Privacy Policy

1. Who we are

The controller of your personal data is:

• Service: PartnerStandard Recruitment, a tool for finding, checking and signing partners, market by market
• Operator: Bernhard Friedrichs, sole proprietor (autónomo) registered in Spain, trading as PartnerStandard
• Address: Cowork Up! Puerta del Mar, C/ Cronista Carreres 10, Bajo, 46003 València, Spain
• VAT (NIF-IVA): ESX7526216H
• Email: hello@partnerstandard.com

We have not appointed a Data Protection Officer. Please send any privacy question to the email address above.

2. What this policy covers

This policy covers personal data we process through:

• the web app at recruit.partnerstandard.com, including the public sample market;
• signing in with Google;
• creating, reading and editing your market workbooks in Google Sheets;
• emails you send us for support.

This policy does not cover how Google processes your data in its own products, or how an AI assistant you choose processes what you give it. Their own privacy policies apply to that.

3. How the Service works, in brief

You sign in with a Google account. Each market (one country or region and one partner type, for example "Austria · Reseller") is a spreadsheet, a "workbook", in your own Google Drive, in the folder PartnerStandard / Recruitment. Only you work on your markets in the Service: it gives nobody else access to them.

When you view or change a market, our servers read or write the workbook on your behalf. The content passes through our servers but is not saved in our database.

4. Personal data in our database

Our database is hosted in the EU (section 12). It holds:

4.1 Account data

When you sign in, we receive and store:

• your name and email address;
• your Google account ID;
• the URL of your Google profile picture, if Google provides one;
• whether Google says your email is verified;
• the permissions you granted (see section 7);
• the dates your account was created and last updated.

4.2 Connection data

To work with your workbooks, we store the access token and refresh token that Google issues to the Service. These tokens are encrypted at rest. The encryption key is kept separately from the database. Tokens are never sent to your browser.

4.3 Sign-in sessions

For each sign-in session we store a session token, its expiry date, and the IP address and browser user agent from which you signed in. We use these to keep you signed in and to protect your account.

4.4 Your company name

If you enter it in Settings, we store your company name. The Service puts it into the search prompts it builds for you.

4.5 Market records

For each market we store a small record so your list of markets loads quickly:

• the market ID, your user ID and the storage provider;
• the file ID and file address of the workbook;
• the market’s display name (for example "Austria · Reseller"), which is the only piece of market content we store;
• the dates the market was created and archived;
• the ID of your "PartnerStandard / Recruitment" folder.

4.6 Technical records

To keep two changes to the same workbook from clashing, we briefly store a lock with the workbook’s file ID while a change is saved. To keep the app fast across our servers, we store the file ID and the time of the last change the Service made to each workbook. These records contain no content.

Our hosting provider also keeps short-lived technical request logs (such as IP address, time and requested page) to run and secure the Service. Our own server logs contain IDs only, never market content, names or email addresses.

4.7 Data we do not collect

• We do not store your market content (hypotheses, candidate companies, people, calls, notes, scores, decisions) in our database or logs, except the market display name described in 4.5.
• We do not use analytics, advertising or tracking tools.
• We do not use AI or machine-learning services to process your data.
• We do not process payment data. The Service is free.

5. Market content and people at potential partners

Your market content lives in your workbook. When you use a market, our servers read it, show it in the app and write changes back. While this happens, the content is held in server memory. To keep the app fast, a copy can stay in memory for up to about one minute. It is never written to our database or to logs.

5.1 Contact data of people at potential partners

You can record the names, job titles and email addresses of people at companies you consider as partners, and notes from your calls with them. This data is stored only in your own Google Sheet. It is never stored in our database or logs.

For this data, you are the controller: you decide whom you add, why and for how long, and you are responsible for having a lawful basis, for telling the people concerned where the law requires it, and for answering their requests. We process the data only to show and save your workbook for you.

If you are one of those people and want your details corrected or removed, please ask the user who added you. We cannot see or change their workbook outside their use of the Service, but we can help you reach them.

5.2 Text imported from AI assistants

The Service builds prompts you can copy into an AI assistant of your choice, for example to search for candidate companies. The Service itself sends nothing to any AI provider. What you paste into an AI assistant is processed by that provider under its own terms.

When you paste a result back, or paste notes from a call, the Service reads the text in your browser and shows you what it found. What you confirm is written to your workbook as plain text, through our servers like any other change. We do not store the imported text in our database or logs.

5.3 No emails

The Service sends no emails: not to you, and not to the people in your workbooks. Any contact with them happens outside the Service.

6. The sample market

The landing page shows a made-up sample market you can try without signing in. Your changes to it stay in your browser tab. Nothing is sent to our servers or stored.

7. Google user data

7.1 What we access

When you sign in, Google asks you to grant these permissions:

• openid, email, profile: your name, email address, profile picture URL and Google account ID. We use these to create your account and sign you in.
• Google Drive, files used with this app (https://www.googleapis.com/auth/drive.file): access only to files that the Service created. The Service cannot see, list, open or change any other file in your Drive.

With that access, the Service uses the Google Sheets API and Google Drive API to:

• create a "PartnerStandard / Recruitment" folder and a workbook for each new market;
• read and update the workbooks you open in the app;
• check that a workbook still exists;
• move a half-created workbook that the Service itself just made to your Drive trash, if creating it failed part-way.

7.2 How we use it

We use Google user data only to provide and improve the features you see in the Service: your list of markets and your workbooks.

7.3 How we store it

We store your name, email address, profile picture URL, Google account ID, the granted permissions and your encrypted access and refresh tokens (sections 4.1 and 4.2). We store each workbook’s file ID, file address and the market’s display name (section 4.5). We do not store the content of your workbooks (section 5).

7.4 How we share it

We do not sell Google user data. We share it only:

• with the service providers in section 11, so they can host the Service and store our records;
• when the law requires it (section 15).

7.5 Limited Use

PartnerStandard Recruitment’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular:

• We do not use Google user data for advertising, including retargeting or personalised ads.
• We do not use Google user data to train or improve artificial intelligence or machine-learning models, ours or anyone else’s.
• We do not sell Google user data or pass it to data brokers.
• No person at PartnerStandard reads your Google user data, unless you give us explicit consent for specific data (for example, when you ask for help with a market), it is needed for security reasons (for example, to investigate abuse), it is needed to comply with the law, or the data has been aggregated and anonymised for internal operations.

7.6 How to revoke access

You can remove PartnerStandard’s access at any time on Google’s Third-party connections page. After that, the Service cannot read or write your workbooks until you sign in again. Deleting your account in the Service does not remove this access, because the same Google sign-in is shared with other PartnerStandard tools. To delete the data we store, see section 14.

8. Purposes and legal bases

Where we rely on legitimate interests, you can object at any time (section 16).

9. Cookies and browser storage

The Service uses only what is strictly necessary to run it. We do not use analytics, advertising or tracking cookies, so we do not show a cookie banner (Article 22.2 of Spanish Law 34/2002, LSSI-CE).

All cookies are HTTP-only, sent only over secure connections and limited to recruit.partnerstandard.com.

When you sign in, you are taken to Google’s sign-in page. Google may set its own cookies there under its own policy.

10. Links to AI assistants and other sites

If you open an AI assistant or another website from the Service, that site processes your data under its own terms and privacy policy. We send it nothing on your behalf.

11. Service providers

We use these providers to run the Service. They process personal data on our behalf, under data processing terms with appropriate safeguards.

Google is not our service provider. It is the sign-in and storage service you choose to connect, and it processes your data under your own agreement with it.

12. International transfers

Our database is in the EU, and our server functions run in an EU region. Some providers are US companies and may access data from outside the European Economic Area, for example for support or security. Where this happens, we rely on the EU-U.S. Data Privacy Framework where the provider is certified, or on the European Commission’s Standard Contractual Clauses, together with additional safeguards where needed.

13. How long we keep data

Your workbooks are not ours to keep or delete. They stay in your Google Drive until you delete them.

14. Deleting your account

You can delete your account in the app’s settings, or by emailing hello@partnerstandard.com. When you delete your account, we delete:

• your account, sign-in sessions and Google tokens;
• your company name;
• your market records, including their display names, and the ID of your folder;
• the locks and last-change times of your workbooks.

Your workbooks stay in your Google Drive. They remain yours, together with any contact data in them.

Deleting your account does not remove PartnerStandard’s access to your Google account. To remove it entirely, use Google’s Third-party connections page (section 7.6).

15. Disclosure in response to legal process

We may disclose personal data if the law requires it or in response to valid legal process, including:

• court orders or judicial proceedings;
• subpoenas or regulatory investigations;
• requests from law-enforcement authorities;
• legal claims, where disclosure is needed to establish, exercise or defend legal rights.

We check each request for validity and scope. Where the law allows, we tell the affected users before we disclose their data. We disclose only the minimum needed. Because we do not store market content, we usually cannot provide it.

16. Your rights

Under the GDPR you have the right to:

• Access: get a copy of your personal data.
• Rectification: correct inaccurate data.
• Erasure: ask us to delete your data.
• Restriction: limit how we use your data in certain cases.
• Portability: receive your data in a structured, machine-readable format. Your markets are already in your own spreadsheets.
• Object: object to processing based on legitimate interests.
• Withdraw consent: where we rely on consent, at any time.

Workbook content, including contact data of people at potential partners, is controlled by the user who added it (section 5.1). If you want details about you changed or removed from a workbook, ask that user. We can help you reach them.

17. How to exercise your rights

Email us at hello@partnerstandard.com. We may ask you to confirm your identity. We answer verified requests within 30 days.

You can also complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD) at aepd.es, or to the data protection authority where you live or work.

18. Security

We protect your data with:

• encryption in transit (HTTPS) for all traffic;
• encryption at rest for Google tokens, with the key kept apart from the database;
• permission checks on our servers for every read and every change;
• imported and pasted text written to your workbook as plain text, never as formulas;
• logs that contain IDs only.

No system is perfectly secure. If a personal data breach affects you, we will tell you and the supervisory authority as the GDPR requires.

19. Children

The Service is a business tool. It is not meant for anyone under 18, and we do not knowingly collect children’s data.

20. Changes to this policy

We may update this policy. We will announce material changes in the Service. The effective date at the top shows the latest version.

21. Contact

• Email: hello@partnerstandard.com
• Mail: Bernhard Friedrichs, Cowork Up! Puerta del Mar, C/ Cronista Carreres 10, Bajo, 46003 València, Spain