SuVaak AI

Privacy Policy

Last updated: March 2026

1. Who we are

SuVaak AI ("we", "our", "us"), operated by Nordische Technologies UK Ltd, is the data controller for personal data processed through this service. Registered in England and Wales. Contact us at support@suvaak.com.

2. What data we collect

  • Account data: Name, email address, company name, and password (hashed)
  • Usage data: Scan submissions, scan results, and in-app activity
  • Billing data: Payment method tokens via Stripe (we do not store card details)
  • Technical data: IP address, browser type, pages visited, session identifiers

3. How we use your data

  • Providing and improving the SuVaak AI service
  • Processing payments and issuing invoices
  • Sending transactional emails (scan results, invoices, plan changes)
  • Complying with legal obligations
  • Detecting and preventing fraud or abuse

4. Legal basis for processing

We process your data under the following lawful bases under UK GDPR:

  • Contract performance: To provide the service you signed up for
  • Legitimate interests: Product improvement, fraud prevention, analytics
  • Legal obligation: Tax records, compliance requirements
  • Consent: Marketing emails (where you have opted in)

5. Data retention

We retain scan data for 365 days. Account data is retained for the duration of your account plus 30 days after deletion. Financial records are retained for 7 years as required by HMRC.

6. Your rights

Under UK GDPR you have the right to: access your personal data, rectify inaccurate data, erasure ("right to be forgotten"), data portability, object to processing, and restrict processing.

Exercise your rights via your account data rights page or email support@suvaak.com.

7. Third party processors

  • Stripe: Payment processing
  • Base44/Wix: Application hosting and database
  • Anthropic: AI processing of marketing copy
  • Resend: Transactional email delivery

8. International transfers

Some processors operate outside the UK/EEA. Where this occurs, we ensure appropriate safeguards are in place (Standard Contractual Clauses or adequacy decisions).

9. Cookies

We use essential cookies for session management and analytics cookies. See our Cookie Policy.

10. Data breaches

In the event of a personal data breach, we will notify the ICO within 72 hours and affected individuals where required by law.

11. Contact

For privacy queries, contact us at support@suvaak.com.

12. Complaints

You have the right to lodge a complaint with the ICO at ico.org.uk.

🍪 We use cookies

We use essential cookies to keep the site working and, with your consent, analytics cookies to improve your experience. See our Cookie Policy and Privacy Policy.

    We use essential cookies to run this site, and optional analytics cookies (Google Analytics) to understand how it's used. Analytics cookies are only set if you accept. See our Cookie Policy.