Legal document
Privacy Policy
Last updated: 24 May 2026 · version 1.1
1. Data controller
GI.VE GROUP S.R.L., VAT no. / tax code (P.IVA / C.F.) 01088150147, registered office Via Carlo Fabani 18/B, 23017 Morbegno (SO), Italy.
Dedicated contact channels:
- Privacy / GDPR rights requests: privacy@givegroup.it
- Security / responsible disclosure: security@givegroup.it
- Abuse reports: abuse@givegroup.it
- Commissions and sales support: commissioni@givegroup.it
- General operations: engine@givegroup.it
- PEC (formal legal channel): gi.ve@pec.it
2. Data we collect
The Starter version runs entirely locally and collects no data at all. For the paid tiers we collect email, user name and billing data (handled by Lemon Squeezy as an external processor).
3. Purposes
Service provision, invoicing, support, operational communications. No marketing without explicit consent.
4. Legal basis
Performance of the contract (Art. 6(1)(b) GDPR), tax obligations (Art. 6(1)(c) GDPR), legitimate interest in technical support (Art. 6(1)(f) GDPR).
5. Retention
Billing data: 10 years as required by Italian tax law. Other data: duration of the contract + 12 months for after-sales support.
6. Data subject rights
Access, rectification, erasure, restriction, portability, objection (Arts. 15-22 GDPR). To exercise them, write to privacy@givegroup.it (dedicated operational channel) or gi.ve@pec.it (PEC, formal channel). We reply within 30 days as per Art. 12 GDPR.
For immediate self-service deletion + data export: use your customer area (available after a Catalogo / All-Access purchase; interface in Italian).
7. External processors
Lemon Squeezy (payments), Vercel (landing hosting), GitHub (public source code). All operate under their own data processing agreements.
8. Complaints
Data subjects may lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali, garanteprivacy.it) or with their local supervisory authority.
8-bis. Local-first Gi.Ve Engine recipes
Recipes installed locally by the engine (e.g. Bollette Watcher (Italian), Vault Clienti (Italian), Spese Casalinghe) process data exclusively on your device. Gi.Ve Group S.R.L. does not receive, store or process the data handled by the recipes, and therefore assumes neither the role of controller nor of processor under the GDPR with respect to such data.
For recipes that process personal data of third parties (e.g. Vault Clienti for professionals who store their own clients' documents), it is the professional user who takes on the role of data controller. Each recipe shows a specific privacy notice at first launch and — where applicable — a template entry for your Art. 30 GDPR record of processing activities.
9. Data processing for the Starter plan
When you choose the free "Starter" plan with email, we collect:
- Your email address (needed to send you the installation link and updates)
- The sign-up date
- The origin of your sign-up (the section of the page you clicked from)
What we do NOT collect: name, phone number, address, geolocated IP, payment data (there is no payment), detailed browsing behaviour.
What we use it for:
- Sending you the Gi.Ve Engine installation link (transactional, mandatory)
- Notifying you about new catalogue recipes (marketing, max 2 emails/month)
- Invitations to upgrade to Catalogo or All-Access (marketing, max 1 email/month)
Unsubscribing: every email contains an "Unsubscribe" link that works in 1 click. You can also write to engine@givegroup.it for full deletion of your data.
Data controller: GI.VE GROUP S.R.L., VAT no. (P.IVA) 01088150147, Via Carlo Fabani 18/B, 23017 Morbegno (SO), Italy.
Retention: your data is kept until you unsubscribe or for a maximum of 24 months of inactivity, after which it is deleted automatically.
10. Data processing for Commission requests
When you fill in the Commissions form at /commissioni, we collect:
- First and last name
- Email address
- Country (optional)
- Description of the project you want
- Preferences on timeline, tier and delivery method
Purpose: answering your request, providing a quote, managing any contractual relationship that follows.
Legal basis: pre-contractual measures taken at your request (Art. 6(1)(b) GDPR).
Retention: for the duration of the assessment + 12 months after the last contact (to manage any follow-up). If it becomes a contract: 10 years for tax obligations.
Operational contact: engine@givegroup.it (pending activation of the dedicated alias).
Legal contact (PEC): gi.ve@pec.it.