Privacy Policy

Assistral ("we," "our," or "us") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with us.

By using our services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our services.

We automatically collect certain information when you visit our website:

• IP address (for security and fraud prevention purposes)
• Browser type and version
• Device information
• Pages visited and time spent on our site
• Referral sources
• Essential cookies for website functionality
• User agent information (for security logging)

We use the information we collect for the following purposes:

• Provide and maintain our AI automation and consulting services
• Communicate with you about our services and respond to inquiries
• Process payments and fulfill contracts
• Send you marketing communications (with your consent)
• Improve our website and services
• Comply with legal obligations and protect our rights
• Prevent fraud and ensure security

Under GDPR, Estonian Data Protection Act, and other applicable privacy laws, our legal bases for processing your personal information include:

• Contract: Processing necessary for the performance of our services
• Legitimate Interest: Website security, fraud prevention, and service improvement
• Consent: Marketing communications (where explicit consent is obtained)
• Legal Obligation: Compliance with applicable laws and regulations

We may share your information in the following circumstances:

• Service Providers: With trusted third-party vendors who assist in operating our business
• Business Transfers: In connection with mergers, acquisitions, or asset sales
• Legal Requirements: When required by law or to protect our legal rights
• Consent: When you have given us explicit consent to share your information

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication measures
• Employee training on data protection
• Secure data storage with reputable cloud providers

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Factors that influence our retention periods include:

• The nature of our relationship with you
• Legal and regulatory requirements
• The purposes for which we collected the information
• Our legitimate business interests

You have the following rights regarding your personal information:

• Access: Request access to the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal requirements)
• Portability: Request a copy of your data in a structured, machine-readable format
• Objection: Object to certain types of processing
• Restriction: Request restriction of processing under certain circumstances
• Withdraw Consent: Withdraw consent for processing based on consent

To exercise these rights, please contact us using the information provided in the "Contact Us" section below.

We use cookies and similar tracking technologies to enhance your experience on our website. Cookies are small data files stored on your device that help us:

• Remember your preferences and settings
• Analyze website traffic and usage patterns
• Provide personalized content and advertisements
• Ensure website security and functionality

You can control cookie settings through your browser preferences. However, disabling cookies may affect the functionality of our website.

Our website may contain links to third-party websites or integrate with third-party services. We use the following third-party services:

• Scheduling: Cal.com (for appointment booking and consultation scheduling)
• Form Processing: Google Apps Script (for contact form submissions)
• Hosting: Cloudflare Workers (content delivery and security)
• Email Services: Professional email providers
• IP Detection: ipify.org (for form security and fraud prevention)

These third-party services have their own privacy policies, and we are not responsible for their privacy practices. We encourage you to review their privacy policies before providing any information.

As an Estonian company serving international clients, your information may be transferred to and maintained on servers located outside of your country or jurisdiction where data protection laws may differ from those in Estonia. We ensure appropriate safeguards are in place for such transfers in accordance with GDPR, Estonian Data Protection Act, and other applicable laws. For transfers outside the European Economic Area, we implement Standard Contractual Clauses approved by the European Commission.

Our services are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

As an Estonian company, we comply with GDPR requirements for all users. Additionally, residents of certain jurisdictions have specific privacy rights:

California Consumer Privacy Act (CCPA)

California residents have additional privacy rights under the CCPA. In the past 12 months, we have collected the following categories of personal information:

• Identifiers: Name, email address, phone number, IP address
• Commercial Information: Information about services requested or considered
• Internet Activity: Website usage information and interactions
• Professional Information: Business contact information and role

Your California Privacy Rights

California residents have the right to:

• Know what personal information we collect, use, disclose, and sell
• Delete personal information we have collected
• Opt-out of the sale of personal information (Note: We do not sell personal information)
• Non-discrimination for exercising your privacy rights

To exercise these rights, contact us using the information in the "Contact Us" section below.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by:

• Posting the updated policy on our website
• Sending you an email notification (if you have provided your email address)
• Providing notice through our services

The "Last updated" date at the top of this policy indicates when it was most recently revised. Your continued use of our services after any changes constitutes your acceptance of the new Privacy Policy.