Privacy Policy

1. Who We Are

This website is operated by aperAI OÜ ("we", "us", "our"), an AI consultancy registered in Estonia (registry code 17446295). We are committed to protecting your privacy and handling your personal data in compliance with the EU General Data Protection Regulation (GDPR) and the Estonian Personal Data Protection Act (Isikuandmete kaitse seadus, IKS).

Contact:
aperAI OÜ
Narva mnt 5, 10117 Tallinn, Estonia
Registry code: 17446295
Email: hello@aperai.eu

2. What Data We Collect

We collect personal data only when you actively provide it to us. Specifically:

2.1 Contact Form

When you submit our contact form, we collect:

• Name — so we know who we're speaking with
• Email address — so we can respond to your inquiry
• Message content — your inquiry or question
• IP address — collected automatically for security and spam prevention
• Timestamp — when the submission was made

2.2 Server Logs

Our web hosting provider may automatically collect standard server log data when you visit this website, including your IP address, browser type, referring page, and the date and time of your visit. This data is used solely for maintaining the security and functionality of the website.

3. How We Use Your Data

We use the data collected through the contact form exclusively to:

• Respond to your inquiry
• Follow up on our conversation if you've expressed interest in our services
• Protect against spam and abuse

We do not use your data for marketing, profiling, automated decision-making, or any purpose other than responding to your direct inquiry.

4. Legal Basis for Processing

We process your personal data based on the following legal grounds under GDPR:

• Article 6(1)(b) — Processing is necessary for the performance of a contract or to take steps at your request prior to entering into a contract (i.e., responding to your inquiry about our services).
• Article 6(1)(f) — Legitimate interest in maintaining the security of our website and preventing abuse (for IP address and server log data).

5. Data Storage and Security

Contact form submissions are stored in a PostgreSQL database hosted by our hosting provider (Websupport) on servers located within the European Union. We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction.

6. Data Retention

We retain contact form submissions for as long as necessary to process your inquiry and for any subsequent business relationship. If no business relationship is established, we delete your data within 12 months of your last interaction with us, unless we are legally required to retain it for longer.

7. Data Sharing

We do not sell, rent, or share your personal data with third parties for their own purposes. Your data may be processed by:

• Our hosting provider (Websupport) — for the technical operation of this website and database, acting as a data processor under GDPR.

We do not transfer data outside the European Economic Area (EEA).

8. Cookies

This website does not use cookies for tracking, analytics, or advertising. We do not use any third-party analytics services (such as Google Analytics). No cookie consent banner is needed because we don't set any cookies.

9. External Resources

This website loads the following resources from external servers:

• Google Fonts (fonts.googleapis.com) — for typography (Outfit and Inter typefaces)
• Lucide Icons (unpkg.com) — for interface icons

When loading these resources, your browser sends a request to these servers, which may include your IP address. Google's privacy policy applies to the use of Google Fonts: policies.google.com/privacy.

10. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access (Art. 15) — You can request a copy of the personal data we hold about you.
• Right to rectification (Art. 16) — You can ask us to correct inaccurate data.
• Right to erasure (Art. 17) — You can ask us to delete your data ("right to be forgotten").
• Right to restrict processing (Art. 18) — You can ask us to limit how we use your data.
• Right to data portability (Art. 20) — You can request your data in a structured, machine-readable format.
• Right to object (Art. 21) — You can object to our processing of your data based on legitimate interest.

To exercise any of these rights, contact us at hello@aperai.eu. We will respond within 30 days.

11. Right to Lodge a Complaint

If you believe that our processing of your personal data violates the GDPR, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate:

Andmekaitse Inspektsioon
Tatari 39, 10134 Tallinn, Estonia
Email: info@aki.ee
Website: www.aki.ee

12. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this page periodically.