How we handle data

Who handles the data

1Prime Cloud is sold by two companies, depending on where you are:

• customers in the European Union: Prime Server S.r.l., Via General Cantore 33-35, 58100 Grosseto (GR), Italy · VAT and tax code IT01794620532;
• customers outside the European Union: KOAGRP, LLC, 131 Continental Dr, Suite 305, Newark, DE 19713, United States.

The data controller is the company that sells you the service, shown on your order and invoices. For questions or to exercise your rights, write to us from the Support page.

What we handle, and why

Account data. Name or company name, address, email, phone, VAT number and SDI code if you give them, password kept only in hashed form. We need them to provide the service: the legal basis is the contract.

Billing and payments. Orders, amounts, invoices. Card details are handled by the payment provider: we never see or store them. We keep invoices because the law requires it.

The content you host. Files, databases, email and sites you put on our servers are yours. If they contain other people's personal data (your site visitors, your customers), you are the controller and we process it on your behalf as processor under article 28 of Regulation (EU) 2016/679. The data processing agreement is available on request.

Technical logs. Servers log access, errors and failed login attempts, with the IP address. We need them to run the service, defend it from attacks and answer you when you ask for help: the legal basis is our and your legitimate interest.

Support and chat. When you write to us we handle your name, email and messages, to answer you.

AI assistant and site builder. Only if you use them: we send the AI model provider the conversation and the site texts needed to answer, never your site files.

Cookies

This site uses no tracking cookies and no third-party analytics. It only remembers your «VAT included / excluded» choice in your browser. The chat and the client area use technical data needed for them to work.

Where the data sits

Hosting, client area and backups are in the European Union.

For Cloud you choose the location. If you choose one outside the Union, your Cloud's data sits there by your choice: the United Kingdom and Canada are covered by a European Commission adequacy decision, India is not.

KOAGRP, LLC is based in the United States: for the customers it serves, account and billing data are also processed from there.

Who we share it with

We sell no data and run no advertising on customer data.

Acting as processors, and only for what is needed: data centre providers, payment providers, the email delivery service, domain registries (for domains you register) and, if you use the AI assistant, the model provider. The current list is available on request.

We disclose data to the authorities where we are required to.

How long

Account: while the relationship is active, then until outstanding matters are closed.

Tax documents: as long as the law requires (ten years in Italy).

Hosted content and backups: deleted after the service ends, on the timeline set out in the Terms.

Technical logs: for as long as security and support need, then deleted.

Your rights

You can ask us to access, correct or delete your data, restrict its processing, receive it in machine-readable form, or object to processing based on legitimate interest (articles 15 to 22 of the Regulation). We answer within one month.

If you think something is wrong you can complain to the Italian data protection authority (garanteprivacy.it) or to the authority in your country.

Changes

If we change this notice we change the date below and, for substantial changes, tell customers by email.

Last updated: 20/10/2026