Privacy Policy

Sifartek OÜ, registered in Estonia, is the controller of the personal data described in sections 2 to 5, which is data about visitors to this site and people who contact us. For data you share with us for a project, section 6 applies, and there we act as a processor on your instructions.

• What you type into the contact form: name, work email, company, what you need, when you would like to start, and your message.
• Booking details if you schedule a call through Calendly: name, email, the time you chose, and anything you add.
• Emails you send us.
• Analytics about how the site is used. Google Analytics runs only if you accept analytics cookies and records pages viewed, approximate location, device and browser type. Vercel Analytics sets no cookies and counts page views in aggregate without identifying you.

• To answer you and, if you ask for one, to prepare a call or a proposal. Basis: steps you asked us to take before a contract, and our legitimate interest in answering enquiries.
• To run the engagement if you become a client. Basis: the contract.
• To understand which pages are read, so the site can be improved. Basis: your consent for Google Analytics, given through the cookie banner and withdrawable by clearing it in your browser at any time; our legitimate interest for Vercel Analytics, which is cookieless and does not identify you.
• To keep records the law requires, such as invoices. Basis: legal obligation.

We do not sell personal data and we do not send marketing emails to people who have not asked for them.

Only the services needed to run this site and answer you, each under its own privacy terms:

• Resend, which delivers the contact form to our mailbox.
• Calendly, if you book a call.
• Vercel, which hosts this site, and Vercel Analytics (cookieless).
• Google Analytics, only with your consent.

Some of these providers process data outside the European Economic Area. Where they do, transfers rely on the European Commission’s adequacy decisions or on standard contractual clauses.

• Contact form messages and emails: up to twenty-four months after our last exchange, then deleted, unless you became a client, in which case for the length of the engagement plus the period accounting law requires.
• Analytics data: fourteen months, the Google Analytics default.
• Cookie consent choice: stored in your browser until you clear it.

This is the part that matters most to a client, so it is stated separately. When you share data with us for mapping and test, a pilot or a build, it may contain personal data about your staff, your customers or third parties. For that data:

• You are the controller and we are your processor. We act only on your written instructions, which are set out in a data processing agreement we sign with you before any data is shared. If you have your own template, we use it.
• Your data is stored and processed on infrastructure in the European Union unless your instructions say otherwise.
• Where the software uses an AI model, the data needed for that step is sent to the model provider’s service. We name the provider in your data processing agreement. We only use providers whose business terms prohibit training on customer data, and we do not train general models on your data either. Where the software learns from your data or your team’s corrections, that learning stays inside your own deployment.
• Data shared for mapping and test, and the outputs produced from it, are deleted within thirty days of that engagement ending unless you go on to a pilot. During a pilot and afterwards, your data lives in an environment you control.
• We keep no copy of your data after an engagement ends, other than what the law requires us to keep, such as invoices.

The site remembers your consent choice in your browser’s local storage. Analytics cookies are set only if you accept them in the banner. Calendly sets its own cookies if you open the booking widget. You can clear or block cookies in your browser at any time; the site works without them.

Under the GDPR you can ask us for a copy of the personal data we hold about you, ask us to correct or delete it, restrict or object to how we use it, take it with you in a portable format, and withdraw consent you have given. Write to contact@sifartek.com and we answer within a month. You can also complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee) or to the supervisory authority where you live.

Access to data is limited to the people who need it for the work. Systems use encryption in transit and at rest, access controls and logging. No system is perfectly secure, and if a breach affects your data we will tell you without undue delay, as the law requires.

This site and our services are for businesses. We do not knowingly collect data from anyone under fourteen.

If this policy changes, the new version appears here with a new date at the top. Material changes to how we handle client data are also communicated to current clients directly.

Sifartek OÜ, Tallinn, Harju County, Estonia. contact@sifartek.com.