Version 2026-10-08
Privacy Policy
This policy explains what personal data Jutukas processes, why, and what rights you have under the GDPR.
Service operator and contact
Rentbox Eesti OÜ
Registry code: 17268244
Rapla maakond, Kohila vald, Aespa alevik, Nööbi tn 10, 79705
info@jutukas.synx.ee1. What we collect
Account data (email, username, display name, optional phone, avatar), profile data you add (bio, interests, expertise, languages, approximate location, availability), the content you post (messages, questions, answers, posts, uploads), usage events (sign-ins, page views, feature use), device tokens for push notifications, and consent records.
2. Why we process it
To run the service (contract): accounts, rooms, messaging, notifications. To keep people safe (legitimate interest and legal obligation): moderation, spam detection, abuse prevention, audit logs. To improve the product (legitimate interest): aggregated analytics. Marketing emails only with your consent.
3. Location
We never store precise GPS coordinates. You choose an approximate area (city or region) and control whether it is shown to others or used for nearby discovery.
4. Sharing
Your public profile and posts are visible according to your privacy settings. Payment processing is handled by Stripe, email delivery by our email provider, and AI features by our AI provider; each receives only the data needed for its task. We do not sell personal data.
5. Retention
Analytics events are kept for 180 days, read notifications for 90 days, AI summaries for 30 days, deleted messages for 30 days. When you delete your account it is deactivated at once and anonymised after 14 days: personal data and uploaded files are erased; content required for other users' conversations stays attributed to a deleted user.
6. Your rights
You can access and export your data (Settings → Account → Export), correct it (Settings → Profile), delete your account, withdraw consent and object to processing. To exercise other rights or complain, use the operator's contact details at the top of this page; you also have the right to complain to the Estonian Data Protection Inspectorate.
7. Cookies
We use strictly necessary cookies only: the session cookie that keeps you signed in and a preference cookie for your language and theme. No advertising trackers.
8. Security
Passwords are hashed. Upload types are checked against file contents, and files are served through the application's access-controlled file service. Access to private content is checked on the server. The public service must use encrypted HTTPS connections.