Legal

Privacy Policy

Last updated: 20 July 2026

1. Data controller

The data controller for personal data is VertexWorks OÜ (reg. 17599366) (Tallinn, Estonia). For questions, contact: info@vertexopti.ee.

2. What data we collect

  • Contact details: email address (to send the report and for account login).
  • Technical input data: heated area, electricity consumption, heating type, heat pump brand, supply and return temperatures, selected issues.
  • Generated reports: analysis results, estimates, the PDF file.
  • Technical logs: IP address, browser type, timestamps — for security and abuse detection.

3. Purpose and legal basis for processing

  • Performance of a contract (GDPR art. 6(1)(b)): carrying out the analysis, generating and emailing the report.
  • Legitimate interest (art. 6(1)(f)): service security, abuse prevention, statistics.
  • Consent (art. 6(1)(a)): optional cookies (statistics, marketing).

4. Where and how we store data

Data is stored in a secure Supabase (EU region) database on servers in Frankfurt. Data is encrypted in transit (TLS) and at rest (AES-256). Access is restricted to authorised personnel and protected by strict access policies (Row Level Security).

5. Authorised processors (sub-processors)

  • Supabase (EU/Frankfurt): database, authentication, file storage.
  • Resend: sending transactional emails (e.g. login link, report ready, report delivered).
  • Cloudflare: hosting and DDoS protection.

All partners comply with GDPR requirements and have signed data processing agreements (DPA).

6. Retention period

  • Active account and report data: until the account is deleted.
  • Technical logs: up to 90 days.
  • Accounting records: 7 years (statutory obligation).

7. Your rights

Under the GDPR you have the right to:

  • obtain a copy of your data;
  • request correction or deletion of your data;
  • restrict processing or object to it;
  • data portability;
  • withdraw consent at any time;
  • lodge a complaint with the Estonian Data Protection Inspectorate (aki.ee).

To exercise your rights, write to: info@vertexopti.ee.

8. Cookies

We use necessary cookies (session, security) and, with your consent, statistics and marketing cookies as well. You can change your choices at any time via the .

9. Changes

We may update this policy from time to time. We will notify you of material changes by email or on the website.