Privacy Policy & Data Treatment

Ponte Labor Inc. ("Ponte", "we", "our", or "us") operates the Ponte AI Recruiting Assistant platform and the website at pontelabor.com. This Privacy Policy explains how we collect, use, store, and protect information about you when you use our services.

By accessing or using our services you agree to the practices described in this policy. If you do not agree, please do not use our services.

Information you provide directly

• Contact & account data — name, business email address, company name, job title, and phone number when you request a demo or create an account.
• Communications — messages, emails, and any other content you send to us.
• Candidate data (hotel HR users) — information about job applicants that hotel HR teams upload or import into the Ponte platform (names, contact details, work history, screening responses).

Information collected automatically

• Usage data — pages visited, features used, session duration, clicks, and navigation paths.
• Device & log data — IP address, browser type, operating system, referrer URL, and timestamps.
• Cookies & similar technologies — see the Cookies & Analytics section below.

We use the information we collect to:

• Provide, maintain, and improve the Ponte platform.
• Respond to demo requests, support inquiries, and other communications.
• Send transactional emails (account setup, product updates) and, with your consent, marketing communications.
• Analyse usage patterns to improve user experience and platform performance.
• Comply with legal obligations and enforce our Terms of Service.
• Detect and prevent fraud, abuse, or security threats.

We do not sell your personal information to third parties.

We may share your information with:

• Service providers — cloud infrastructure, email delivery, analytics, and customer support tools that process data on our behalf under strict data processing agreements.
• Business transfers — in the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
• Legal requirements — when required by law, regulation, legal process, or governmental request.
• Protection of rights — to protect the rights, property, or safety of Ponte, our users, or the public.

We retain personal data for as long as necessary to provide our services and fulfil the purposes described in this policy, unless a longer retention period is required by law.

• Account data — retained for the duration of your account plus up to 12 months after closure.
• Candidate data — retained as configured by the hotel HR team; hotel customers are the data controllers for candidate information.
• Log data — typically retained for 90 days.

You may request deletion of your personal data at any time by contacting us at lorenza@pontelabor.com.

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, accidental loss, alteration, or disclosure. These measures include encryption in transit (TLS), access controls, and regular security reviews.

No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

This section constitutes Ponte's Data Treatment Policy and describes how personal data processed through the platform is handled in accordance with applicable data protection law.

Legal basis for processing (GDPR / CCPA)

• Performance of a contract — processing necessary to deliver the services you have requested.
• Legitimate interests — improving our services, preventing fraud, and direct marketing to existing customers.
• Consent — where we rely on your explicit consent (e.g., marketing emails); you may withdraw consent at any time.
• Legal obligation — where processing is required by applicable law.

Data controller & processor roles

When Ponte provides recruiting automation services to hotel HR teams, the hotel is typically the data controller for candidate personal data, and Ponte acts as the data processor. Ponte processes such data solely on the documented instructions of the hotel customer.

For data collected through the pontelabor.com website (demo requests, contact forms), Ponte is the data controller.

International data transfers

Our infrastructure is primarily located in the United States. If you are located in the European Economic Area (EEA), United Kingdom, or other regions with data transfer restrictions, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses) for any cross-border transfers.

Sub-processors

We engage third-party sub-processors to deliver our services. We maintain a current list of sub-processors and will notify customers of material changes. Customers may request the current sub-processor list by emailing lorenza@pontelabor.com.

Data minimisation

We collect only the data necessary for the stated purpose. We do not process special categories of sensitive personal data (e.g., health information, biometric data) unless explicitly required and consented to.

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you.
• Correction — request that inaccurate or incomplete data be corrected.
• Deletion — request erasure of your personal data ("right to be forgotten").
• Portability — receive your data in a structured, machine-readable format.
• Restriction — request that we restrict processing of your data in certain circumstances.
• Objection — object to processing based on legitimate interests or for direct marketing.
• Opt-out of sale (CCPA) — California residents have the right to opt out of the sale of personal information. We do not sell personal information.

To exercise any of these rights, please contact us at lorenza@pontelabor.com. We will respond within 30 days.

We use cookies and similar technologies to operate our website and understand how visitors interact with it.

Essential cookies

Required for the website to function. They cannot be disabled. Examples include session management and security cookies.

Analytics cookies

We may use analytics tools to understand aggregate usage patterns and improve our website. Analytics data is collected in aggregate and does not personally identify you. We may use PostHog (or a similar product analytics platform) to collect usage events, session recordings, and feature engagement data. PostHog processes data on servers located in the United States or the EU depending on configuration.

You can opt out of analytics tracking by using a browser opt-out tool or enabling the Do Not Track signal in your browser settings.

Managing cookies

You can control cookies through your browser settings. Note that disabling certain cookies may affect the functionality of our website.

If you have questions about this Privacy Policy, would like to exercise your data rights, or have a privacy concern, please contact us:

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated "Last updated" date.