Privacy notice

Service provider

PRT

Via Quaranta 45, 20139 Milano, Italia

VAT number

10814941216

REA

MI-2766563

Support and privacy email

info@prtflow.com

Telephone

+39 0256567133

Roles and contact

PRT is the supplier identified on this page. Contact info@prtflow.com about the service or personal data. The merchant remains responsible for shop visitor and customer data and consent configuration. Applicable roles and agreements for processing on the merchant’s instructions must be coordinated with PRT.

Data in WooCommerce

Products, settings, encrypted PWS credentials, statistics and attribution metadata are stored in WordPress. Attribution uses the WooCommerce session with explicit consent. The plugin does not fingerprint visitors using IP or browser. Deduplication uses a cryptographic session-derived identifier.

Orders are read through WooCommerce to calculate quantities, revenue, refunds and attributed statistics. Customer names, emails, addresses and order contents are not sent to PRT’s subscription service. CSV analysis stays in the browser without uploading the file.

Recipients and transfers

PRT receives installation identity, shop URL, version, merchant authorisations and consents, authorised event identifiers and dates and Stripe associations needed for billing. Stripe receives the information the merchant enters in Checkout and manages payments and documents. Complete card details are not entered into PRT’s interface.

Feeds contain offer information and an access key. Share feed links only with authorised recipients. Offers and authentication credentials are sent to idealo for operations requested by the merchant. Hosting, backup and security suppliers may process data within their roles. External services such as Stripe operate under their applicable agreements, locations and safeguards.

To prepare and publish feeds, PRT receives and stores offer data and export settings, including product identifiers, titles, prices, availability, images and URLs. The current copy and work in progress are replaced on subsequent updates. When service stops, the operational catalogue copy is removed at the next check. Backups rotate over 30 days. PWS credentials and customer names, emails, addresses and order contents are not sent to PRT.

Purpose and retention

Processing provides the requested service, access control, contract and subscription management, offers, event reconciliation and security. Individual tracking requires explicit consent, which can be withdrawn through the shop’s platform. Withdrawal does not undo obligations for completed operations.

Local deduplication expires after 30 minutes. Confirmed statistical events are retained in the plugin for up to 366 days. Unacknowledged events remain queued until accepted. PRT keeps reconciled events for up to 400 days, separately from contractual identity, used trials, consents, disputes and accounting documents retained for applicable purposes and obligations. Operational backups rotate over 30 daily copies.

Uninstall removes PWS credentials and retains identity, settings and trial history. It does not automatically erase every service record needed for cancellation and reconciliation. Order metadata follows the shop’s WooCommerce retention policy.

Your rights

Where GDPR applies, you can request access, rectification, erasure, restriction, objection and portability and complain to the competent supervisory authority. Shop data requests are coordinated with the merchant. A pseudonymous session identifier does not guarantee identification of a visit from a name or email alone. Contact info@prtflow.com without sending credentials.

Optional assistant and reports

At the store manager’s request, PRT forwards the request text and a summary of export settings to OpenAI. PWS credentials, card data and order contents are not included. Proposals are validated in the store and require confirmation before saving. Do not enter personal data in requests. Monthly reports are sent only after the manager enables them, to the chosen address, using the WordPress email service. Summaries contain aggregate metrics and products, without customer names or addresses.

Aggregate access counts

The plugin increments a product and time-bucket total in WordPress when a signed feed link is opened. The link is identical for every visitor to that offer. The counter stores no IP, browser, cookies, visit or session identifiers and does not connect an individual access to orders. It works without a consent platform. Totals are retained for up to 366 days. Ordinary hosting requests and logs are separate from this counter and must be described in the shop privacy notice.

Two-component distribution from version 2.1

The PRT Feeds for idealo connector contains local connection and PWS transport utilities available without a license check. The paid PRT service generates, publishes and hosts feeds on its servers. Advanced configuration, assistant, statistics and reports are supplied in a separate PRT component downloaded and installed manually.

Both use the same identity and subscription. Installing the separate component does not create a new subscription, second trial or payment authorization and does not change existing choices. Deactivating only that component reconciles prior authorized events and disables its option. The connector and base subscription remain active. Attribution, assistant and report descriptions refer to the separate component.