Privacy & GDPR

1. Data minimisation

The website collects only what an inquiry or order requires (name, e-mail, phone, company, notes). Payment account details live exclusively in server environment variables, are masked everywhere, and never appear in source code, repositories or static page content.

2. Local-first; “local evaporation”

The RPA client stores scraped results locally on your machine only. There is no cloud sync or centralised exfiltration of your data. Deleting the local folder is sufficient for complete erasure; cloud-side deletion requests are fulfilled within 30 days.

3. Your rights (GDPR / UK GDPR)

EU/UK data subjects may exercise access, rectification, erasure, restriction, portability and objection rights. Lawful bases: contractual necessity and legitimate interest. Complaints may also be lodged with your national supervisory authority (DPA).

Transfers: hosting on Vercel (US) and Neon (AWS US) relies on Standard Contractual Clauses and TLS 1.2+ in transit.

4. Sub-processors

Vercel (hosting), Neon (database), LINE Corporation (official-account messaging, per LINE privacy policy), Payoneer (payment collection). Each is bound by its own privacy programme; changes are reflected on this page.

5. Cookies & pixels

Only essential cookies (form anti-abuse) and, if enabled, GA4. UTM parameters serve attribution analytics only; no personally identifiable data is pushed back to ad platforms.

6. Contact

Submit privacy or order requests via the website form or official LINE, marked “Privacy request + country”. Statutory response windows are respected.