We collect the minimum data needed to answer inquiries, scope work, run agreed projects, provide access to tools, meet legal obligations and protect the service.
We do not sell personal data. We do not use inquiry content to train public models. If a project requires model training or evaluation on your data, that is agreed in the order or data processing agreement.
01Data We Collect
- 1.1Contact data: name, email, organization and message content you send through email or the quote form.
- 1.2Project data: files, examples, prompts, datasets, evaluation notes and technical metadata you provide for scoping or delivery.
- 1.3Website data: basic server logs and security events. This static site does not intentionally set analytics or advertising cookies.
02Purposes And Legal Bases
- 2.1Responding to inquiries and preparing quotes: legitimate interests and pre-contractual steps.
- 2.2Delivering services: contract performance, legitimate interests and, where applicable, a data processing agreement.
- 2.3Accounting, tax and company records: legal obligation.
- 2.4Security, abuse prevention and service integrity: legitimate interests.
03Retention
- 3.1Unsuccessful inquiries are normally deleted or archived within 12 months unless there is a reason to keep the thread.
- 3.2Project records are retained for the contract period and a reasonable limitation period after delivery.
- 3.3Accounting records are retained for the period required by Estonian law.
04Your Rights
- 4.1You may request access, rectification, erasure, restriction, portability or objection where GDPR allows it.
- 4.2You may complain to the Estonian Data Protection Inspectorate or your local EU/EEA supervisory authority.
05Recipients And Processors
- 5.1We share personal data only with the processors listed below, each engaged to provide part of this service. We do not sell personal data and we do not share it for advertising.
- 5.2Hosting: the website is served as static files by our hosting provider, which processes basic server logs and security events on our behalf.
- 5.3Scheduling: the booking page at /book/ embeds the Cal.com scheduler. If you open it, Cal.com receives the booking details you enter and may set cookies. See cal.com/privacy. No other page contacts Cal.com.
- 5.4Contact form: submissions are delivered to us by Web3Forms (Aaraa Technologies), which receives the name, email, organization and message you submit for the sole purpose of delivering that message to us. See web3forms.com/privacy.
- 5.5Email: correspondence is processed by our email provider under their standard terms.
- 5.6Where a processor is established outside the European Economic Area, the transfer relies on an adequacy decision or on appropriate safeguards under Chapter V GDPR.
- 5.7We may also disclose personal data to professional advisers, or to a competent authority where required by law.