Privacy Policy

1. Who controls your data

Estads OÜ operates InspectionReport and acts as the controller for personal data described here. Contact us at support@inspectionreport.app.

2. Data we process

• Account identifiers and email address when you create or use an account.
• Inspection photos, notes, project details, generated findings, and report files that you submit or create.
• Billing status, product, report, and transaction identifiers supplied by Paddle. We do not receive full card details.
• Technical events needed to operate, secure, diagnose, and improve the report workflow.
• Campaign parameters and the presence—not the value—of Google click identifiers in our product analytics.
• Your optional Google Ads measurement choice, stored in your browser.

3. Why we process it

• To generate, save, edit, export, and recover inspection reports.
• To fulfill purchases, subscriptions, refunds, and customer support requests.
• To prevent abuse, investigate errors, and protect the service.
• To understand whether the workflow functions and where users encounter friction.
• With your consent, to measure whether Google Ads campaigns lead to report purchases.

4. Service providers

We use service providers only where needed to operate the product:

• Vercel for application hosting.
• Supabase for authentication and application data.
• Cloudflare R2 for private report media storage.
• OpenRouter and the selected AI model providers to process report inputs and draft output.
• Paddle as Merchant of Record for checkout, tax handling, receipts, and billing.
• PostHog EU for cookieless, memory-only product analytics.
• Sentry for technical error monitoring when configured.
• Google Ads for optional advertising measurement after consent.

5. Cookies and measurement choices

Authentication and security storage may be necessary for the service to function. PostHog is configured with memory-only persistence. Google Ads measurement is disabled by default and its tag is not loaded until you select “Allow measurement.” Declining does not affect report generation, checkout, or exports. You can reopen Privacy choices from the site footer and change your selection.

6. Retention and deletion

We keep application data only while it is needed to provide and secure the service or meet legal and accounting obligations. Signed-in users can request account deletion; the deletion workflow removes the account and its owned report-media objects. Billing records held by Paddle may be retained where tax or financial law requires it.

7. Your rights

Depending on applicable law, you may request access, correction, deletion, restriction, portability, or object to processing. You may withdraw optional measurement consent at any time. Contact support@inspectionreport.app. You may also complain to your local data-protection authority.

8. International processing

Some providers may process data outside the European Economic Area. Where required, transfers rely on the provider’s contractual and legal safeguards. Avoid uploading personal data that is not necessary for the inspection report.