Privacy Policy (GDPR)

1. Data Controller Identity

The data controller responsible for personal data processing is: Daniel Kopecký, ID: 29533660, VAT ID: CZ29533660, address: Krkonošská 1522/4, 120 00 Prague 2, Czech Republic, email: info@edgesenseai.app. We process all personal data in strict compliance with Regulation (EU) 2016/679 (GDPR).

2. Categories of Data Processed

• Account Data: Email address and hashed authentication password.
• Subscription Data: Stripe Customer ID, plan status, and active billing period dates. Full payment card details are handled directly by Stripe and are never stored on our servers.
• Technical Data: IP address, browser user-agent, session cookies, and app locale preferences.

3. Purposes and Legal Bases for Processing

We process your personal data for:

• Contract Performance (Art. 6(1)(b) GDPR): Creating and administering user accounts, processing subscription payments, and delivering digital analytical content.
• Legal Obligations (Art. 6(1)(c) GDPR): Tax and accounting record retention pursuant to applicable laws.
• Legitimate Interests (Art. 6(1)(f) GDPR): Protecting against fraud, ensuring system security, and defending legal claims.

4. Third-Party Processors

We engage reputable cloud service providers under data processing agreements:

• Supabase Inc.: Cloud database and authentication infrastructure, hosted in EU (Frankfurt).
• Stripe Inc.: Payment processing and billing management.
• Vercel Inc.: Hosting, edge caching, and serverless compute.

5. Your Rights Under GDPR

As a data subject, you have the right to request access to, rectification of, or erasure of your personal data; the right to restrict processing; the right to data portability; and the right to object to processing. To exercise these rights, email info@edgesenseai.app. You also have the right to lodge a complaint with your supervisory data protection authority (in the Czech Republic: Úřad pro ochranu osobních údajů, www.uoou.gov.cz).