How we handle your data.
Who is responsible
Expecta Srl, Via Bezzecca 3, 00185 Roma, Italy (VAT IT17186851006), is the controller of the personal data processed on this site.
What we process
- Your sign-in: when you sign in with Microsoft we receive your name, your sign-in address, and the identifiers of your account and organisation. We use them to check which demos have been shared with you.
- Your access: the list of people a demo is shared with, and what part of its data each may see.
- Your pages: the pages your AI assistant saves for you: their titles and which figures they show.
- How you use the demos: which demos and pages you open and when, and the names of the figures your AI assistant asks for. Never the figures it receives, and never your conversation with it, which does not reach us.
- Technical logs: account identifiers, times and errors, kept by our hosting platform to run the service and keep it secure.
The demos contain generated data that models a business. They contain no real customer, employee or transaction records.
Why, and on what basis
To show you the demos you were invited to see, at your request, before any contract (Article 6(1)(b) GDPR), to keep the service secure, and to follow up with you on the demos we shared (our legitimate interest, Article 6(1)(f)). Only Expecta's own team sees how a demo was used. We do not use your data for marketing on this site, and we do not sell it.
Your AI assistant
If you connect your own AI assistant, the questions it asks and the figures it receives pass through that assistant's provider, under your own agreement with them. We do not receive your conversations.
Who processes it for us
The site runs on Microsoft Azure in the West Europe region, and sign-in is by Microsoft Entra ID. Microsoft acts as our processor under its data protection terms. The sign-in code your browser runs is loaded from Microsoft's own content network (alcdn.msauth.net), so Microsoft also sees your IP address when the page opens, as it does whenever you sign in with Microsoft.
How long we keep it
- Your access: until it ends, when we remove you from the list.
- Your pages: until you ask us to delete them, or the demo is withdrawn.
- How you used the demos: 90 days.
- Technical logs: 30 days.
Cookies
We use no cookies. To keep you signed in, your browser holds your Microsoft sign-in in its session storage, which is cleared when you close the tab.
Your rights
You can ask for access to your data, or for it to be corrected, erased, restricted or ported, and you can object to its processing. Write to us at the address above. You can also complain to the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it).