1. Who We Are
Alertitude d.o.o., registered in Slovenia (Reg. No: 7401051000, Tax No: SI85415464). Our platform is accessible at alertitude.eu. For data protection inquiries: office@alertitude.eu.
2. Information We Collect
We collect the following data to provide the service:
- Assessment inputs (activity type, description, country) — sent to the AI API for processing
- Assessment metadata — a log of each generated report is stored server-side, including: activity type, country, language, tier (Single/Black), token usage, IP address, and approximate geolocation (city, country) derived from IP
- Account data — if you register: email address and hashed password
- Site photos — if uploaded for photo hazard detection, sent to the AI API; not permanently stored on our servers
- Usage analytics — page views, session duration, and interaction events via privacy-respecting tooling
- Payment data — processed by PayPal; we do not store card details
3. Legal Basis for Processing (GDPR Art. 6)
We process your data on the following legal bases:
- Contract performance (Art. 6(1)(b)) — processing assessment inputs to deliver the service you requested
- Legitimate interests (Art. 6(1)(f)) — storing assessment metadata and IP-based geolocation for service improvement, abuse prevention, and usage analytics
- Consent (Art. 6(1)(a)) — optional analytics cookies, where applicable
We do not use your data for advertising, profiling, or any purpose beyond delivering and improving the service.
4. Data Retention
Assessment metadata logs are retained for up to 12 months for service improvement and then deleted. Account data is retained as long as your account exists. Assessment content displayed in your browser is not permanently stored — clearing your session removes local data.
5. International Data Transfers
Assessment inputs are sent to the Anthropic API (United States) for AI processing. This transfer relies on Anthropic's compliance with applicable data transfer mechanisms. IP-based geolocation is performed using ip-api.com. Payment is processed by PayPal (international). All transfers are secured via HTTPS.
6. Third-Party Services
- Anthropic API — AI model provider. Inputs transmitted securely over HTTPS. See Anthropic's Privacy Policy.
- PayPal — Payment processing. See PayPal's Privacy Policy.
- Cloudflare — DNS, CDN, and security. May log connection metadata.
- ip-api.com — IP geolocation for anonymous usage statistics (city/country level only).
- Google Fonts — Typography loading. Google may log font requests.
7. Cookies and Local Storage
See our Cookie Policy for full details. We use strictly necessary cookies (Cloudflare security) and local storage for language preference and authentication state. No advertising or tracking cookies are used.
8. Your Rights (GDPR Art. 15–22)
Under the GDPR, you have the right to: access your personal data, rectify inaccurate data, request erasure, restrict processing, data portability, and object to processing. To exercise any of these rights, contact us at office@alertitude.eu. We will respond within 30 days.
9. Supervisory Authority
You have the right to lodge a complaint with the Information Commissioner of the Republic of Slovenia (www.ip-rs.si), or with the data protection authority in your country of residence.
10. Security
All data is transmitted over HTTPS. API keys are stored server-side and never exposed to the browser. Passwords are hashed. We follow industry-standard security practices.
11. Changes to This Policy
We may update this policy from time to time. The "last updated" date at the top will reflect any changes. Continued use constitutes acceptance of the updated policy.
12. Contact
For privacy-related inquiries: office@alertitude.eu. Alertitude d.o.o., Slovenia.