Privacy notice

Data controller

The controller is Volt24 Elekter OÜ (registry code 16000000), Pärnu mnt 141, 11314 Tallinn, Estonia. Data protection, deletion and information requests: [email protected].

Purposes and legal bases

We do not rely on vague fallback bases. Every channel (contact form, email and chat widget) remains fully available to you.

• •Receiving and answering your enquiry and taking pre-contractual steps (quote, scheduling) — GDPR Art. 6(1)(b).
• •Minimal security logs and abuse prevention (hashed IP, request counters) — our legitimate interest in service reliability and against misuse, GDPR Art. 6(1)(f).
• •Accounting and business records if the enquiry leads to a transaction — legal obligation, GDPR Art. 6(1)(c).

What data we process

We do not ask for or need special-category data such as health data. Please do not share health data, national ID numbers or other people's personal data.

• •From the contact form: name, email address, phone number (if you enter it), job location, service type and description — exactly what you enter.
• •From the chat widget: messages, public conversation code, your name (if you give it) and timestamps — only what you type yourself.
• •Proof of consent: consent version, server-side time it was given, and language.
• •Security-technical data: a hash of the request IP address (the hash cannot be reversed), request counters, technical session hashes.
• •Notification queue (outbox): the enquiry summary and the contact details you gave, until the email reaches us.

Retention periods by data type

• •Contact form and chat widget content: deleted automatically within 30 days of the last message at the latest; if the enquiry leads to a quote or contract we keep the necessary business records for the periods required by law.
• •Notification queue (outbox) and email: the queue record is deleted within 30 days; an email that has reached our mailbox stays there until deleted manually.
• •Security logs and counters: request counters up to 2 days after last use.
• •Backups: database backups expire according to the hosting provider's rotation. We cannot promise immediate technical removal of a single record from a backup.

Processors

Lovable AI activity log: Lovable AI stores a technical summary of every AI request — request status, the model used, usage/cost figures and duration. We do not claim that the full request and response content is stored there in the current setup: in our audit the detail field of those records was empty (“No step details available”).

If the project owner later enables AI debug or full request/response visibility, such detail may — according to Lovable's documentation — be retained for up to 90 days. Before enabling that setting, this privacy notice and the configuration must be reviewed again.

We have not independently verified, and do not claim here, these providers' exact processing regions, safeguards for transfers outside the EEA, or their own retention periods. You can ask for the current position at [email protected].

• •Lovable AI Gateway — chat widget message processing and reply generation (model google/gemini-3.6-flash).
• •Lovable Cloud (Supabase Postgres) — the database holding enquiries, chats and technical records.
• •Lovable hosting (Cloudflare Workers runtime) — hosting of the site and server-side requests.
• •Resend — email delivery to our mailbox.

Is providing data mandatory

No. Sending an enquiry and sharing any data is voluntary. If you do not share data, we simply cannot answer the enquiry — nothing else is restricted, and you can always call.

Your rights

To exercise your rights, write to [email protected]. We reply within a reasonable time.

• •The right to access the data we process about you.
• •The right to have inaccurate data corrected.
• •The right to request deletion.
• •The right to restrict processing.
• •The right to object to processing based on legitimate interest.
• •The right to data portability for consent- or contract-based automated processing.
• •The right to withdraw consent at any time; this does not affect the lawfulness of processing before withdrawal.
• •The right to lodge a complaint with the Estonian Data Protection Inspectorate (www.aki.ee).