Privacy Policy

Effective date: 2025-12-29

1. Data Controller

Nopasanada OÜ, Registry code: 16839644, Address: Parda tn 3/5/7, 10151 Tallinn, Estonia. Contact: bakshish@bakshish.eu

2. What data we process

• Account data: email, password hash, verification status
• Public profile: display name, goal text, selfie/video (optional)
• Payout data (Providers): name (Latin), IBAN
• Transaction data: amounts, currency, provider IDs, statuses, timestamps
• Technical data: IP address, user agent, logs (for security and debugging)

3. Payment data

Payments are processed by third-party payment providers (e.g., Stripe / Paysera). We do not store full card numbers or CVV. Payment providers may process data under their own privacy policies.

4. Purposes and legal bases

• Provide the Service (contract performance)
• Security, fraud prevention (legitimate interests)
• Legal obligations (accounting, compliance where applicable)
• Communications (service emails, verification, password reset)

5. Sharing

• Payment providers (Stripe/Paysera) for processing payments
• Transfer provider (Paysera Transfer) for payouts
• Hosting/infrastructure providers as needed to operate the Service

6. Retention

We retain data as long as needed to provide the Service and meet legal requirements. Transaction records may be retained for accounting/audit periods required by law.

7. Your rights

• Access, rectification, deletion (where applicable)
• Restriction/objection, data portability
• Withdraw consent for optional data (e.g., selfie/video) by deleting it in your profile
• Complaint to your local data protection authority

8. Cookies

We use essential cookies for authentication/session security. Optional analytics cookies (if enabled) will be disclosed separately.

9. Contact

Privacy questions: bakshish@bakshish.eu