Privacy Policy
Last updated: 2026-07-08
1. Data Controller
Polktab (Polktab) operates this website and processes personal data described in this policy. Contact: contact@polktab.online.
2. Information We Collect
We collect information you provide directly, including:
- Name, email, company, country, and phone when you submit a quote request.
- Project description, budget range, timeline, and optional reference links.
- Legal consent records (Terms, Privacy, and contact consent) with timestamps and policy version 2026-07-08.
- Communications you send to us by email or contact form.
3. How Information Is Used
- Review and respond to project requests.
- Prepare quotes, invoices, and service agreements.
- Deliver digital services and provide support.
- Operate secure client portal and invoice access.
- Protect the platform through rate limiting, session security, and audit logging.
- Comply with legal obligations.
4. Data Processors and Infrastructure
We use the following categories of processors and infrastructure:
- Hosting infrastructure — Website and application hosting (As configured for production deployment).
- PostgreSQL database — Secure storage of quote requests, invoices, and session data (Same region as application hosting).
- Payment providers (e.g. Stripe, PayPal, or other approved processors) — Payment processing for invoices — card data is handled by the provider, not stored on Polktab servers (Per provider terms).
- Redis — Rate limiting and security controls (Same region as application hosting).
We do not sell personal data. Processors are used only as needed to operate the service.
5. Payment Processing
Payments are processed through third-party payment providers linked from issued invoices. We do not store full payment card details on our servers.
6. Cookies and Local Storage
We use strictly necessary cookies for admin and client portal sessions (HttpOnly, Secure in production, SameSite=Lax). Theme preference is stored in browser localStorage under the key polktab-theme — this is not transmitted to our servers. We do not currently use third-party analytics cookies. See our Cookie Policy for details.
7. Data Retention
Quote and project data is retained as long as needed for service delivery, business records, and legal compliance. Session records expire automatically. You may request deletion subject to applicable law and ongoing business needs.
8. Security
We use HTTPS, server-side validation, signed invoice access links, revocable admin sessions, rate limiting, CSRF protection on mutations, and security headers including Content Security Policy.
9. Your Rights
Depending on your jurisdiction, you may have rights to access, correct, delete, or restrict processing of your personal data. Contact contact@polktab.online or support@polktab.online.
10. Governing Law
This Privacy Policy is governed by the laws of the jurisdiction where Polktab is registered. Disputes are subject to to be confirmed in your service agreement.