Privacy Policy

Last updated: 26/02/2026

1. Data Controller

The data controller for the processing of your personal data is:

2. What Data We Collect

We process the following categories of personal data:

• Account data — name, email address, company name, password (stored encrypted)
• Usage data — uploads, generated estimates, search history within the platform
• Technical data — IP address, browser type, device information, cookies
• Payment data — processed by our payment provider and not stored by us

3. Legal Basis for Processing

We process your data based on the following legal grounds (Article 6 GDPR):

• Performance of a contract — necessary to provide our services to you
• Legitimate interest — for improving our services and preventing fraud
• Consent — when you explicitly consent, for example for marketing communications
• Legal obligation — when we are legally required to retain data

4. Purpose of Processing

We use your personal data for the following purposes:

• Providing and maintaining our services
• Creating and managing your account
• Communication about your account, orders and services
• Improving and personalising our services
• Complying with legal obligations

5. Sharing with Third Parties

We never sell your personal data to third parties. We may share your data with:

• Processors — service providers who process data on our behalf (hosting, payments, email), with whom we have signed data processing agreements
• Legal authorities — if we are legally required to do so

6. Retention Periods

We do not retain your personal data longer than necessary for the purposes for which they were collected. The following periods apply:

• Account data — up to 12 months after account deletion
• Financial data — 7 years (legal retention obligation)
• Technical log files — maximum 12 months

7. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or destruction. These include:

• SSL/TLS encryption for all data transfer
• Encrypted storage of passwords and sensitive data
• Data storage within the European Union
• Regular security audits and updates

8. Cookies

Our website uses cookies. We distinguish the following categories:

• Functional cookies — necessary for the website to function (no consent required)
• Analytical cookies — to analyse and improve website usage

9. Your Rights

Under the GDPR, you have the following rights:

• Right of access — you can request which data we process about you
• Right to rectification — you can have incorrect data corrected
• Right to erasure — you can request your data to be deleted
• Right to restriction — you can have the processing of your data restricted
• Right to data portability — you can receive your data in a structured format
• Right to object — you can object to the processing of your data

10. Changes

We reserve the right to amend this privacy policy. Changes will be published on this page. In case of substantial changes, we will notify you by email.

11. Contact

Do you have questions about this privacy policy or the processing of your personal data? Contact us: