Data Controller
The data controller is Singularity Technology Labs, P. IVA IT02667420745. For questions about personal data, you can write to andrea.romano@singularitylabs.it.
Data sent with the audit form
When you request an audit, we treat name, surname, company, email, phone number, role, employee indicator number, sector, and description of the request. We use these data to evaluate the request, respond, and organize a potential commercial meeting.
Account, purchases, and online tools
To create and manage a Singularity Tools account, we treat email, name, surname, protected credentials, and session technical data. For Premium access, we treat subscription status and technical references returned by Stripe; complete card data is managed by Stripe and does not pass through our systems.
Open PDFs in the editor are processed in the browser and are not uploaded to Singularity Labs' server. The file and project state may remain in the device's local memory for up to 24 hours to allow recovery after access. The user can delete them by changing the document or removing site data from the browser.
In the Cookie Banner Generator, we treat the inserted public URL, domain, and technical scan results to provide the service and prevent abuse. Scans are automatically deleted after 30 days. If you save a project, we conserve configuration, versions, and site technical identifier until the project or account remains active. No site analysis credentials are required, and the scan does not attempt access to reserved areas.
For Premium projects, the site owner can activate a technical log of consents expressed through the banner. For each event, we conserve a random consent identifier, site identifier, UTC time generated by the server, accepted and refused categories, and banner, configuration, and information versions. The log does not include, by default, name, email, IP address, visited pages, precise geolocation, or device fingerprint. Every modification or revocation creates a new event; records are protected by a HMAC chain and cannot be modified from the panel.
The site owner chooses the log retention period from the available options, based on their accountability and minimization needs; at the end, records are automatically deleted. In this context, the site owner determines purposes, legal basis, and duration of the treatment, while Singularity Labs provides technical infrastructure. Roles and contractual conditions should be checked in relation to the specific case.
Legal basis and conferment
The treatment is necessary to respond to the interested party's request and perform pre-contractual activities. The conferment of indicated mandatory fields is necessary to manage the request; in their absence, we cannot contact you adequately.
Methods, recipients, and conservation
Data is transmitted through encrypted connection and forwarded to the corporate mailbox responsible for managing requests. They may be treated by necessary technical providers for hosting and email functionality, according to their roles and obligations. They are not published or used for automated decisions.
We store data for the time needed to manage the contact and the potential relationship, plus the periods required by law. Requests that do not follow a relationship are re-evaluated and deleted when no longer necessary.
Analysis, marketing, and communication with partners
Only after a positive choice in the privacy panel, we use Google Analytics 4 to measure visits and interactions. With the separate "Marketing and partners" consent, Google AdSense and Google Signals for advertising, user advertising data, and personalization can also be activated, with communication to Google and its partners of online identifiers, device information, and usage data. You can revoke the choice at any time from the "Privacy and cookies" button. Technical details and durations are described in the cookie policy.
Singularity Labs does not currently sell personal data to third parties. If a transfer or communication to commercial partners for their autonomous purposes were to be introduced, we will provide specific information and collect new consent, without ambiguous formulas or pre-selected boxes.
If you choose to receive commercial communications, we use your email address to send you news about tools, content, offers and updates from Singularity Labs. Consent is optional, is recorded with its date and does not affect access to services. Every promotional message contains an unsubscribe link; withdrawal updates your preferences and adds the address to the suppression list to prevent further mailings. Communications required for access, security, purchases and account operation remain separate from marketing campaigns.
Security and abuse prevention
To protect the form, we use technical anti-spam controls and limits on requests. In technical logs, we record essential and identifying events that are not directly readable, avoiding reporting the complete content of the form.
Data Subject Rights
You can ask for access, correction, deletion, limitation, or opposition to the processing, when applicable, by writing to the address indicated above. You also have the right to lodge a complaint with the Data Protection Authority.
Updates
This information may be updated in relation to changes to the site or treatments. Last updated: 20 September 2026.