Privacy policy

1. Controller

The controller of personal data processed through this website is AIPOS OÜ, registry code 16966532, Pargi tn 1, Kabala küla, Türi vald, 72001 Järva maakond, Estonia. For privacy matters, write to valmisfirma@gmail.com.

2. What we collect and why

2.1 Project request form

When you send a project request, we store the data you enter: company, your name, e-mail address, project description, technology, approximate scope, desired deadline and whether a repository exists. We also record the time of the request and the IP address from which it was sent, for the purpose of preventing abuse of the form.

We use this data to reply to your request with a scope description and, if you proceed, to prepare and perform a contract. The legal basis is Article 6(1)(b) of the GDPR (steps prior to entering into a contract, at your request) and, for the abuse-prevention data, Article 6(1)(f) (our legitimate interest in keeping the form usable).

2.2 Server logs

Like every web server, ours records technical access logs (IP address, requested address, time, browser identification). They are used only to operate and secure the website and are rotated routinely. Legal basis: Article 6(1)(f) GDPR.

2.3 No cookies, no trackers

This website sets no cookies and uses no analytics, advertising or social-media scripts. Fonts and scripts are served from this domain, so no third party is contacted when you view a page.

3. Recipients and processors

Form submissions are stored on a server operated by AIPOS OÜ. When a request arrives, a notification e-mail is sent to us through the transactional e-mail service Mailgun (Sinch Mailgun), using its European Union region. Mailgun processes the content of the notification solely to deliver it. If you become a client, the work runs through commercial AI model APIs; which providers are used and how your data is handled is set out in the contract, and no client data is sent to such services on the basis of a form request alone.

We do not sell personal data and do not share it with anyone else, unless required by law.

4. Retention

Form requests are kept for as long as needed to answer them and, where a contract follows, for the duration of the contractual relationship and the statutory retention periods that apply to it. Requests that do not lead to a contract are deleted when they are no longer needed. You may ask for deletion at any time.

5. Your rights

Under the GDPR you have the right to access the personal data we hold about you, to have it corrected or deleted, to restrict or object to its processing, and to receive it in a portable format. To exercise any of these rights, write to valmisfirma@gmail.com. You also have the right to lodge a complaint with a supervisory authority; in Estonia this is the Data Protection Inspectorate (Andmekaitse Inspektsioon).

6. Security

The website is served over HTTPS only. Form submissions are validated, rate-limited and stored with restricted file permissions on our own infrastructure.

7. Changes

If this policy changes, the new version is published on this page. The current version is dated 8 November 2026.