payment credentials and help when you contact us. Each store's credentials are stored separately and encrypted at rest with AES-256-GCM. We don't sell personal data.
Why we may use it
To perform our contract with you, to meet legal duties such as keeping accounting records, and for our legitimate interest in keeping Prood secure and working.
Where your data lives
Prood's database and application servers run in Frankfurt, Germany, and public images are stored in the EU. Some services we rely on, such as email delivery and the network that serves our pages, can process data outside the EU.
Who else handles it
Vercel for hosting, Neon for the database, Upstash for rate limits and checkout sessions, Cloudflare for images, and Resend for email. Your store also uses the payment provider you connect, and its checkout uses Geoapify for address suggestions. Where data can leave the EEA, we rely on the EU-US Data Privacy Framework or Standard Contractual Clauses.
How long we keep it
For as long as your account is open, then only as long as the law requires, for example for accounting records.
Cookies
We use the cookies needed to sign you in, keep a cart working and remember your dashboard layout. Stripe's checkout can set its own fraud-prevention cookies. Stores also keep saved items and checkout details in the shopper's browser. We don't use tracking or advertising cookies.
Your rights
Under the GDPR you can ask to see, correct, delete or move your personal data, and you can restrict or object to how we use it. Email hello@prood.com and we'll reply. You can also complain to the Comissão Nacional de Proteção de Dados (CNPD) at cnpd.pt.
Your customers' data
As a merchant you control your customers' data and are responsible for meeting the privacy laws that apply to your store. Our data processing terms at /dpa set out how we handle it for you.
Contact
For privacy questions or data requests, email hello@prood.com.