This version is awaiting final legal review.
This policy explains how NumAI Technologies OÜ processes personal data when you visit numai.tech or contact us through it. It covers this website only. Data processed in a pilot or in the NumAI application is covered by a separate written agreement.
1. Who is responsible
The controller is NumAI Technologies OÜ, a private limited company (osaühing) registered in the Estonian Commercial Register under registry code 17499618, Hoburaua tn 15, Haabersti linnaosa, 13523 Tallinn, Harju maakond, Estonia.
For any question or request about your personal data, write to info@numai.tech.
2. When you visit the website
Our hosting provider processes the technical data that your browser sends with every request: IP address, date and time, the page requested, browser type and the referring page. This is needed to deliver the website and to keep it secure.
To protect the contact form against abuse, the server keeps the sender's IP address in memory for up to 10 minutes. It is not written to a file or database.
Legal basis: our legitimate interest in operating a reliable and secure website (Article 6(1)(f) GDPR).
3. When you send us a request
Through the form you send us your name, work e-mail address and company, and any details you choose to add: country, role, invoice types, invoice volume, data format, plan of interest and your message. We need your name, e-mail address and company to answer you; everything else is optional.
The website does not store your request. It is delivered to our mailbox as an e-mail, and we handle it there. We use it to answer you, to prepare and agree a possible pilot and to keep you informed as a member of our waitlist.
Legal basis: our legitimate interest in answering business enquiries and building business relationships (Article 6(1)(f) GDPR). Where you contact us about a contract with you, the processing is also necessary to take steps at your request before entering into it (Article 6(1)(b) GDPR).
4. Product news by e-mail
Only if you tick the optional box on the form may we send you occasional e-mails about NumAI products. Legal basis: your consent (Article 6(1)(a) GDPR).
You can withdraw your consent at any time by replying to any of these e-mails or by writing to info@numai.tech. Withdrawal does not affect processing before it. We keep a record of when and on which form you gave or withdrew consent, so that we can demonstrate it.
5. Cookies and tracking
The website sets one cookie, NEXT_LOCALE, and only when you choose a language with the language switcher. It remembers your choice for 12 months, so the website opens in that language next time. It is strictly necessary for the function you requested and is not used for anything else, so it does not require consent.
The website uses no analytics, advertising or social media tracking and loads no content from other websites. If we ever want to use such tools, we will ask for your consent first and update this policy.
6. Who receives your data
We do not sell your personal data. We share it only with the service providers below, which process it on our behalf as processors under data processing agreements, or where the law requires us to.
- Vercel Inc. (United States) hosts the website and processes the technical data described above. Our server functions run in Frankfurt, Germany; Vercel's network may deliver pages from a location close to you, including outside the EU.
- Brevo (Sendinblue SAS, France) delivers requests from the form to our mailbox.
- Google (Google Workspace) hosts our mailbox, info@numai.tech, including your request and our correspondence with you.
7. Transfers outside the EU
Vercel Inc. is based in the United States, and Google may process our mailbox data outside the EU, including in the United States. These transfers are protected by the EU–US Data Privacy Framework and by the European Commission's standard contractual clauses in these providers' data processing agreements. You can ask us for information about these safeguards at info@numai.tech.
8. How long we keep your data
- Requests that do not lead to an agreement: up to 12 months after our last contact with you.
- Waitlist sign-ups: until we have told you that the plan is available or you ask us to remove you, and at most 24 months.
- Correspondence about an agreement: for the duration of the agreement; documents we must keep under the Estonian Accounting Act are kept for 7 years.
- Consent to product news: while your consent is valid. After you withdraw it, we keep the record of consent and withdrawal for 3 years, so that we can demonstrate them.
- Technical data at our hosting provider: for the limited period set by the provider's log retention.
- IP addresses used to protect the form: up to 10 minutes, in memory only.
- Language cookie: 12 months, or until you delete it in your browser.
9. Your rights
You have the right to access your personal data, to have it corrected or erased, to restrict its processing, to receive it in a portable format and to object to processing based on our legitimate interests (Articles 15–21 GDPR). Where processing is based on consent, you can withdraw it at any time.
To exercise your rights, write to info@numai.tech. We answer within one month. We do not make decisions based solely on automated processing, including profiling.
10. Complaints
If you believe we process your data unlawfully, please contact us first. You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee) or with the supervisory authority in the EU country where you live or work.
11. Changes to this policy
We update this policy when our website or our processing changes. The date at the top shows the current version.