← Back home

Privacy Policy

Last updated: June 2025
Effective date: June 2025

1. Who We Are

i-production.gr is operated by Sarra Eleni, registered in Greece (VAT: 159672047), with registered address at Ag. Georgiou 25 .

We are the data controller for personal data collected through our website at i-production.gr .

For all privacy-related matters, contact us at: admin@logisticianhub.com

2. What Data We Collect and Why

We collect only the data necessary to provide our service. Here is exactly what we collect, why, and the legal basis under GDPR:

2.1 — Account Data

  • What: Full name, email address, company name, password (hashed — never stored in plain text)
  • Why: To create and manage your account
  • Legal basis: Performance of contract (Article 6(1)(b) GDPR)
  • Retention: For the duration of your account + 30 days after deletion request

2.2 — Business Data You Enter

  • What: Items, recipes, lot numbers, production records, supplier details, customer details, HACCP records, documents
  • Why: To provide the production management and compliance features of the platform
  • Legal basis: Performance of contract (Article 6(1)(b) GDPR)
  • Retention: For the duration of your subscription + 30 days after account closure. You can export all data at any time.

Important: This business data belongs entirely to you. We do not access, analyse, or use it for any purpose other than providing the service.

2.3 — Billing Data

  • What: Subscription plan, billing country, VAT number. Payment card details are processed exclusively by Lemon Squeezy (our payment provider) and never stored on our servers.
  • Why: To manage your subscription and comply with tax obligations
  • Legal basis: Performance of contract + Legal obligation (Article 6(1)(b) and 6(1)(c) GDPR)
  • Retention: 7 years (Greek tax law requirement for financial records)

2.4 — Usage Data

  • What: Pages visited within the app, features used, login timestamps, browser type, IP address
  • Why: To maintain security, fix bugs, and improve the platform
  • Legal basis: Legitimate interests (Article 6(1)(f) GDPR)
  • Retention: 12 months

2.5 — Communication Data

  • What: Emails you send to us, support requests
  • Why: To respond to your enquiries and provide support
  • Legal basis: Legitimate interests (Article 6(1)(f) GDPR)
  • Retention: 3 years

3. How We Share Your Data

We do not sell your data. We do not share your data with third parties for marketing purposes. We share data only with the following service providers who help us deliver the platform:

ProviderPurposeLocationSafeguards
Lovable Cloud / SupabaseDatabase, authentication, file storageEU (AWS Ireland, eu-west-1)Lovable Cloud DPA / Standard Contractual Clauses
CloudflareCDN, DDoS protection, DNSEU / USAStandard Contractual Clauses
Lemon SqueezyPayment processing, subscription managementUSAMerchant of Record / Standard Contractual Clauses

All providers are bound by data processing agreements and are required to maintain appropriate security measures.

We may disclose data to law enforcement or regulatory authorities if required by applicable law (e.g. a court order), but only to the minimum extent required.

4. Your Rights Under GDPR

As a data subject under EU GDPR, you have the following rights. You can exercise any of these rights by emailing admin@logisticianhub.com. We will respond within 30 days.

Right of Access (Article 15)
You can request a copy of all personal data we hold about you.

Right to Rectification (Article 16)
You can correct inaccurate personal data at any time via your Account Settings, or by contacting us.

Right to Erasure / "Right to be Forgotten" (Article 17)
You can request deletion of your account and all associated personal data. We will delete your data within 30 days. Note: some billing records must be retained for 7 years under Greek tax law.

Right to Restriction (Article 18)
You can request that we limit how we use your data while a dispute is being resolved.

Right to Data Portability (Article 20)
You can request an export of all your business data in machine-readable format (CSV/JSON). This is available directly in the app under Settings → Export Data.

Right to Object (Article 21)
You can object to processing based on legitimate interests at any time.

Right to Withdraw Consent
Where processing is based on consent (e.g. marketing emails), you can withdraw consent at any time without affecting the lawfulness of prior processing.

Right to Lodge a Complaint
If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA) at www.dpa.gr or with the supervisory authority in your EU member state.

5. Data Security

We implement the following technical and organisational measures to protect your data:

  • All data encrypted in transit using TLS 1.3
  • All data encrypted at rest using AES-256
  • Row-level security: each tenant's data is isolated at database level — no other user can access your data
  • Passwords hashed using bcrypt — never stored in plain text
  • Role-based access control within tenant accounts
  • Regular automated backups with point-in-time recovery
  • Access to production systems restricted to authorised personnel only

In the event of a personal data breach that poses a risk to your rights, we will notify the Hellenic Data Protection Authority within 72 hours and notify affected users without undue delay as required by Article 33 GDPR.

6. Data Retention

We retain your data for as long as necessary to provide the service and comply with legal obligations. Specific retention periods are listed in Section 2. When your account is closed:

  • All business data (items, recipes, production records, etc.) is permanently deleted within 30 days
  • Account data is deleted within 30 days
  • Billing records are retained for 7 years (legal obligation)
  • Anonymised aggregated usage statistics may be retained indefinitely (no personal data)

7. Cookies

We use only the cookies necessary to operate the platform:

CookiePurposeDuration
sb-auth-tokenSupabase authentication session (essential)Session
i-prod-cookie-consentRemembers your cookie consent choice (essential)12 months

We do not use advertising cookies, tracking pixels, or third-party analytics that send data outside our infrastructure. When you first visit the site you can choose to accept all cookies or use only essential cookies. You can change your choice at any time by clearing the i-prod-cookie-consent cookie.

8. International Data Transfers

Our primary data storage is in the EU (AWS Ireland, eu-west-1, via Lovable Cloud / Supabase). Where data is processed by providers outside the EU (such as Lemon Squeezy in the USA), we ensure appropriate safeguards are in place through Standard Contractual Clauses approved by the European Commission. Our Data Processing Agreement is available at i-production.gr/dpa.

9. Children

i-production is a business tool intended for adults operating production businesses. We do not knowingly collect data from anyone under 18. If you believe a minor has created an account, contact us at admin@logisticianhub.com and we will delete it immediately.

10. Changes to This Policy

We will notify you of material changes to this policy by email and by displaying a notice in the app at least 30 days before changes take effect. The current version is always available at i-production.gr/privacy.

11. Contact

Data Controller:
Sarra Eleni
Ag. Georgiou 25
Greece

Privacy enquiries: admin@logisticianhub.com

General enquiries: admin@logisticianhub.com

Hellenic Data Protection Authority: www.dpa.gr