Privacy Policy

Data controller

The data controller for your personal data is Programmeerija OÜ (Intras), registered at Estonia pst 15, Tallinn 10141. For any data protection question, contact us at info@intras.ee.

What data we collect

We only collect data that is necessary to run the service and communicate with you:

• Contact details — your name and email address if you write to us through the contact form.
• Account and usage data — if you self-host Intras, all work data you enter (tasks, files, messages) stays on your own server and we never have access to it.
• Technical data — IP address, browser type and visit timestamps, logged for security and troubleshooting purposes.
• Cookies — see the dedicated section below.

Why we process data

We process personal data in order to:

• respond to your inquiries and provide customer support;
• manage contractual relationships related to licensing or installation assistance;
• keep the website and service secure and running smoothly;
• fulfil legal obligations such as bookkeeping.

Legal basis

The legal basis for processing is either your consent (e.g. submitting the contact form), performance of a contract (entering into and fulfilling a licensing or service agreement), or our legitimate interest (keeping the website secure and functional).

Data retention

We keep messages submitted through the contact form until your request is resolved, and for up to 12 months afterwards for follow-up purposes. Contract and invoicing data is kept for 7 years as required by accounting law. If you self-host Intras, retention of your data is entirely up to you, since it never resides on our infrastructure.

Who we share data with

We never sell or rent your data to third parties. We may share data with:

• trusted service providers who help us host the website or send emails, and who are contractually bound to protect it;
• authorities, if required by applicable law.

Because Intras is installed on your own server, your team's work data never passes through our infrastructure or that of any third party.

Cookies

We only use cookies that are strictly necessary for the website to function, such as remembering language and security preferences. We do not use tracking or advertising cookies without your consent. Most browsers let you refuse or be notified about cookies, though this may affect how the site works.

Data security

We apply reasonable technical and organisational measures to protect your data: encrypted connections (HTTPS), CSRF protection on forms, a honeypot against bots, and restricted access to the admin interface. Since Intras's source code is open, anyone can independently audit its security.

Your rights

Under the GDPR, you have the right to:

• access the data we hold about you;
• request correction of inaccurate data;
• request deletion of your data ("right to be forgotten");
• restrict or object to processing;
• request data portability in a machine-readable format;
• withdraw consent at any time.

To exercise these rights, write to info@intras.ee. If you believe your rights have been violated, you may lodge a complaint with your local data protection authority.

Changes to this policy

We may update this privacy policy from time to time to reflect changes in our practices or the law. The date of the latest update is shown at the top of this page. We will notify you of significant changes by email where appropriate.