Operator and contact
Atlant Security
VAT number: BG205426422
Svoboda 27-69, Sofia 1231, Bulgaria
[email protected]
Information we process
Accounts involve your email, names and contact details you provide, organization information, membership, access rights and service requests. Sign-in uses one-time email links, sessions and, if registered, a passkey public key. We do not receive the biometric information your device uses to unlock a passkey.
Property analyses may contain addresses, coordinates, identifiers, property characteristics, financial assumptions, files and notes you enter or upload. Saved projects and versions are associated with your account or organization. Do not upload another person’s data without authority to provide it.
Purposes and grounds
We process necessary information to create your account, deliver requested services, save your work and administer contractual relationships. Billing information and required records support applicable legal obligations. Limited technical and audit records support our legitimate interests in securing the service and resolving disputes.
Optional visitor analytics starts only with your consent. Refusing it does not restrict the core service. Withdrawal stops future collection and does not change the lawfulness of processing before withdrawal.
Visitor analytics
If analytics is enabled, we record IP address, time, page route, language, referring domain, source and campaign, approximate country and city, device category and browser. Analytics does not record form contents. Private project identifiers in routes are replaced with generic labels. These statistics are not anonymous because they contain IP addresses; access is restricted to authorized administrators.
Visitor records older than 90 days are deleted. The 30-, 60- and 90-day views use that same dataset, not an additional archive. Do Not Track and Global Privacy Control signals disable this analytics collection.
Providers and recipients
We use Cloudflare for hosting, network security, databases, file storage and email infrastructure. Authorized staff and administrators have access according to their duties. Members of your organization may access information shared with it according to their permissions.
Using maps, geocoding or external links can disclose your IP address and necessary request information to the relevant provider, which applies its own privacy terms. Private documents and contact details are not automatically sent to a bank, broker or equipment supplier just because you run an analysis. A separate request may require sharing you explicitly choose.
Network providers may process information outside the EEA. The applicable contractual mechanisms and safeguards for international transfers depend on the provider and service. You may request information about the safeguards applying to your data.
Retention
Sign-in sessions last up to 30 days. Application request logs and operational API usage records are retained for 30 days. Visitor analytics is retained for up to 90 days. Accounts, projects, orders, invoices and audit records are not deleted under the visitor-analytics retention rule.
Account and project data is kept to provide the service while the account and work remain needed, or until an erasure request is processed. Legally required accounting records and information needed for a dispute may be retained for the applicable mandatory period or until the dispute is resolved. The specific period depends on the record and obligation.
Some calculators save a draft on your device. An expired draft is not restored after its validity period, but its stored record may remain in the browser until cleared. Clearing local data is not the same as deleting a saved account project.
Your rights
Subject to applicable conditions, you may request access, correction, erasure, restriction or portability of your personal data and object to processing based on legitimate interests. Proportionate identity verification may be necessary. The usual response period is one month; you will be informed of any permitted extension.
You can withdraw analytics consent through “Privacy settings” on any page. You may request erasure of previously collected records. You may complain to Bulgaria’s Commission for Personal Data Protection or another competent supervisory authority.
Automated calculations
Calculators and models produce results from inputs and assumptions. They do not make credit decisions, certify ownership or replace decisions of competent authorities.
Supervisory authority
Commission for Personal Data Protection — complaints and contact details