Privacy policy

Who we are

Offer, MB, trading as Spagyria (“we”), Verkių g. 44, LT-08221 Vilnius, Lithuania, is responsible for the personal data this policy describes. For anything about your data, write to contact@spagyria.ai.

What we collect

What you give us: your email, the store address you enter, what you send through the site’s forms and by email, your questionnaire answers, and the billing details you enter on Stripe’s page.
What the site records: your IP address and browser details, for the bot check, our limits per visitor and the server’s logs. The country of your IP address decides whether the cookie banner asks you.
The newsletter: your email address, when you signed up and confirmed, and the opens and clicks of our letters.
Through the measuring tools: how you use the site and which ad brought you, as “Cookies” says.

What we see of people while we work in your accounts for an order, we handle for you, as the Terms of sale say in “Personal data we handle for you”.

Why

To run the scan, answer you, and take, do and keep a record of your order: a contract, or the steps you asked for before one, or, where you act for a company, our legitimate interest.
To keep the accounting records the law requires.
To keep the site and its forms secure and free of abuse: our legitimate interest.
To send the newsletter, with your consent, which you can withdraw in any letter.
To measure the site and our ads: your consent where the cookie banner asks for it, and elsewhere our legitimate interest.

After a scan’s report, or our email with what a check by hand found, we may write once more about that scan; reply “no” to that email, and we will not.

Who receives it

Cloudflare: hosting, the server’s logs, the limits per visitor and the bot check (Turnstile).
Stripe: we use Stripe for payments and each order’s record. Stripe collects transaction and personal data, and details of the device used to pay, which it analyzes and uses to operate and improve the services it provides to us, including to detect and prevent fraud. Stripe’s privacy policy: stripe.com/privacy.
Brevo: the site’s emails and the newsletter. Brevo counts the opens and clicks of our emails.
Google Workspace: our mailbox, and the sheets we share with you for an order.
Google Analytics, Google Ads and the Meta Pixel, when they load, as “Cookies” says. Google and Meta also use this data for their own purposes, as their policies say: policies.google.com/technologies/partner-sites and facebook.com/about/privacy. For what the Meta Pixel collects on our pages, Meta and we are joint controllers.

Our accountant and the tax authority get what the law requires. We do not sell personal data. Some of these providers handle data outside the European Economic Area, under the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses.

Cookies

The site keeps in your browser only what it needs to work: your answer to the cookie banner, the order form while you pay, your last scan result and your order’s reference after payment. Google Analytics, Google Ads and the Meta Pixel keep their cookies and data in your browser when they load. In the EEA, the UK and Switzerland they load only if you accept them in the cookie banner; elsewhere they load until you refuse them under “Cookie settings”. You can change your choice at any time under “Cookie settings” in the footer.

How long

As long as each purpose needs: an order’s records for up to ten years, as accounting law and the time for claims require, and everything else only until we no longer need it. The measuring tools keep their data as their providers say.

Your rights

You can ask for access to your data, its correction or deletion, a restriction of its use or its transfer, and object to its use based on our legitimate interest. You can withdraw a consent at any time. Write to contact@spagyria.ai. You can also complain to the State Data Protection Inspectorate of Lithuania, vdai.lrv.lt.

We may update this policy. The date at the top shows the current version.