PEPromy Engine

Privacy policy

Effective from: 7 October 2026

1. Data controller

PROMY, UAB, company code 305651943, VAT number LT100015225518, registered address Bajorų Sodų 10-oji g. 13, Vilnius, LT-08426, Lithuania. Tel. +370 676 15445, email info@promyengine.com.

2. Scope

This policy applies to personal data we process when you enter an audit code on our order page promyengine.com/get, order a website audit report and SEO package, and pay for them. The service is offered to business customers only; the data concerns representatives of your company (for example the contact person's email and phone number).

3. What data we process, why and on what basis

  • Email address, company name, company code, phone number (from the order form). Purpose: performing the order, delivering the package, contact about the order. Basis: performance of a contract (GDPR Art. 6(1)(b)).
  • Billing data: billing address, EU VAT number (if you provide it), payment status and amounts (from Stripe). Purpose: confirming payment, issuing the invoice, bookkeeping. Basis: performance of a contract and legal obligation (GDPR Art. 6(1)(b) and (c)).
  • A hashed summary of your IP address (a hash value, not the IP address itself) and a request log. Purpose: preventing code guessing and abuse, rate limiting, security. Basis: legitimate interest (GDPR Art. 6(1)(f)).
  • The fact and time of your acceptance of the terms of sale and this policy. Purpose: proving that the terms were accepted. Basis: performance of a contract and legitimate interest.

We do not see or store bank card details: they are handled only by Stripe. We do not take decisions based solely on automated processing that have legal effects on you.

4. Who receives the data

Our service providers (processors), used only as far as needed to deliver the service:

  • Stripe (payment processing);
  • Hostinger (sending and receiving email);
  • Hetzner (the server running our order database and automation system);
  • GitHub (storage of audit and SEO report PDF files; we do not store buyers' personal data there);
  • Lovable (hosting of the website and order page);
  • an accounting service provider, if we use one.

Sales representatives do not receive your contact or billing data: they only see the audit code, the domain and their own commission amount. We do not sell data and do not use it for direct marketing without your separate consent.

5. Transfers outside the European Economic Area

Some providers (for example Stripe, GitHub, Lovable) may process data outside the EEA. Where applicable, we rely on the European Commission's standard contractual clauses or an adequacy decision (for example the EU-US Data Privacy Framework).

6. Retention

  • Order, invoice and payment data: 10 years from the date of the invoice (accounting record-keeping rules).
  • Request log with the IP hash: no longer than 12 months.
  • Email correspondence with you: as long as needed to handle the order and disputes, and no longer than 3 years after your last order.

After these periods we delete the data or irreversibly anonymise it.

7. Your rights

You have the right to access your data, have it corrected or erased (where we have no legal obligation to keep it), restrict processing, receive your data in a portable format and object to processing based on legitimate interest. Send requests to info@promyengine.com; we reply within 30 days. You may lodge a complaint with the Lithuanian State Data Protection Inspectorate (vdai.lrv.lt) or with the supervisory authority of your country of residence or work (for example CNIL in France, Datatilsynet in Denmark).

8. Cookies

The order page does not use cookies, browser storage or analytics tools.

9. Changes

We may update this policy; the current version is published on this page and its date is shown at the top.