Privacy Policy

The data controller for your personal data is CreaTechly OÜ (registry code per the Estonian Business Register), located in Tallinn, Estonia. Contact us at [email protected].

We collect the following data: account information (name, email address); mileage logbook data (trip date, start and end location, distance, trip purpose); vehicle data (registration number, make, model); billing data (information needed for invoicing); device and usage data (IP address, browser type, error logs).

We use your data to: provide and improve the DrivLog service; generate mileage logbooks and export to PDF/Excel; handle billing and subscription notifications; provide customer support and improve user experience; comply with legal obligations.

We process your data under the following legal bases: contract performance (GDPR Art. 6(1)(b)) for data necessary to deliver the service; legitimate interests (GDPR Art. 6(1)(f)) for service security and quality; legal obligation (GDPR Art. 6(1)(c)) for accounting and tax law compliance.

We retain your mileage logbook data for the duration of your account and up to 5 years after service termination (as required by accounting law). Upon account deletion, personal data is removed within 30 days, unless a longer retention period is required by law.

We do not sell or share your personal data with third parties for marketing purposes. We use a limited number of authorised processors (e.g. cloud servers, payment providers) under data processing agreements. All processors are located within the EU/EEA.

You have the right to: access your personal data; request correction of inaccurate data; request erasure of your data; restrict processing; data portability; object to processing; lodge a complaint with the Estonian Data Protection Inspectorate (www.aki.ee).

To exercise your rights, contact us at [email protected]. We will respond within 30 days.

We use cookies only as strictly necessary for service operation (session cookies, authentication). We do not use third-party advertising or tracking cookies.

We protect your data with industry-standard encryption (TLS), secure servers, and regular security audits. In the event of a data breach, we will notify you and the supervisory authority within the legally required timeframes.

We may update this Privacy Policy from time to time. We will notify you of material changes by email at least 14 days in advance. Continued use of the service after changes take effect constitutes acceptance.