PRIVACY POLICY – Trashify Tech OÜ (“MAKRR”)

PRIVACY POLICY – Trashify Tech OÜ (“MAKRR”)

Effective 29 June 2025

1.  Who We Are

Trashify Tech OÜ (reg-no 16495334)

Gonsiori 29-3, 10147 Tallinn, Estonia

hello@makrr.ai

2.  Scope

This Policy applies when you

  • visit www.makrr.ai or any sub-domain (“Site”);

  • create an account or use our no-code AI platform (“Service”);

  • interact with us by email, support chat, social media or events.

3.  Information We Collect & Legal Basis

Account data – name, email, company, password hash. Used to create and secure your account and to bill you. Legal basis: contract.

Usage data – IP address, browser type, device details, click-stream logs. Used for analytics, security and fraud prevention. Legal basis: legitimate interest.

Uploaded content – images or video you submit to train and run AI models. Legal basis: contract.

Payment data – last four digits of card, Stripe transaction token. Used to process payments. Legal basis: contract and legitimate interest.

Marketing data (opt-in) – email address and preferences. Used for newsletters and promotions. Legal basis: consent.

(References: Article 6 GDPR and Article 7 LGPD equivalents.)

4.  Log-File Information

MAKRR’s servers automatically log each visit to the Site. Logged items include IP address, browser type, ISP, date/time stamp, referring and exit pages, and click counts. These logs are not linked to personally identifiable information and are used to analyse trends, administer the Site and compile aggregate statistics.

5.  Cookies & Web Beacons

  • What cookies are: small text files placed on your device to improve experience.

  • How we use cookies: maintain sessions, remember preferences, perform analytics.

  • Disabling cookies: you can block cookies in your browser settings, but some features may break.

Cookie categories we set

  • Essential cookies – authentication, CSRF protection.

  • Preference cookies – language and UI settings.

  • Analytics cookies – Google Analytics 4 with IP anonymisation.

A banner on first visit lets you accept or decline non-essential cookies. A complete list is available at /cookie-policy.

6.  How We Share Information

We do not sell personal data. We share limited data only with trusted processors under GDPR-compliant Data-Processing Agreements:

  • Amazon Web Services (EU-Central) – hosting and storage in Frankfurt.

  • Stripe – payment processing (protected by SCCs and the EU-US Data Privacy Framework).

  • HubSpot – CRM and email services in the EU region (with SCCs).

  • Google Analytics 4 – site analytics with IP anonymisation.

7.  International Transfers

If personal data leaves the EEA or UK, we rely on the 2021 Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework.

8 . Retention

  • Account data – retained for the life of the account plus one year for tax and contract purposes.

  • Uploaded content – deleted 90 days after your subscription ends or immediately upon request.

  • Analytics data – retained for 14 months (Google Analytics default).

9.  Security

We employ TLS 1.2+ encryption in transit, AES-256 encryption at rest, multi-factor authentication for administrators, role-based access controls and daily encrypted backups.

10.  Your Rights

  • EEA / UK: access, rectify, delete, restrict, port, object, withdraw consent; lodge complaints with the Estonian Data Protection Inspectorate.

  • California (CCPA/CPRA): know, delete, correct, opt-out of sale/share (MAKRR does not sell), limit sensitive data. Requests via hello@makrr.ai or /​do-not-sell.

  • Virginia, Colorado, Connecticut, Utah: comparable rights are honoured.

  • Brazil (LGPD): Article 18 rights; requests via hello@makrr.ai.

  • Canada (PIPEDA): access and correction; complaints to the Office of the Privacy Commissioner.

  • Australia (APPs): access and correction; complaints to the OAIC.

To exercise any right, email hello@makrr.ai.

11.  Children

The Site and Service are not directed to children under 16. We do not knowingly collect such data; contact us for removal.

12.  Changes

We will email registered users at least 30 days before material changes take effect; minor edits will be posted here.

13.  Contact

hello@makrr.ai

Trashify Tech OÜ, Gonsiori 29-3, 10147 Tallinn, Estonia

California Notice at Collection

We collect identifiers and internet activity solely for Service delivery. Retention periods are stated in Section 8. We do not sell or share personal information.

Brazil LGPD Addendum

Controller: Trashify Tech OÜ.

Data-Protection Officer: hello@makrr.ai.

Legal bases relied upon: Article 7 I, V, VI LGPD.

Consent

By using our Site or Service you consent to this Privacy Policy and its terms.