1. Introduction

This Privacy Policy explains how Scoopterra collects, uses, stores, shares and protects personal data when you access or use the Scoopterra software platform, website and related services (collectively, the "Platform" or the "Services").

Scoopterra processes personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable Greek data protection legislation.

2. Data Controller

For the purposes of applicable data protection law, the data controller is:

Scoopterra IKE 265 Kifisias Avenue Kifisia 145 61 Greece

For any questions regarding this Privacy Policy or the processing of your personal data, you may contact us at:

info@scoopterra.com

3. Personal Data We Collect

Scoopterra collects personal data that you voluntarily provide when creating an account or using the Platform.

Depending on how you register and use the Services, this may include:

• first and last name;
• email address;
• encrypted (hashed) account password; and
• where you choose to sign in using Google, your Google profile information, including your name, email address, profile image and the authentication tokens required to enable secure sign-in.

Passwords are stored only in encrypted (hashed) form and are never accessible in plain text.

During your use of the Platform, Scoopterra also collects certain technical information necessary for the secure operation of the Services, including:

• IP address;
• browser or user agent information; and
• session-related technical data.

As part of the onboarding process and while using certain Platform features, Scoopterra may process business-related information that you voluntarily provide, including:

• business category;
• preferred geographic areas (country, region and municipality);
• information relating to your store network, including store names, addresses and Google Place IDs.

At present, Scoopterra does not collect VAT numbers, telephone numbers or billing information through the Platform.

Scoopterra does not intentionally collect or process special categories of personal data within the meaning of Article 9 of the GDPR.

4. Google Services

Where address search and autocomplete functionality is used, the information entered by users is transmitted to Google through the Google Places API in order to provide address suggestions and retrieve corresponding Place IDs and geographic coordinates.

Where users choose to authenticate using Google Sign-In (OAuth), Scoopterra receives the basic profile information necessary to authenticate the user and operate the Platform.

5. How We Use Personal Data

Scoopterra processes personal data for the purposes of:

• creating and managing user accounts;
• authenticating users;
• providing the Services;
• delivering location intelligence functionality;
• maintaining the security and integrity of the Platform;
• communicating with users regarding their accounts;
• improving the Platform and user experience; and
• complying with applicable legal obligations.

Processing is based on one or more of the following legal grounds:

• performance of a contract;
• compliance with legal obligations;
• your consent where required; and
• Scoopterra's legitimate interests in operating, securing and improving the Platform.

6. Sharing of Personal Data

To operate the Platform, Scoopterra relies on carefully selected third-party service providers acting as data processors.

These providers currently include:

• Calendly (meeting scheduling);
• Contentful (content management);
• DigitalOcean (application hosting);
• Formester (contact forms);
• Google (authentication and Google Places services);
• Neon (database infrastructure); and
• SMTP providers (transactional email delivery).

Scoopterra may also disclose personal data where required by applicable law or in response to lawful requests from competent public authorities.

Scoopterra does not sell, rent or otherwise commercialize users' personal data.

7. Data Retention

Personal data is retained only for as long as necessary to:

• provide the Services;
• maintain user accounts;
• comply with applicable legal obligations;
• resolve disputes;
• enforce contractual rights; or
• otherwise fulfil the purposes described in this Privacy Policy.

Different categories of personal data may be retained for different periods depending on their purpose and applicable legal requirements.

8. Data Security

Scoopterra implements appropriate technical and organisational measures designed to protect personal data against unauthorized access, disclosure, alteration, loss or destruction.

These measures include secure authentication mechanisms, encrypted password storage, controlled access to infrastructure and other security practices appropriate to the nature of the Platform.

While Scoopterra takes reasonable steps to safeguard personal data, no method of electronic transmission or storage can be guaranteed to be completely secure.

9. Your Rights

Subject to applicable law, you have the right to:

• access your personal data;
• request correction of inaccurate personal data;
• request deletion of your personal data;
• restrict certain processing activities;
• object to processing where permitted by law;
• withdraw your consent where processing is based on consent;
• request data portability where applicable; and
• lodge a complaint with the competent supervisory authority.

Scoopterra will respond to requests in accordance with applicable data protection legislation.

10. Cookies

Scoopterra uses cookies and similar technologies as described in its Cookie Policy.

For information about the cookies used by the Platform, the purposes for which they are used and how you can manage your preferences, please refer to the Cookie Policy.

11. Changes to this Privacy Policy

Scoopterra may update this Privacy Policy from time to time to reflect changes in the Platform, applicable legislation or our processing activities.

The updated version will be published on the Platform together with its Effective Date and Last Updated date.

12. Contact

If you have any questions regarding this Privacy Policy, the processing of your personal data, or wish to exercise any of your rights under applicable data protection law, please contact:

Scoopterra IKE 265 Kifisias Avenue Kifisia 145 61 Greece

Email: info@scoopterra.com