leika

Privacy policy

This policy explains which personal data Leika processes, why, for how long and with whom, and what rights you have.

Last updated: [PLACEHOLDER: date]

1. Who we are

The controller of your personal data is [PLACEHOLDER: company name], company code [PLACEHOLDER: registration number], registered at [PLACEHOLDER: address] ("we", "Leika").

Contact for privacy questions: [PLACEHOLDER: contact email].

2. What data we process

  • Account data: your email address, name, company, sign-in and session data, and the settings you save in the app.
  • Uploaded catalogs and results: the supplier PDF catalogs you upload, the product data, images, translations and export files we produce from them, and any supplier price lists you add. Catalogs can contain personal data, such as a supplier's contact person.
  • Contact form data: your name, email address, company (optional), your message and the IP address the message was sent from.
  • Technical data: IP address, browser information, time of requests and error records, needed to run the service securely.

3. Why we process it and on what legal basis

  • To provide the app and the service you signed up for: the contract with you (GDPR Art. 6(1)(b)).
  • To answer your contact form message and prepare an offer: steps at your request before a contract (Art. 6(1)(b)) or our legitimate interest in answering inquiries (Art. 6(1)(f)).
  • To protect the service against spam, abuse and attacks: our legitimate interest (Art. 6(1)(f)).
  • To keep accounting and other records required by law: legal obligation (Art. 6(1)(c)).

We do not sell personal data, do not use it for advertising and do not make decisions about you based solely on automated processing.

4. Service providers (processors)

We use the following providers. They process data only on our instructions and under data processing agreements:

  • Cloudflare, Inc.: hosting, network, file storage, access protection and the Turnstile spam check on the contact form.
  • Neon, Inc.: the database that stores account data and records about uploaded catalogs.
  • Resend, Inc.: sending emails, such as messages from the contact form.
  • Anthropic, PBC: AI models that translate product text into Lithuanian and write SEO fields. Only product text from your catalogs is sent for this; account and contact form data are not.

[PLACEHOLDER: hosting regions and links to each provider's data processing terms]

5. Transfers outside the EEA

Some providers are based in the United States or may process data there. Where this happens, transfers are protected by appropriate safeguards, such as the European Commission's Standard Contractual Clauses or the EU–US Data Privacy Framework. [PLACEHOLDER: confirm the safeguard used for each provider]

6. How long we keep data

  • Uploaded catalogs and the results produced from them: deleted automatically 30 days after processing is completed; incomplete or failed uploads after 24 hours.
  • Records about uploads (file name, number of products, dates, without catalog content): 90 days.
  • Account data: while your account exists, and then as long as required by law.
  • Contact form messages: as long as needed to handle your request, but no longer than [PLACEHOLDER: retention period].
  • Technical logs: [PLACEHOLDER: retention period].

7. Cookies and similar technologies

This website sets no cookies and uses no analytics or advertising tools. The app uses only cookies that are strictly necessary to sign you in and keep your session secure; these do not require consent.

The contact form uses Cloudflare Turnstile to tell people from automated spam. Turnstile processes technical data about your browser and connection for this check only.

8. Your rights

You have the right to access your data, to have it corrected or deleted, to restrict or object to its processing and to receive data you gave us in a portable format. Where processing is based on consent, you can withdraw it at any time.

To use these rights, write to [PLACEHOLDER: contact email]. We reply within one month.

You can also lodge a complaint with the State Data Protection Inspectorate of Lithuania (Valstybinė duomenų apsaugos inspekcija, vdai.lrv.lt).

9. Changes to this policy

We will publish any changes on this page and update the date above. If a change is significant, we will tell account holders by email.