Privacy policy

Last updated: 24 September 2026

This policy explains how GorillaMEC (“we”), based in the Netherlands, handles personal data when you visit this website or use GorillaPM. Questions: info@gorillamec.com.

What we collect

Account data: your name, email address and the company you create or join.
Workspace content: the projects, tasks, requests, notes and files you and your colleagues add. Your company controls this content; we process it on its behalf.
Contact form data: what you send us when you book a demo or ask a question.
Billing data: handled by our payment provider Stripe. We never see or store full card numbers.
Technical data: logs needed to keep the service secure and working, such as IP address and browser type.

Why we use it

To provide the service you signed up for (contract).
To reply to your enquiries (legitimate interest or your request).
To bill subscriptions and meet accounting obligations (legal obligation).
To keep the service secure and fix problems (legitimate interest).

We do not sell personal data and we do not use workspace content for advertising.

Who processes it for us

Supabase: database, sign-in and file storage.
Vercel: website and application hosting.
Stripe: payments and invoicing.

These providers act on our instructions under data processing agreements. Where data leaves the EEA, they rely on approved transfer mechanisms.

How long we keep it

Workspace content is kept while your company has an account. After an account is closed we delete workspace content within 90 days, except where the law requires us to keep records such as invoices.

Your rights

You can ask to access, correct, export or delete your personal data, or object to how we use it, by emailing us. You can also complain to the Dutch data protection authority (Autoriteit Persoonsgegevens).

Cookies

We only use cookies that are needed to sign you in and keep your session secure. We do not use advertising cookies.