Privacy policy
Last updated: 29 October 2026
In short
- Companies use Peacolo to track their equipment. The data they put in belongs to them, and we process it only to run the service for them.
- The phone app records a location only at the moment a worker saves a record, never in the background.
- Your data is stored in the European Union (Frankfurt, Germany).
- We don't sell data, show ads, or use your data to train AI models.
- Questions or requests: hello@peacolo.app.
1. Who we are
Peacolo is provided by S.R.L. "XY DIGITAL", IDNO 1014600041924, Str. Mihai Eminescu 74, ap. 402, MD-2001 Chișinău, Republic of Moldova ("we", "us").
Contact for anything about privacy: hello@peacolo.app.
2. Our role
Peacolo is a service for businesses. Which of us is responsible for your data depends on how it got to us:
- Data a company keeps in Peacolo (its equipment, jobs, customers, and the records its people make, including their names, photos and locations) is controlled by that company. It decides what is collected and why; we process it on its behalf, as its processor, under our Terms. If you work for a company that uses Peacolo, that company is your first point of contact for your data. If you write to us, we'll pass your request on and help them answer it.
- Data about our own customers and visitors, such as the person who signs a company up, people who email us, and visitors to this website, is controlled by us, as described below.
3. What we collect
Accounts
Name, email address, password (stored only as a one-way hash, never readable), preferred language, the companies you belong to and your role in each.
Work records
What a company and its people enter or capture while using Peacolo: equipment and its history; jobs and who did each step and when; notes; photos, voice notes and videos taken as evidence; customers and their contact details; places and job sites; and a log of administrative actions such as invitations and role changes.
Location
When a worker saves a record in the phone app (for example a delivery or a scan), the app reads the phone's GPS position once, with its accuracy, and attaches it to that record. The phone asks for permission first. The app never tracks location in the background or between records. If permission is refused, records are still saved, without a location.
Devices
For each phone or browser that signs in: the platform (iOS, Android or web), the app version, when it was last used, and, if notifications are on, a push token so we can deliver them. Sign-in tokens are stored only as hashes.
The assistant
If a company uses the Ask assistant, the questions its people ask and the answers, which are drawn from that company's records.
Emails
Invitations, password resets and alerts we send, with the recipient's address.
This website and technical logs
This website sets no cookies and uses no analytics. Like any website, our hosting providers process IP addresses and request details to deliver pages and protect against abuse, and keep them briefly in logs.
When you contact us
What you write to us and your contact details.
4. Why we use it, and on what legal basis
| Purpose | Legal basis (GDPR art. 6) |
|---|---|
| Running Peacolo for the companies that use it: accounts, records, syncing, notifications and emails | Performance of our contract with the company; for its people's data, the company's own legal basis, on whose instructions we act |
| Keeping the service secure, preventing abuse, fixing problems | Legitimate interests (a secure and working service) |
| Answering questions and demo requests | Legitimate interests, or steps before a contract |
| Invoicing and keeping accounting records | Legal obligation |
We don't sell personal data, show advertising, build marketing profiles, or use customer data to train AI models.
5. Who helps us run Peacolo
We use these providers ("sub-processors"). Each processes data only to provide its part of the service, under a contract with data protection terms.
| Provider | What for | Where data is processed |
|---|---|---|
| Render Services, Inc. | Hosting the application and its database | Frankfurt, Germany |
| Cloudflare, Inc. | Storing photos and other files; hosting this website; domain and email forwarding | Files stored in the EU; website served from the nearest location |
| Resend, Inc. | Sending emails (invitations, password resets, alerts) | Ireland (EU); company in the USA |
| 650 Industries, Inc. (Expo) | Delivering phone notifications, through Apple and Google | USA |
| Apple Inc. and Google LLC | Delivering notifications to phones; maps shown in the phone app | Worldwide |
| Anthropic, PBC | Answering questions in the assistant, only if a company uses it | USA |
| OpenStreetMap Foundation / MapTiler AG | Map images shown on the website's map (your browser requests them directly) | UK / Switzerland and EU |
We tell company administrators by email at least 30 days before adding a new sub-processor that handles their data.
We may also disclose data where the law requires it, or to protect our rights, and only as much as is needed.
6. Data outside the EU
Peacolo's database and files are stored in the EU. Some providers above are based in the USA. Where data goes there, the transfer is covered by the EU-U.S. Data Privacy Framework (where the provider is certified) or by the European Commission's Standard Contractual Clauses.
Our team works from the Republic of Moldova. When we access data from there, for example to give support, we do so under the Standard Contractual Clauses.
7. How long we keep it
- Accounts and work records: for as long as the company uses Peacolo. A record's history is designed to be kept, so a company can trust it later.
- When a company leaves: it can export its data. We delete it within 90 days after the account closes, and remove it from backups as they are replaced (within a further 30 days). We keep only what the law requires, such as invoices.
- When a person is removed from a company: their access ends straight away. Their name stays on the records they made, so the history stays correct. On request, we can replace the name with a pseudonym.
- Push tokens: until the person signs out or the device is removed.
- Technical logs: no longer than 30 days.
- Emails to us: as long as needed to deal with them, and at most 3 years after the last contact.
8. How we protect it
- All connections are encrypted (HTTPS), and data is encrypted at rest by our hosting providers.
- Each company's data is kept separate in the database itself, so one company can never see another's.
- Photos and files are private, and open only through links that expire after a few minutes.
- Passwords and sign-in tokens are stored only as hashes.
- Within a company, people see only what their role allows. Administrative actions are logged.
If a breach affects personal data, we'll inform the affected company without undue delay so it can meet its own obligations, and the authorities and people affected where the law requires.
9. Your rights
Under the GDPR and the law of the Republic of Moldova, you may ask to see the personal data we hold about you, correct it, delete it, limit or object to how it's used, or receive it in a portable format. Write to hello@peacolo.app. We'll answer within one month. If the data belongs to a company's records (section 2), we'll work with that company to answer.
You may also complain to a data protection authority: the one where you live or work, for example in Romania the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (dataprotection.ro), or in Moldova the Centrul Național pentru Protecția Datelor cu Caracter Personal (datepersonale.md).
10. Cookies and similar technologies
This website uses no cookies. The Peacolo app at app.peacolo.app uses one strictly necessary cookie to keep you signed in. It also saves your language, appearance and similar choices in your browser's storage. We use no advertising or tracking cookies, so we don't ask for cookie consent.
11. Children
Peacolo is a work tool and isn't meant for anyone under 16.
12. Changes
We'll update this page when how we handle data changes, and change the date at the top. For significant changes, we'll also email company administrators in advance.