Privacy Policy

This Privacy Policy explains how Fusapp OÜ (“Fusapp”, “we”, “us”, “our”) collects, uses and protects personal data when you visit fusapp.com (the “site”). It applies to this corporate website only. Our products — such as MarbleMap and Fusapp Go — are governed by their own separate privacy policies.

1. Who we are

Fusapp OÜ is the data controller for personal data processed through this website. This means we decide why and how your data is processed. Our details:

• Fusapp OÜ, a private limited company (osaühing) registered in Estonia
• Registry code 17058392 · VAT EE102773934
• Meistri tn 6, Mustamäe, 13517 Tallinn, Estonia
• Privacy contact: [email protected]

2. What personal data we collect

We only collect what we need for the purposes below. Depending on how you use the site, this may include:

• Contact requests — if you email us or use a contact form, we process your name (if given), email address and any information you choose to include in your message.
• Newsletter — if you subscribe, we process your email address and a record of your consent (date and time).
• Analytics — only after you accept analytics cookies, we collect pseudonymous usage data (pages viewed, referring page, device and browser type, approximate region derived from IP) to understand how the site is used.
• Server logs — our hosting keeps standard technical logs (IP address, user agent, timestamps, requested URLs) to keep the service secure and reliable.

We do not intentionally collect special categories of data (such as health, religion or political views), and we ask you not to send such information through this site.

3. Why we process it and our legal bases

Under the GDPR we must have a legal basis for each use of your data (Article 6):

• Consent (Art. 6(1)(a)) — for the newsletter and for analytics cookies. You can withdraw consent at any time.
• Legitimate interests (Art. 6(1)(f)) — to keep the website secure, prevent abuse, and respond to enquiries you send us. We balance these interests against your rights.
• Steps taken at your request (Art. 6(1)(b)) — where you contact us about a possible engagement or use of our products.
• Legal obligation (Art. 6(1)(c)) — where we must retain or disclose data to comply with the law.

4. Cookies and similar technologies

We use a small number of cookies. Strictly necessary cookies keep the site working and are always on; analytics cookies load only after you accept them in the cookie banner. You can change your choice at any time. For the full list and controls, see our Cookie Policy.

5. Who we share data with

We do not sell your personal data. We share it only with a small set of trusted providers who process it on our behalf under a data-processing agreement:

• Brevo — newsletter and transactional email (EU-based).
• Google Analytics — website analytics, loaded only after consent via Consent Mode v2.
• Cloudflare — content delivery, security and DDoS protection.
• Hetzner — hosting infrastructure (Germany/EU).
• MongoDB — data storage.

We may also disclose data where required by law, to protect our rights, or in connection with a corporate transaction (such as a merger), in which case any recipient will be bound by this policy or an equivalent one.

6. International transfers

Processing takes place primarily within the EU/EEA. Where a provider (for example Google) may transfer data outside the EEA, that transfer is protected by appropriate safeguards such as the EU Standard Contractual Clauses or an adequacy decision. You can ask us for more detail using the contact below.

7. How long we keep it

• Contact requests — for as long as needed to handle them, and up to 24 months for a reasonable follow-up, unless a business relationship requires longer.
• Newsletter — until you unsubscribe, after which we keep a suppression record so we don't email you again.
• Analytics — according to Google Analytics' retention settings (up to 14 months).
• Server logs — a short period (typically up to 30 days) before they are rotated.

8. How we keep it secure

We apply appropriate technical and organisational measures to protect your data, including encryption in transit (HTTPS), access controls, and reputable EU-based infrastructure. No method of transmission or storage is completely secure, but we work to protect your data and to notify you and the authorities of any breach where the law requires.

9. Your rights

Under the GDPR you may, at any time:

• request access to your personal data and a copy of it;
• ask us to correct inaccurate data or complete incomplete data;
• ask us to erase your data or restrict its processing;
• receive your data in a portable, machine-readable format;
• object to processing based on legitimate interests; and
• withdraw any consent you have given, without affecting processing already carried out.

To exercise any of these, email [email protected]. We will respond within one month. You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee) or your local supervisory authority.

10. Automated decisions and profiling

We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing, and we do not carry out profiling on this website.

11. Children

This website is intended for a business audience and is not directed at children. We do not knowingly collect data from children. If you believe a child has provided us with data, contact us and we will delete it.

12. Third-party links

The site may link to third-party websites or services. We are not responsible for their content or privacy practices; please review their own policies before providing any data to them.

13. Changes to this policy

We may update this policy from time to time. The “last updated” date at the top always reflects the current version, and material changes will be highlighted on this page.

14. How to contact us

For any privacy question or to exercise your rights, contact Fusapp OÜ at [email protected] or by post at the registered address above.