How Performalise FZ LLC collects, uses, and protects your personal data, compliant with UK GDPR, EU GDPR, and the Data Protection Act 2018.
Summary: We collect minimal data to provide the Performalise platform. Your team data is yours. We never sell personal data. This policy complies with UK GDPR, EU GDPR, and the Data Protection Act 2018.
In this Privacy Policy, "Personal Data" means any information relating to an identified or identifiable natural person, including names, email addresses, IP addresses, and online identifiers. Anonymised or aggregated data that cannot identify any individual is not Personal Data.
Performalise FZ LLC ("we", "us", "our") is a free zone limited liability company that develops and operates the Performalise Product Development Intelligence platform.
We are the Data Controller in respect of personal data collected through our website and the Data Processor in respect of personal data that our B2B customers upload to or generate within the platform.
Our data protection contact is: contact@performalise.com
Connected Google/Microsoft data: if you connect Google or Microsoft sign-in, we access your name, email address, and profile photo. If you connect Google Calendar/Meet or Microsoft Outlook Calendar, we additionally access your calendar events and, where transcription is enabled, meeting transcripts. If your organisation connects Microsoft Teams, we access a basic list of your organisation's teams and channels, look up a teammate's Microsoft account from their email address to route direct messages, and send messages on your behalf. See Section 6 for retention.
We do not collect special category personal data (health, biometric, racial, religious data). We do not collect payment card data, payments are processed by our PCI-DSS compliant payment provider and we receive only a transaction token.
| Purpose | Legal basis |
|---|---|
| Providing the platform under a subscription contract | Article 6(1)(b), performance of a contract |
| Account registration and management | Article 6(1)(b), performance of a contract |
| Responding to enquiries and demo requests | Article 6(1)(f), legitimate interests |
| Sending service-related communications | Article 6(1)(b), performance of a contract |
| Sending marketing communications | Article 6(1)(a), consent, or Article 6(1)(f), legitimate interests |
| Security monitoring and fraud prevention | Article 6(1)(f), legitimate interests |
| Compliance with legal obligations | Article 6(1)(c), legal obligation |
| Processing customer team data on behalf of the Controller | Article 6(1)(b), contractual necessity (via our DPA) |
We will never use your personal data to train third-party AI models, sell it to third parties, or use it for purposes incompatible with those stated here.
| Sub-processor | Purpose | Location |
|---|---|---|
| Amazon Web Services (AWS) | Cloud hosting and infrastructure | US (adequacy safeguards in place) |
| HubSpot | CRM and marketing communications | EU (Dublin, Ireland) |
| Stripe | Payment processing | EU / US |
A full list of sub-processors, including third-party integrations you may optionally enable (Google, Microsoft, Atlassian, and others), is maintained in our Data Processing Agreement.
Performalise's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
We access your Google Calendar (read-only) and Google Meet transcript data solely to display your meetings and generate AI-assisted meeting summaries and coaching insights within Performalise. Raw transcripts are deleted immediately after processing, and in any event within 30 minutes; only the generated summaries and insights are retained. This data is not used for advertising, is not sold, and is not used to train AI models.
Where you connect Microsoft sign-in or Outlook Calendar, Performalise accesses your name, email address, and calendar events solely to authenticate you and display your meetings.
Where your organisation connects Microsoft Teams, Performalise accesses, with your organisation's administrator consent, a basic list of your organisation's teams and channels, and looks up a teammate's Microsoft account from their email address solely to route a direct message to them. Performalise then posts Daily Scrum notifications and messages to a channel or directly to you. This data is not used for advertising and is not sold to third parties.
We may disclose personal data where required by law, court order, or a regulatory or governmental authority with jurisdiction.
We do not sell, rent, or trade personal data to any third party for their own marketing purposes.
Where personal data is transferred outside the UK or EEA, we ensure appropriate safeguards are in place including:
If you would like a copy of the applicable transfer mechanism, please contact us at contact@performalise.com.
| Right | What it means |
|---|---|
| Right of access | Request a copy of the personal data we hold about you |
| Right to rectification | Request correction of inaccurate or incomplete personal data |
| Right to erasure | Request deletion of your personal data |
| Right to restrict processing | Request that we limit how we use your data |
| Right to data portability | Receive your data in a structured, machine-readable format |
| Right to object | Object to processing based on legitimate interests or for direct marketing |
| Right to withdraw consent | Withdraw consent at any time where processing is based on consent |
To exercise any of these rights, please email contact@performalise.com. We will respond within 30 days (UK GDPR Article 12).
Note for B2B platform users: If you are an Authorised User on a customer's account, your personal data is primarily controlled by your employer. Please direct data rights requests to your employer in the first instance.
| Category | Purpose | Consent required |
|---|---|---|
| Strictly necessary | Session management, authentication, security | No |
| Analytics | Understanding how visitors use our website (aggregated, anonymised) | Yes |
| Marketing | Tracking conversions from marketing campaigns | Yes |
You can manage your cookie preferences via our cookie consent banner or your browser settings.
In the event of a personal data breach, we will notify the relevant supervisory authority within 72 hours in accordance with UK GDPR Article 33.
Performalise is a B2B platform for use by organisations and their employees. It is not directed at individuals under the age of 16. We do not knowingly collect personal data from children. Customers are responsible for ensuring platform access is not provided to minors.
We may update this Privacy Policy from time to time. Material changes will be communicated by email notification to registered users and/or by a prominent notice on our website at least 30 days before taking effect.
Performalise FZ LLC
Email: contact@performalise.com
This Privacy Policy is governed by the laws of England and Wales. If you are not satisfied with our response, you may contact the ICO at ico.org.uk/make-a-complaint (if you are in the UK or EEA), or the relevant data protection authority in your jurisdiction.
Your teams already know what’s blocking them. Want to hear it sooner?