Privacy Policy

1. Data controller and contact

Data controller (legal name, registered address, registration details): [TO BE COMPLETED].

For any questions about this Privacy Policy or about how your personal data is processed, please contact us at sentavakontakt@gmail.com.

Data Protection Officer contact details, if applicable: [TO BE COMPLETED].

2. Categories of data we process

• Account data — email address, authentication data, and, if you sign in with Google, basic profile information provided by Google.
• Technical and log data — such as IP address, device and browser information, and usage logs generated while you use the Service.
• Check data — the Listing link or text you submit, and the resulting Analysis Result, stored as part of your Check history.
• Payment data — information related to Credit purchases. Payment processing itself is handled by an external payment provider (TO BE CONFIGURED); we do not store full payment card details.

Please do not include personal data belonging to yourself or third parties (for example names, phone numbers, or addresses) in the Listing text you paste into Sentava. We recommend removing such details before submitting a Listing for analysis.

3. Purposes of processing

• Creating and managing your Account and authenticating you when you log in.
• Performing the Check you request and generating the Analysis Result.
• Managing your Credit balance and processing Credit purchases.
• Maintaining the security, stability, and proper functioning of the Service.
• Responding to complaints, support requests, and other communications.
• Complying with applicable legal obligations.

4. Legal basis for processing

Depending on the purpose, we rely on the following legal bases under the GDPR: performance of a contract with you (Art. 6(1)(b)); our legitimate interest in operating and securing the Service (Art. 6(1)(f)); and compliance with a legal obligation (Art. 6(1)(c)).

The precise legal basis for each processing activity is to be confirmed by a qualified lawyer before commercial launch.

5. Recipients of data and processors

We share personal data only with the following categories of recipients, each acting in the roles described:

• Lovable Cloud (built on Supabase) — hosting infrastructure and database, including storage of Account data and Check history.
• Lovable AI Gateway, using Google Gemini models — processes Listing text and publicly available Listing photos in order to generate the Analysis Result.
• Firecrawl — an external web search/scraping service used to retrieve reference market data for price comparisons.
• frankfurter.app — a public service providing currency exchange rates used for currency conversion within the Service.
• Payment provider — TO BE CONFIGURED. Used to process Credit purchases.

6. International data transfers

Details regarding transfers of personal data outside the European Economic Area (EEA), including the safeguards applied (such as Standard Contractual Clauses), are: [TO BE COMPLETED].

7. Data retention

We retain your Check history for as long as your Account remains active. If you close your Account, we will delete or anonymize your personal data in accordance with applicable law.

Specific retention periods for individual categories of data: TO BE CONFIGURED.

8. Your rights

Subject to applicable law, you have the right to:

• access the personal data we hold about you;
• request correction of inaccurate or incomplete data;
• request deletion of your data;
• request restriction of processing in certain circumstances;
• request that we provide your data in a portable format;
• object to processing based on our legitimate interest;
• lodge a complaint with a supervisory data protection authority.

To exercise any of these rights, please contact us at sentavakontakt@gmail.com.

9. Automated decision-making and profiling

The Analysis Result generated by Sentava is an informational output intended to support your own decision-making. It does not produce legal effects concerning you or similarly significantly affect you, and we do not use it to make automated decisions about you within the meaning of applicable data protection law.

10. Security

We apply reasonable technical and organizational measures designed to protect personal data against unauthorized access, loss, or misuse. No system can be guaranteed to be completely secure, and we encourage you to keep your Account credentials confidential.

11. Children

Sentava is not intended for use by individuals under the age of 16. This age threshold is to be confirmed by a qualified lawyer before commercial launch, taking into account applicable local requirements.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to the Service or applicable law. We will indicate the current version number and effective date at the top of this document, and we will make reasonable efforts to notify you of material changes.