Sign inET

SECLUSA · INFORMATION

Privacy notice

This notice explains what personal data Seclusa processes, why it is processed and what rights users have.

Controller

Seclusa OÜ · registry code 17584258 · Puiestee tn 13, 50303 Tartu, Estonia · info@seclusa.eu · +372 602 6558

Data and purposes

We process account and contact details, company details, project briefs, uploaded files, generated designs, technical review results, order and payment information, support correspondence and technical information required to keep the service secure. We use this information to manage accounts and projects, provide ordered digital services, create and store files, handle payments and refunds, provide support, prevent misuse and meet legal obligations.

Legal bases

Core account, project, order and support processing is necessary to take requested pre-contractual steps or perform a contract. Accounting and tax records are processed to comply with legal obligations. Limited security and error logs are processed for Seclusa's legitimate interests in protecting the service and legal claims. Where consent is required, it may be withdrawn for future processing.

Service providers and transfers

Cloud and security provider Cloudflare, payment provider Stripe, transactional email provider Resend and, when AI features are used, OpenAI may process data on Seclusa's behalf. Seclusa does not store full payment-card details. Project data is shared with a manufacturing partner only where needed to fulfil the customer's request or order. Transfers outside the EEA use the provider's applicable safeguards, such as European Commission standard contractual clauses.

Retention

Accounts and active projects are retained while the service is provided. When an account is closed, data no longer needed to perform the contract, hand over purchased files, resolve a dispute or meet a legal obligation is deleted or anonymised. Accounting source documents and contracts needed to explain transactions are retained for seven years from the end of the relevant financial year. Security and error logs are kept only for the limited period needed to investigate faults or prevent misuse. Deleted data in backups is removed through the normal backup overwrite cycle and is not used for other purposes.

Your rights

You may request access, correction, deletion or restriction of your data and, where applicable, data portability or object to processing by writing to info@seclusa.eu. We may reasonably verify your identity. Data cannot be erased immediately where continued retention is required by law. You may lodge a complaint with the Estonian Data Protection Inspectorate (aki.ee).

Automated processing and marketing

AI assists with design generation and technical software checks geometry, but an automated result is not a binding manufacturing decision or a solely automated decision producing legal or similarly significant effects for a person. Marketing messages are not sent without a separate legal basis, and marketing consent is not a condition of purchase.