Privacy Policy

1Who We Are

This Privacy Policy describes how Tarmex Oy ("AtlasForgeX", "we", "our") collects and handles personal data when you use our website at atlasforgex.com, the AtlasForgeX desktop application and the Kimiko Caller iOS app.

Data controller: Tarmex Oy, Finland
Contact: atlasforgex@proton.me

2The Core Privacy Principle

This is a deliberate design decision, your competitive intelligence stays yours, fully private.

3What Data We Collect

We only collect data that is necessary to operate the service:

4What We Do NOT Collect

We explicitly do not collect:

• The B2B companies, leads, or contacts you discover with AtlasForgeX
• Your search queries or target markets inside the desktop application
• Your local database contents
• Any personal data from the Kimiko Caller iOS app, which has no accounts and no analytics
• Device fingerprints beyond what is necessary for license validation

5Legal Basis for Processing (GDPR)

• Contract performance: Processing your email and billing data to deliver the subscription service
• Legitimate interests: License validation to prevent unauthorized use
• Legal obligation: Retaining billing records as required by Finnish accounting law

6Third-Party Services

• Stripe: Payment processing. Your card data never touches our servers.
• GoatCounter: Privacy-first website analytics. No cookies, no personal data.
• Proton Mail: Our email provider. Zero-access encryption.
• Hetzner: EU-based hosting for our license validation server.
• Google: Google Analytics 4 and Google Ads conversion tracking on this website only. Not used in our applications.
• Apple: App Store billing for the Kimiko Caller subscription. We never see your payment details.

This website uses Google Analytics 4 and Google Ads conversion tracking. We do not use Meta Pixel or any other advertising trackers, and our applications contain no analytics at all.

7Data Transfers

All infrastructure we control is located within the European Union. Tarmex Oy is a Finnish company subject to EU data protection law. Our payment processor (Stripe) and our website analytics provider (Google) may process data in the United States under Standard Contractual Clauses (SCCs).

8Data Security

• All data in transit is encrypted using TLS/HTTPS
• Our license validation server uses HMAC-signed tokens, no plain credentials transmitted
• Support communications are handled via Proton Mail's encrypted infrastructure
• We operate on a minimal data principle, we don't store what we don't need

9Your Rights Under GDPR

If you are in the EU/EEA, you have the following rights:

• Right of access: Request a copy of your personal data
• Right to rectification: Correct inaccurate data
• Right to erasure: Request deletion of your data
• Right to restriction: Ask us to limit how we use your data
• Right to portability: Receive your data in a machine-readable format
• Right to object: Object to processing based on legitimate interests
• Right to lodge a complaint: File a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi)

To exercise any of these rights, contact us at atlasforgex@proton.me. We will respond within 30 days.

10Cookies

GoatCounter, our visit counter, is cookieless. Google Analytics 4 and Google Ads set their own cookies on this website for visit statistics and conversion measurement. Our desktop and mobile applications use no cookies.

11Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or applicable law. We will notify you of significant changes via email at least 14 days before they take effect.

12Kimiko Caller (iOS App)

Kimiko Caller is our iOS caller identification app. It works differently from the website and the desktop application:

• No account, no login and no registration. We cannot tell who uses the app.
• The app never reads your contacts, your call history or your calls. iOS shows the company name through Apple's Call Directory extension, which only reads a database stored on your own device.
• The app downloads a database of publicly listed company phone numbers and company names from our server over HTTPS. No personal data is sent with the request.
• The app contains no analytics, no advertising and no third-party SDKs.
• The Kimiko Pro subscription is billed by Apple through the App Store. We never see your payment details.
• The database contains only company names and companies' own published business numbers from public business registers, OpenStreetMap and company websites. It contains no private or consumer numbers.