Source
Privacy policy — Penpot
Checked for Penpot on 13 Oct 2026
- Page
- https://penpot.app/privacy-policy
- Checked
- 13 Oct 2026, 10:57 UTC
- How we may use it
- Public page, crawling permitted
Technical details
- type
- page
- http status
- 200
- content hash
- sha256:48a57c744872b7ba26084eb24af096d5b04ef72a9aaaa797a4edfe2cad535d2b
- permission
- robots_ok
- screenshot
- Screenshot on file (internal exhibit, not published)
Cited by
Facts read from this source
-
Controller Report an error
“Data controller Kaleidos Subsidiary S.L TAX ID: B24967721 Max Aub, 5, Bajo B, 28003, Madrid, Spain”
-
Data processor role Report an error
“This policy does not apply to the extent we process personal information in the role of a processor on behalf of your organization. For additional information, please consult the Data Processor Agreement included in the Terms of Service.”
-
International transfers Report an error
“the provider offers adequate guarantees, through, among others, signing of Standard Contractual Clauses of the European Commission”
-
Rights Report an error
“the rights of access, rectification or deletion, limitation of processing, opposition, to the portability of the data or not to be subject to a decision based solely on the automated processing, as well as to withdraw the consent given”
-
Data retention Report an error
“We will only keep your data for as long as the commercial relationship is maintained or its elimination is not requested by the data subject.”
-
Communication domains Report an error
“mailpenpot.app: used for newsletters and general announcements. getstartedwithpenpot.com: used for onboarding emails and getting started guides. penpot.app: used for account-related communications and support requests.”
-
Data transfer categories Report an error
“Companies providing payment services (banks, payment gateways, etc.), in case the customer makes a payment through the service offered by one of these companies.”
-
Vendor contracts Report an error
“We also guarantee that we sign specific contracts with all our service providers as established by the regulations.”
-
Security measures Report an error
“we have undertaken appropriate technical and physical measures and management processes to safeguard and secure the information we collect from you.”
4 facts read from this page are not shown because they could not be confirmed on the page as captured.
Scores citing this record
- The Agency Owner European sovereignty
- The Agency Owner European sovereignty
- The Brand Marketer European sovereignty
- The Brand Marketer European sovereignty
- The Data Protection Officer European sovereignty
- The Data Protection Officer European sovereignty
- The Frontend Engineer European sovereignty
- The Product Designer AI features & rights to the work
- The Product Designer European sovereignty
- The Product Designer European sovereignty
- The Skeptic European sovereignty
- The Skeptic European sovereignty