Privacy policy

Who is responsible

Mervantis OÜ (registry code 14412321), Asuvere tee 7-4, Tihemetsa alevik, Saarde vald, Pärnu maakond 86201, Estonia, is the controller for personal data processed on customapi.dev. Contact: hello@customapi.dev.

We have not appointed a Data Protection Officer, as we are not required to. Write to the address above with any data-protection question.

Contact form and email

Data: the name, email address and message you type into the contact form, plus anything you choose to include.

Purpose: to answer your enquiry and, if it leads to work, to prepare and perform a contract.

Legal basis: steps taken at your request before entering into a contract, and our legitimate interest in replying to enquiries (GDPR Art. 6(1)(b) and (f)).

Retention: up to 12 months after our correspondence ends, then deleted. Where an enquiry becomes a paid engagement, the related records are kept for as long as accounting law requires (7 years in Estonia).

Server logs

Data: IP address, time of request, requested URL, user agent.

Purpose: security and fault diagnosis. Legal basis: legitimate interest in keeping the service secure and available (GDPR Art. 6(1)(f)). Retention: up to 30 days.

Traffic measurement

We use Cloudflare Web Analytics to count page views and see which pages are read. It is cookieless: it stores nothing on your device and does not fingerprint or track you across sites.

Data: page URL, referrer, browser and country, derived from the request. Legal basis: our legitimate interest in understanding how the site is used (GDPR Art. 6(1)(f)). Processor: Cloudflare, Inc.

Who else sees your data

We do not sell your data and we do not share it for advertising. It is visible only to our hosting, email and CDN providers, who act as processors on our instructions, and to a lawyer or authority where the law requires it.

Our infrastructure is hosted in the EU. Cloudflare, as CDN and analytics provider, may process request data outside the EU under the EU Standard Contractual Clauses and the EU–US Data Privacy Framework.

Your rights

You have the right to access your data and get a copy, to have inaccurate data corrected, to have data erased, to restrict or object to processing, to receive your data in a portable format, and to withdraw any consent at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these, write to hello@customapi.dev. We reply within one month.

Complaints

If you believe we are handling your data unlawfully you can complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), Tatari 39, 10134 Tallinn, +372 627 4135, info@aki.ee, www.aki.ee. You may also go to court.

Changes

If we change this policy we publish the new version on this page with a new effective date.