Privacy Policy

The controller of personal data within the meaning of Art. 4(7) GDPR is Kamhal & Co. s. r. o., with its registered seat at Krasovského 13, 851 01 Bratislava – Petržalka, Slovak Republic, company ID (IČO): 57 849 471, registered in the Commercial Register of the Municipal Court Bratislava III, section: Sro, insert no. 203519/B (“the controller”, “we”).

The controller operates the Residata service at residata.eu. We have not appointed a Data Protection Officer, as we do not meet the conditions of Art. 37 GDPR; for any data protection matter contact us directly at the address below.

Privacy contact: info@residata.eu

When you use Residata we process the following categories of personal data:

• Identity and contact data: email address (required to create an account via magic link), name, phone number, company, position, LinkedIn URL — all of these except email are optional.
• Usage data: which pages and features you visited, queries you sent to our AI assistant, exports you generated, and similar interaction records.
• Error reports: if a page fails while you are signed in, we record the error text, the technical trace, the page path (without any values you typed) and your browser type. It exists so we learn about a fault before you have to report it, and is kept for 90 days. Nothing is recorded for signed-out visitors.
• Technical data: IP address, browser type, and similar operational data automatically generated by any web service.
• Subscription data: trial status, start/end dates, payment status, and customer/subscription identifiers held at our payment processor — relevant for users on a paid plan.
• Billing data: your business name and billing address, and your company registration and VAT numbers if you provide them at checkout. We collect these because without them we cannot issue an invoice your accounting can use, and we retain them under accounting law.
• Messages you send us: the content of feedback or support requests, including a screenshot if you attach one. Attaching a screenshot is voluntary — check what it shows.

We do not use any third-party tracking tools(Google Analytics, Facebook Pixel, Hotjar etc.). All usage records remain in our own database.

• Service provision (Art. 6(1)(b) GDPR — performance of a contract / pre-contractual steps): authentication, displaying data relevant to your account, support.
• Consent (Art. 6(1)(a) GDPR): optional profile fields, opt-in to informational emails (if we introduce them).
• Legitimate interest (Art. 6(1)(f) GDPR): keeping the service secure and stable, preventing abuse, developing and improving the product based on aggregated usage data.
• Legal obligations (Art. 6(1)(c) GDPR): keeping accounting and tax records for the paid service (invoices, VAT as applicable to the operator's legal form).

To operate the service we rely on the following processors:

• Supabase Inc. — database hosting and authentication. Data is stored in an EU region (Frankfurt, Germany). Supabase Privacy Policy.
• Vercel Inc. — web application hosting. Global CDN with primary EU region. Vercel Privacy Policy.
• Anthropic PBC — our AI assistant sends your queries to the Claude model for processing. Processing happens in the United States. Queries are not used to train the model. Anthropic Privacy Policy.
• Resend (Plus Five Five, Inc.) — sends transactional email (login links, system notifications) from the residata.eu domain. Resend Privacy Policy.
• Webglobe, a. s. — mail servers for the residata.eu domain (its MX records) and our mailboxes; delivers and stores correspondence sent to @residata.eu addresses. Servers are in the European Union (Slovakia). Webglobe Privacy Policy.
• Google LLC — the operator's own mailbox, where correspondence sent to info@residata.eu is forwarded. Google Privacy Policy.
• Stripe Payments Europe, Ltd. — payment processing and subscription management. Processes payment + billing data; card details are held by Stripe, not by us. Stripe Privacy Policy.

We do not sell or share your personal data with third parties for their own marketing purposes. Transfers outside the EU (Anthropic, Resend, Google) happen under EU Standard Contractual Clauses. Webglobe processes our mail exclusively on servers within the EU.

• Account data — retained while you have an active account. After an account deletion request, data is removed within 30 days.
• Usage records — aggregated and anonymized data is retained indefinitely; user-linked records are deleted within 90 days of account closure.
• AI assistant queries — retained for product improvement and quality control, maximum 12 months.
• Sign-in records (time, browser type, IP address) — kept for account security (e.g. spotting a sign-in that is not yours), maximum 13 months; erased immediately when the account is deleted.
• Accounting records — invoices and related tax documents are retained for 10 years under Slovak accounting law.

Under GDPR you have the right to:

• request access to your data and a copy of what we process,
• request correction of inaccurate or incomplete data,
• request erasure of your data ("right to be forgotten"),
• request restriction of processing,
• receive your data in a structured machine-readable format (portability),
• object to processing based on legitimate interest,
• withdraw consent at any time,
• lodge a complaint with the supervisory authority — Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava, dataprotection.gov.sk.

To exercise any of these rights, write to info@residata.eu. We will respond within 30 days.

We use the following cookie categories:

• Essential cookies — required for login and session functionality (Supabase). These cannot be rejected because the service does not work without them.
• Analytics / first-party usage — we use our own first-party usage analytics (no third-party tools). These run only with your consent — you can reject them in the cookie banner and we honor that choice.

You can update your cookie preferences at any time via the "Cookie settings" link in the site footer.

Besides cookies we keep a few technical values in your browser's local storage. They never leave your device and are not used for tracking: your chosen language and colour theme, your cookie decision, your filter and report settings inside the app, and a short-lived cache of the price list and site copy so the page can paint immediately. Clearing your browser data removes them.

We may update this policy from time to time. The current version is always available on this page with the last-updated date shown at the top. For material changes, we will notify you by email or a prominent notice on the website.