Privacy policy
Ultimo aggiornamento: October 13, 2026
This English version is provided for convenience. If there is any difference, the Italian version prevails.
This policy explains what personal data we process when you visit gethustlo.com or use the Hustlo app at app.gethustlo.com, why we do it and what rights you have. It is written under Articles 13 and 14 of Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and the Italian Personal Data Protection Code (Codice in materia di protezione dei dati personali, Legislative Decree 196/2003).
Data controller
The data controller (the party that decides how and why your data is processed) is Vincenzo Antenucci, sole proprietorship, VAT number [to be added], registered office at [address to be added]. For any question about your data, write to [email protected].
We have not appointed a Data Protection Officer (DPO), because one is not required for our activity.
What data we process
When you visit the website
- Technical browsing data: IP address, browser type, pages requested, date and time. Our hosting provider records it to run the website and protect it from abuse. We do not use it to profile you.
- Contact form: name, email address, your message and any information you choose to send us.
- Newsletter: email address and, if you provide it, your name; the date and proof of your subscription.
When you use the app
- Account data: name, email address, password (stored only in encrypted, unreadable form), language, time zone, chosen business model.
- Subscription data: active plan, start and renewal dates, payment status. Your card or bank details never reach us: they are handled by Paddle, which processes payments.
- Content you enter: projects, tasks, products, clients, transactions, notes, files and everything you save in your workspace.
- Technical and security data: logins, device, IP address, app errors, needed to keep your account secure and fix problems.
- Communications with us: support requests and optional answers, such as your reason for canceling.
Why we process it and on what legal basis
| Purpose | Legal basis |
|---|---|
| Providing the app, managing your account, plan and support | Performance of a contract (Art. 6(1)(b) GDPR) |
| Sending service emails: confirmations, security alerts, trial expiry, renewals | Performance of a contract (Art. 6(1)(b)) |
| Replying to messages sent through the contact form | Steps taken at your request (Art. 6(1)(b)) |
| Sending you the newsletter | Your consent (Art. 6(1)(a)), which you can withdraw at any time |
| Protecting the website and app from abuse, fraud and unauthorized access; fixing errors | Legitimate interest in a secure, working service (Art. 6(1)(f)) |
| Meeting tax and legal obligations, responding to authorities | Legal obligation (Art. 6(1)(c)) |
| Defending our rights in case of a dispute | Legitimate interest (Art. 6(1)(f)) |
We do not sell your data, we do not use it for advertising, and we do not make decisions based solely on automated processing that produce legal effects on you.
Your clients' data
In the app you can enter data about other people, such as your clients or suppliers. For that data you are the controller and we act as data processor (Art. 28 GDPR): we process it only to provide the service, under the data processing agreement included in the Terms of service. It is up to you to inform those people and to have a legal basis for processing their data.
How long we keep it
- Account and content: for as long as your account is active. If you delete your account, your data stays recoverable for 30 days and is then permanently deleted; backup copies rotate and are overwritten within a further 30 days.
- Moving to the free plan: if your trial ends, you cancel or a payment fails, your workspace stays as it is and we delete nothing.
- Contact form and support messages: 24 months from the last exchange, then deleted.
- Newsletter: for as long as you stay subscribed. After you unsubscribe we keep only your address and proof of consent, for as long as needed to show that we respected your choice.
- Technical, security and error data: up to 90 days, unless needed to investigate abuse.
- Payment-related data: for the periods required by tax law, usually 10 years.
Who we share it with
To run Hustlo we rely on providers that process data on our behalf, as data processors, under written agreements that require them to protect it:
| Provider | Service | Where the data is |
|---|---|---|
| Hetzner Online GmbH | App servers, database, files and backups | Germany or Finland (EU) |
| Cloudflare, Inc. | Website hosting, DNS, attack protection | Global network, headquartered in the United States |
| Resend | Sending service emails and contact form messages | United States |
| MailerLite (UAB MailerLite) | Sending the newsletter | European Union |
| Functional Software, Inc. (Sentry) | App error monitoring | European Union |
Paddle.com Market Limited (United Kingdom) is the reseller that sells Hustlo subscriptions: it handles payment, VAT, receipts and refunds as an independent controller, under its own privacy policy, available at paddle.com.
Data may also be shared with professionals who assist us (for example our accountant) and with authorities, when the law requires it.
Transfers outside the European Union
Some providers are based in the United States or the United Kingdom. Transfers take place only with the safeguards set out in the GDPR: an adequacy decision of the European Commission (United Kingdom; United States for companies certified under the EU-U.S. Data Privacy Framework) or standard contractual clauses approved by the Commission. You can ask us for a copy of these safeguards by writing to [email protected].
How we protect your data
Connections always encrypted (HTTPS), passwords stored in non-reversible form, two-step verification available, files never public and reachable only through temporary links, workspaces kept separate from each other, daily backups stored away from the main server.
Your rights
You can ask us at any time to:
- access your data and get a copy of it;
- correct it if it is inaccurate or incomplete;
- delete it, when there is no longer a reason to keep it;
- restrict its processing;
- receive it in a machine-readable format and transfer it to someone else (portability): in the app you will also find a full export under Settings → Data;
- object to processing based on legitimate interest;
- withdraw your consent to the newsletter, using the link in every email, without affecting anything done before.
Write to [email protected] from the address linked to your account: we reply within one month. If you believe the processing breaks the law, you can file a complaint with the Garante per la protezione dei dati personali, the Italian Data Protection Authority (garanteprivacy.it), or with the authority of the country where you live or work.
Minors
Hustlo is designed for people who work or are starting a business, and you must be of legal age to use it. We do not knowingly collect data from anyone under 18: if we find out that an account belongs to a minor, we close it and delete the data.
Changes
If we make material changes to this policy, we will tell you by email or in the app before they take effect. The date of the last update is at the top of the page.