Privacy Policy
What personal data we process, why, who we share it with and how long we keep it.
Controller and Contact
HindaAI is operated by the following contracting party and personal data controller: J&L Serverid OÜ.
Registry code: 11478495
VAT number: EE101657514
Registered and postal address: Haaviku tee 9, Külitse alevik, Kambja vald, Tartu maakond, 61702, Estonia
Contact: infohindaai.ee · Privacy: privacyhindaai.ee
1. What We Process and Why
- Account and use of the service
- Name, email address, and the addresses and details you enter yourself. We use them to provide the service you asked for (GDPR Art. 6(1)(b)).
- Public valuation snapshot without an account
- The searched address, an optional email address if you enter one, and a private access link. Anyone with the complete link can reopen the result until the link expires (GDPR Art. 6(1)(b)).
- Security and abuse prevention
- IP address and browser data for security, rate limiting and bot protection (GDPR Art. 6(1)(f)).
- Analytics
- Page and usage events, only with your consent; you can withdraw it at any time (GDPR Art. 6(1)(a)).
- Payments and accounting
- Purchase and billing details, when payments are offered, and to meet legal obligations (GDPR Art. 6(1)(b) and (c)).
2. Processors
We share data only to provide and protect the service.
- Hosting (EU)
- Hosting of the service and its database in the European Union.
- Cloudflare (USA)
- Network security and bot protection.
- Zoho ZeptoMail (USA)
- Sending service emails, such as sign-in links and replies.
- Stripe (EU and USA), when payments are offered
- Taking payments. You enter card details with Stripe.
- Google Analytics (USA) and PostHog (EU)
- Analytics, only with your consent.
- OpenRouter (USA), when AI features are used
- AI processing, such as generating a home portrait image from a rendering of the building.
When data is transferred outside the European Economic Area, we rely on a basis under Chapter V GDPR (an adequacy decision or standard contractual clauses). For more information, write to privacyhindaai.ee.
3. How Long We Keep Data
- Account and saved data
- Until you remove it from the service or ask us to delete your account.
- Public snapshot
- The link works for 30 days. Email and IP address are deleted within 75 days.
- Security, email-delivery and usage records
- Up to 13 months.
- Read contact messages
- 1 year.
- Payment and accounting records
- Up to 7 years, as accounting law requires.
5. Your Rights
Under the GDPR you can request access, rectification, erasure, portability and restriction of processing, and you can object to processing. You can withdraw consent at any time.
Make a request in the dashboard under Settings → Privacy & data or write to privacyhindaai.ee. We reply without undue delay and generally within one month.
6. Complaints
If you believe your data protection rights have been infringed, you can complain to the Estonian Data Protection Inspectorate, Andmekaitse Inspektsioon (aki.ee, infoaki.ee), or go to court.
7. Changes
If this policy changes materially, we publish the new version on this page. Earlier versions remain available: