Privacy Policy

We process the following categories of personal data:

• Sign-up details — when you start a trial or subscribe, we collect your name, work email, organization name, and (for paid subscriptions) your EU VAT number and billing address.
• Account and usage data — when you use the API or Agent Plugin we store your account identifier, issued API tokens, and request logs (timestamp, endpoint, response status, IP address) for security, debugging, and billing.
• Correspondence — any information you choose to send us by email or through a contact form.
• Aggregate analytics — privacy-friendly, cookieless usage statistics collected via Plausible Analytics (see Section 7).

We do not knowingly collect special categories of personal data (e.g. health, political opinions) and we ask you not to send us any.

Under the GDPR, we rely on the following legal bases:

• Performance of a contract (Art. 6(1)(b)) — to provide and operate the Services for trial, subscription, and Agreement holders.
• Legitimate interests (Art. 6(1)(f)) — to keep the Services secure, prevent abuse, measure aggregate usage, and improve our product. We have assessed that these interests do not override your rights and freedoms.
• Legal obligation (Art. 6(1)(c)) — to comply with accounting, tax, and other obligations under Estonian and EU law.
• Consent (Art. 6(1)(a)) — where required, for example when you explicitly opt in to receive marketing communications.

We do not use your personal data for automated decision-making that produces legal or similarly significant effects, and we do not sell it.

We keep personal data only for as long as we need it:

• Account data — for as long as your account is active, and deleted within 30 days of account closure, except where retention is required by law.
• API request logs — up to 90 days, then deleted or aggregated.
• Invoicing and accounting records — for 7 years, as required by Estonian accounting law.
• Marketing and trial inquiries — up to 24 months from the last interaction.

We do not sell personal data. We share it only with service providers that help us operate the Services, each acting as a processor under a written agreement:

• Hosting and infrastructure — Ubicloud and related providers, for running our servers and storing data.
• Email delivery — to send you transactional emails (e.g. trial verification, invoices).
• Payment processing — to handle subscription payments and invoicing for paid Services.
• Analytics — Plausible Analytics for cookieless, aggregate website usage statistics.

We may also disclose personal data when required by law, by a competent authority, or to defend our legal rights.

Under the GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate personal data corrected;
• have your personal data erased, where applicable;
• restrict or object to the processing of your personal data;
• receive your personal data in a portable format and have it transmitted to another controller;
• withdraw your consent at any time, where processing is based on consent.

To exercise any of these rights, email privacy@balancing.services. You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee) or with the supervisory authority in your EU country of residence.

For privacy questions, requests, or complaints:

Balancing Services OÜ
Jakobi tn 31-3
51006 Tartu, Estonia
Registry code: 17276551
Email: privacy@balancing.services