Privacy policy

Version of [date]. Draft, pending legal review.

1. Controller

The data controller is [OÜ name], reg. code [code], [address], Estonia. Data questions: [email protected].

2. What we process and why

Data	Purpose	Basis (GDPR)	Retention
Uploaded documents and the data in them	Preparing the report	Contract, Art. 6(1)(b)	7 days after the report is sent
Email, name, payment data	Payment, sending the report, accounting	Contract and legal obligation, Art. 6(1)(b), (c)	As required by Estonian accounting law
Website visit and ad data	Analytics and ad measurement	Consent, Art. 6(1)(a)	Per Google Analytics settings, at most 14 months

3. Who we share it with

Processors under contract: Stripe (payments), [form service] (document upload and storage in the EU), Cloudflare (website hosting), Google (analytics and ads — only with your cookie consent). Some processors may transfer data outside the EU under EU Standard Contractual Clauses.

4. Your rights

You may request access, correction, erasure, restriction, portability, and withdraw consent. You may complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or the authority in your country of residence.

5. Automated decisions

Reports are prepared by a specialist. No decisions with legal effect on you are made automatically.