Privacy Policy and Personal Data

Last updated: October 2026

1. Data Controller

The site eeatclean.com and the application app.eeatclean.com are operated by FunInformatique OÜ, registered in Estonia under number 16639572, with registered office at Harju maakond, Kuusalu vald, Pudisoo küla, Männimäe/1, 74626, Estonia.

Contact: [email protected]

2. Data Collected

In the context of using the EEATClean SaaS, we collect the following information.

Account data

Your email address, used for account creation, authentication and sending notifications related to your activity on the platform.

Service usage data

The URLs of websites you add to your dashboard, your audit history and results (scores, decisions, justifications), your notification preferences and actions recorded in your Action Center.

Audit data

The public content of your website articles, accessible without authentication and indexed by search engines. EEATClean reads it the same way Google would.

Payment data

Your payment and subscription information is securely processed by our certified payment provider. We do not store any banking data on our servers.

Technical data

IP address, browser type and session data, collected for security and service improvement purposes.

3. Processing Purposes

Your data is processed for the following purposes.

• Create and manage your user account on app.eeatclean.com
• Perform the editorial audit of your articles
• Display results in real-time in your interactive dashboard
• Send you email notifications related to your activity
• Manage your monthly subscription and billing
• Provide customer support
• Improve the quality and accuracy of our analysis models

4. Legal Basis

The legal basis depends on the purpose.

Contract performance for all data necessary to provide the service: account, audits, results, billing.

Legitimate interest for technical data collected for security and abuse prevention purposes.

Consent for optional advertising trackers. You can withdraw it at any time.

5. Subprocessors

We work with technical providers selected for their security level and GDPR compliance.

Hosting

Your data is hosted within the European Union on secure professional infrastructure.

Payment

A specialized PCI DSS Level 1 certified provider ensures the security of financial transactions and management of your monthly subscriptions.

Transactional emails

Email notifications are delivered through a provider specializing in transactional communications. The recipient address and email content are processed by Resend.

Article analysis. Public article text and the sources needed for verification may be processed by our AI and search providers, including Google and OpenAI. These providers may process data outside the European Union under their terms and transfer safeguards.

6. Data Retention

• Account data: your email and profile information are retained for the duration of your active subscription, then 3 years after your last activity or account deletion.
• Audit data and results: your audit history and results are retained for the duration of your subscription. Cancellation stops renewal; it does not automatically delete saved reports. Contact us to request deletion, subject to records we must retain for legal obligations.
• Technical data: connection logs are retained for 12 months for security purposes.
• Payment data: retained by our payment provider in accordance with legal accounting obligations.

7. Your Rights (GDPR)

In accordance with the General Data Protection Regulation, you have the following rights.

• Right of access: obtain a copy of all data we hold about you
• Right to rectification: correct inaccurate data
• Right to erasure: request deletion of your account and all your data
• Right to restriction of processing: suspend the processing of your data
• Right to data portability: receive your data in a machine-readable format
• Right to object: object to the processing of your data

To exercise these rights, send a request to [email protected]. We respond within a maximum of 30 days.

8. Cookies

EEATClean uses storage needed for sign-in and your preferences. The Google advertising measurement tag loads only after you accept. X advertising tracking and conversion reporting to X have been removed. You can refuse or withdraw consent through “Manage cookies”. See our cookie policy.

9. Security

We apply the following measures to protect your data.

• HTTPS encryption on all communications
• Secure authentication with automatic session expiration
• Passwords hashed and never stored in plaintext
• WordPress API access in read-only mode exclusively
• Automatic daily backups
• Restricted and protected server access

10. Changes

We reserve the right to modify this policy at any time. In case of significant changes, you will be notified by email. The last update date is indicated at the top of this page.