Privacy Notice

1. Data controller

EcoPassport AI is operated by Aitbaev Nursultan, an individual seller based in Slovakia, who acts as the data controller for personal data processed through the service.

2. Data we collect and why

• Account data (name, email address, login credentials) — to create and manage your account (legal basis: contract performance).
• Content you upload (estimates, invoices, specifications and the projects/reports you create) — to provide the service (legal basis: contract performance).
• Support messages — to respond to your requests (legal basis: legitimate interests / contract performance).
• Usage and technical data (device identifiers, IP address, usage/telemetry) — for security, fraud prevention and product improvement (legal basis: legitimate interests).

Payment card details are collected and processed directly by Paddle (our Merchant of Record); we never see or store your card numbers.

3. Who we share data with

• Service providers / subprocessors — hosting, database and analytics providers that help us run the service.
• Paddle — our Merchant of Record, for the sale of the product, subscription management, payments, tax compliance and invoicing.
• Professional advisers — legal and accounting advisers where necessary.
• Authorities — where required by law.

4. International transfers

Some providers may process data outside the UK/EEA. Where this happens, transfers are protected by appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

5. Retention

We keep personal data only as long as needed for the purposes above (including legal retention obligations), after which it is deleted or anonymised.

6. Your rights

You have the right to access, rectify and erase your personal data, to restrict or object to processing, to data portability, and to withdraw consent where processing is based on consent. You also have the right to lodge a complaint with your supervisory authority. We respond to requests within one month. To exercise your rights, contact us via the email shown on our website.

7. Security

We apply appropriate technical and organisational measures, including encryption in transit and at rest, access controls and row-level data isolation between accounts.

8. Cookies

We use essential cookies/local storage required for sign-in and core functionality (e.g. session, theme and language preferences). We do not use marketing cookies. You can manage cookies through your browser settings; disabling essential cookies may prevent sign-in.

9. Contact

Privacy questions: contact EcoPassport AI support via the email shown on our website.