This Policy explains how VL Wood OÜ (registry code 14788084, Meeliku tn 23/2-6, Lasnamäe linnaosa, 13915 Tallinn, Estonia, info@mebelpro.app) processes personal data in connection with the MebelPro / CechPilot service and the website mebelpro.app.
For the data our Customers enter into their workspaces (employees, their customers, orders, files) the Customer is the controller and we are the processor: we process such data only on the Customer’s instructions to provide the Service. A data processing agreement (DPA) is available on request. For website visitors and for Customers’ account and billing data, we are the controller.
Account data: company name, subdomain, administrator name, contact email and phone, chosen language and currency, IP address and browser of registration.
Workspace content (as processor): employee names and roles, PIN codes (stored hashed where applicable), orders, customers’ names and contacts, materials, photos and files, chat messages, working-time records, optional GPS coordinates of check-in/out if the employee allows it.
Billing data: subscription status and Stripe customer identifier. Card details are processed by Stripe and never reach our servers.
Technical data: server logs (IP address, time, request), error reports, and anonymous website statistics (self-hosted Umami, no cookies, no cross-site tracking).
Providing the Service and support — performance of a contract (GDPR Art. 6(1)(b)). Billing, accounting and tax records — legal obligation (Art. 6(1)(c)). Security, abuse prevention, service statistics and product improvement — legitimate interest (Art. 6(1)(f)). Marketing emails — only with your consent (Art. 6(1)(a)), which you can withdraw at any time.
We use the following service providers, all bound by data processing agreements: Hetzner Online GmbH (Germany/Finland) — hosting and backups in EU data centres; Stripe Payments Europe Ltd. (Ireland) — payments; Resend (EU region) — transactional emails; Anthropic / Google — AI recognition features (only when a user actively uses them; only the photo or text being recognised is sent; you can bring your own API key). Push notifications are delivered via the browser vendor’s push service (Google, Apple, Mozilla). We do not sell personal data.
Workspace content is kept for the duration of the subscription and 30 days after termination, then deleted; backups are rotated within a further 30 days. Our own invoices to you and related subscription records are kept for 7 years, as Estonian law requires of every company for its accounting documents. Server logs are kept for up to 30 days.
Data is transmitted over TLS, stored in EU data centres with access restricted to authorised personnel, backed up daily, and workspaces are isolated from each other. Access to a workspace requires the credentials set by its administrator. No system is perfectly secure; report suspected incidents to info@mebelpro.app.
Under the GDPR you have the right to access, rectify and erase your personal data, to restrict or object to processing, to data portability, and to withdraw consent. Requests can be sent to info@mebelpro.app; we answer within 30 days. If your data was entered by one of our Customers (e.g. your employer), please contact that Customer first — we will assist them. You may also complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee) or your local supervisory authority.
The website uses no tracking cookies. The application stores in your browser only what is needed to work: your session token, chosen language, interface settings and cached data for offline use. Statistics are collected without cookies and without identifying visitors.
We may update this Policy; the current version with its date is always published at mebelpro.app/legal/. Material changes are announced in the app or by email.