A draft to be reviewed before publication. Add the data controller, the legal basis and the retention period. This is not a final legal text.
Privacy policy
Controller: [add the name, registered office and contact]. Purpose: to run your account, show you findings from connected public sources and alert you to the same name or the same photo on another account in this service.
What data we collect
First name, last name, email, the password hash, an optional photo, the data you enter for monitoring, your decisions on findings, your chosen interface language and a technical sign-in record in a cookie.
Legal basis
The account contract and consent given at registration. The security of accounts may rest on a legitimate interest. The controller should assess this before publication.
Check from the home page without registration
When you run a check from the home page, we process the name, e-mail, city and nicknames you enter only to search public sources and prepare a report. We require your consent and your confirmation that you are checking yourself. To assess results and search the web we may use an AI provider (OpenAI), and we send it only what is necessary. Guest data and results are deleted after 72 hours, or immediately once they are moved to your verified account. You can delete a check at any time on the results page. To protect against abuse we keep only irreversible hashes of the IP address and e-mail, for at most 7 days. We do not present a source as integrated unless it really is.
Who we share data with
To the database provider and to the email delivery provider (Resend) when we send verification and security messages. We do not sell data. The public registry is queried only for data stored with your account and only when the connector is on.
How long
For as long as the account exists. Add exact periods, backups and erasure before publishing. A verification link is valid for 24 hours, a password reset link for 30 minutes, a sign-in for 14 days.
Your rights
You have the right of access, rectification, restriction and objection, and to complain to the Czech Office for Personal Data Protection. Add how to submit a deletion request together with the controller's contact.
Cookies
We use only essential cookies: the sign-in cookie mi_session and the language choice mi_lang. They are httpOnly and are not used for advertising.