Privacy Policy

1Who We Are

This Privacy Policy describes how Tarmex Oy ("AtlasForgeX", "we", "our") collects and handles personal data when you use our website at atlasforgex.com and the AtlasForgeX desktop application.

Data controller: Tarmex Oy, Finland
Contact: atlasforgex@proton.me

2The Core Privacy Principle

This is a deliberate design decision — your competitive intelligence stays yours, fully private.

3What Data We Collect

We only collect data that is necessary to operate the service:

4What We Do NOT Collect

We explicitly do not collect:

• The B2B companies, leads, or contacts you discover with AtlasForgeX
• Your search queries or target markets inside the desktop application
• Your local database contents
• Browsing behavior or tracking cookies on this website
• Device fingerprints beyond what is necessary for license validation

5Legal Basis for Processing (GDPR)

• Contract performance — Processing your email and billing data to deliver the subscription service
• Legitimate interests — License validation to prevent unauthorized use
• Legal obligation — Retaining billing records as required by Finnish accounting law

6Third-Party Services

• Paddle — Payment processing. Your card data never touches our servers.
• GoatCounter — Privacy-first website analytics. No cookies, no personal data.
• Proton Mail — Our email provider. Zero-access encryption.
• Hetzner — EU-based hosting for our license validation server.

We do not use Google Analytics, Meta Pixel, or any advertising trackers.

7Data Transfers

All infrastructure we control is located within the European Union. Tarmex Oy is a Finnish company subject to EU data protection law. Our payment processor (Paddle) may process data in the United States under Standard Contractual Clauses (SCCs).

8Data Security

• All data in transit is encrypted using TLS/HTTPS
• Our license validation server uses HMAC-signed tokens — no plain credentials transmitted
• Support communications are handled via Proton Mail's encrypted infrastructure
• We operate on a minimal data principle — we don't store what we don't need

9Your Rights Under GDPR

If you are in the EU/EEA, you have the following rights:

• Right of access — Request a copy of your personal data
• Right to rectification — Correct inaccurate data
• Right to erasure — Request deletion of your data
• Right to restriction — Ask us to limit how we use your data
• Right to portability — Receive your data in a machine-readable format
• Right to object — Object to processing based on legitimate interests
• Right to lodge a complaint — File a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi)

To exercise any of these rights, contact us at atlasforgex@proton.me. We will respond within 30 days.

10Cookies

This website does not use tracking or advertising cookies. GoatCounter, our analytics provider, is explicitly cookieless.

11Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or applicable law. We will notify you of significant changes via email at least 14 days before they take effect.