Privacy policy

Data controller: [company name, registration number, address, privacy email].

1. Your data as a customer

• Email address – for your account, sign-in codes, reports and payment notices.
• Searches and reports – to provide the service and show reports in your account.
• Payment information – payments are processed by Stripe; we never see or store card details.
• Technical data – IP address, browser details, strictly necessary cookies for security and the session.

Legal basis: performance of the contract, legal obligations (accounting) and legitimate interest (fraud prevention, security).

2. Data about people who are searched for

Reports contain only publicly available information with a link to its source. We do not knowingly collect or show special-category data (health, religion, sexual orientation, etc.). Photo search never uses face recognition.

Legal basis: legitimate interest. [For the lawyer: prepare the legitimate-interest assessment and the GDPR Art. 14 information process.]

If you believe our reports contain information about you, you can:

• ask us to remove your phone number, email or name from future reports;
• find out what data we process about you and ask us to delete or correct it;
• object to the processing.

Write to [email]. We reply within 30 days.

3. How long we keep data

• Reports and their findings – 30 days, then deleted automatically.
• Account data – while you have an account.
• Accounting records – as long as the law requires.

4. Who we share data with

Service providers that help us run the service: hosting, payments (Stripe), email (Brevo), search and text generation (fal.ai). We never sell data.

5. Your rights

You have the right to access, correct, delete, restrict, port and object to the processing of your data. You can complain to the State Data Protection Inspectorate of Lithuania (www.vdai.lrv.lt).