Privacy Policy & GDPR Notice

PLACEHOLDER — owner to finalize with lawyer.

Controller: [Company name], IČO [ICO], [address], [email].

Data we process: account email + auth data, billing data (via Stripe), reports you generate, usage logs.

Processors: Stripe (payments), Resend (email), OpenAI (report generation), Cloudflare R2 (storage), Hetzner (hosting).

Legal bases: contract performance (providing reports), legitimate interest (security/abuse prevention), consent (optional analytics cookies).

Your rights (GDPR): access, rectification, erasure, portability, objection — contact [email].

Retention: [owner to specify].

Cookies: necessary cookies for auth/session; optional analytics only with consent (see the cookie banner).