Privacy policy
Version 2026-09-05. Applies to visitors from the European Union and the United States. Slovenské znenie
Who processes your data
The controller is Elektroinštalácie Poprad, s.r.o., Fraňa Kráľa 2071/34, 058 01 Poprad, Company ID 48061999, Slovak Republic. Contact for data protection matters: info@truetier.app. We are not required to appoint a Data Protection Officer, as we do not process data on a large scale or handle special categories of data.
What we process and why
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Name, email, hashed password | Running your account | Contract (Art. 6(1)(b)) | Until account deletion |
| Profile, products, reviews | Displaying the catalog | Contract | Until deleted or removed |
| Subscriber email | Newsletter | Consent (Art. 6(1)(a)) | Until consent withdrawn |
| IP and timestamp of consent | Proving consent | Legal obligation (Art. 7(1)) | 3 years after withdrawal |
| Scanned URL and result | Providing the service | Contract, legitimate interest | 24 months |
| Monitored URLs and detected changes | Competitor monitoring | Contract | 400 days |
| Webhook URL (Slack, Discord) | Delivering alerts | Contract | Until deleted |
| API key and call count | API access | Contract | Until key revoked |
| Credits and their movements | Records of prepaid services | Legal obligation | 10 years |
| Model access key (encrypted) | Analysis at your request | Consent | Until deleted |
| Submitted URLs and analysis results | Delivery and quota records | Contract | 90 days |
| Billing data and documents | Accounting | Legal obligation | 10 years |
| Anonymous traffic statistics | Measuring interest | Not personal data | 14 months |
Traffic measurement
We do not use Google Analytics or any third-party analytics. Traffic is measured with our own tool that stores neither your IP address nor anything on your device. A visitor is identified by a short value derived from the IP address and browser combined with a secret salt that rotates daily and is never stored. The next day the same value cannot be produced again, so returning visitors cannot be tracked. That is precisely why this requires no consent.
Who we share data with
- Lemon Squeezy, Inc. (USA) — payment processing and invoicing as Merchant of Record. Transfers to the USA are covered by Standard Contractual Clauses and the EU–US Data Privacy Framework.
- Hosting provider — storage of the database and files.
- Language model provider — only if you run a text analysis. The content of the compared pages is then sent, either under our access or under your own key. If you do not run an analysis, nothing is sent.
We do not sell or share personal data with ad networks, data brokers or any other third party for marketing purposes.
Your rights under the GDPR
You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and to object (Art. 21). You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
Most of this you can do yourself under My data — immediately and without waiting. Otherwise use the request form. We respond within 30 days.
You may lodge a complaint with the Office for Personal Data Protection of the Slovak Republic.
For California residents (CCPA and CPRA)
In the past 12 months we collected these categories: identifiers (name, email), commercial information (orders) and internet activity information (pages visited, in anonymous form).
You have the right to know, to delete, to correct, to opt out of the sale or sharing of your data, and not to be discriminated against for exercising these rights.
We do not sell or share personal information as defined by the CCPA and CPRA, and never have. We do not use data for cross-context behavioural advertising. We still provide a formal way to exercise the opt-out: Do Not Sell or Share My Personal Information.
An authorised agent may submit a request on your behalf with documented authorisation.
For residents of other US states
If the laws of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA) or Texas (TDPSA) apply to you, we grant the same rights through the same form. You may appeal a decision by replying to our email.
Children
The service is not intended for anyone under 16, or under 13 in the United States under COPPA. We do not knowingly collect children's data. If you believe a child has given us data, write to us and we will delete it.
Security
Passwords are stored only in hashed form. Traffic runs over HTTPS. Stored model access keys are encrypted. Database access is limited to the operator.