Respect for the rights of our users — our commitment to transparent, lawful data processing under GDPR.
TickGDPR is an AI-assisted GDPR compliance platform, a brand of Prudent Professional Services SIA, registered in Latvia.
Prudent Professional Services SIA acts as data controller for personal data collected through the TickGDPR platform and website.
Registration number: 43603071509 · Registered address: Kareivju iela 8, Bauska, LV-3901, Latvia
Contact: privacy@tickgdpr.eu for data protection and privacy matters, or info@tickgdpr.eu for general enquiries.
A Data Protection Officer has not been appointed as it is not required under the applicable GDPR threshold. The supervisory authority for data protection in Latvia is the Data State Inspectorate (DVI) at dvi.gov.lv.
| Category | Data types |
|---|---|
| Account data | Name, company name, email address, password (hashed) |
| Usage data | Documents uploaded, AI reviews run, ROPA/DPIA entries created, website audit results, compliance scores |
| Payment data | Billing details processed by Stripe. We do not store card numbers. |
| Document data | Documents you upload for AI review (stored in EU, Frankfurt). Not used to train AI models. |
| Technical data | IP address, browser type, access logs, session tokens |
| Purpose | Data types | Legal basis |
|---|---|---|
| Create and manage user accounts | Identity, contact, credentials | Contract performance |
| Provide AI compliance review services | Document data, usage data | Contract performance |
| Process payments and subscriptions | Identity, contact, transaction data | Contract performance, legal obligation |
| Send compliance notifications and alerts | Account data, usage data | Contract performance, legitimate interests |
| Improve the platform and our review quality | Anonymised, aggregated usage data only — never the content of your uploaded documents | Legitimate interests |
| Legal and accounting obligations | Identity, contact, transaction data | Legal obligation |
| Website cookies (essential only) | Session tokens, preferences | Legitimate interests (essential) |
| Processor | Purpose | Location |
|---|---|---|
| Anthropic | AI processing of document text for compliance review | USA (SCC in place) |
| Stripe | Payment processing and subscription management | EU / USA (SCC in place) |
| Supabase | Database storage and authentication | EU — Frankfurt |
| Railway | Application hosting and infrastructure | EU West |
| Titan (email) | Transactional email — verification, notifications, retention warnings | Global (AWS) — SCCs under provider DPA |
| Data type | Retention period |
|---|---|
| Account and service data | Duration of account + 30 days after deletion request |
| Uploaded documents — subscription plans | Until deleted by user or account closure |
| Uploaded documents — Upload & Review (pay-per-use) | 90 days from upload, then erased automatically (the file, its extracted text and the generated reports). Deleting them yourself always takes precedence — you can erase them at any time; we email you about a week before anything auto-erases. Upgrading to a subscription removes the 90-day limit. |
| Billing and transaction data | 5 years from the transaction (Latvian accounting law); VAT records 10 years (Latvian tax law) — legal obligation |
| Inquiry / contact data | Up to 12 months |
Implemented in accordance with GDPR Article 32.
We use cookies
We use essential cookies to keep you logged in, and optional analytics cookies to improve the platform. Read our Privacy Policy and Cookie Policy for details.
Choose which cookies you allow. Essential cookies cannot be disabled as the platform requires them to function.
Essential
Authentication, security, session management. Always active.
Analytics
Help us understand how the platform is used so we can improve it. No personal data sold.
Marketing
Used for relevant product updates and offers. We don't share your data with third-party advertisers.