Privacy policy
How Workpermitly OÜ processes personal data (GDPR).
Last updated: 1 October 2026
Controller
Workpermitly OÜ, Tallinn, Estonia. Contact: info@workpermitly.com.
Data we collect
Account data (name, email, language, account type), application data (personal details, passport data, addresses, employer and working conditions) and uploaded documents.
Purpose and legal basis
We process data to perform our service contract (GDPR art. 6(1)(b)) and to meet accounting obligations (art. 6(1)(c)). Special categories are processed only with your explicit consent. We do not use client files for marketing. Where AI is used it is an internal helper only — a human always files with the PPA and no automated decision is made about your permit.
Sharing
Data is shared only with parties linked to your application (e.g. your employer if you linked to them), with authorities (PPA, Unemployment Fund) for filing, and with trusted processors for hosting. Current processors: Lovable and Supabase (application hosting and the database) and Namecheap Private Email (email — the mailboxes info, support, bots, clients, wp).
Retention
When our service for a case ends (a PPA or Unemployment Fund decision is received, or the client withdraws or abandons the case so we no longer need the file), we delete application data, uploaded documents, passport/ID copies and login access without delay.
Accounting exception (7 years)
We keep only what Estonian accounting law requires: orders, invoices, payments and the name and contact needed to identify the transaction — for at least 7 years from the end of the financial year (Accounting Act § 12). These records cannot be deleted on request.
Your rights
You may access, rectify, erase, restrict and port your data. Write to info@workpermitly.com. You may lodge a complaint with the Estonian Data Protection Inspectorate (AKI).
Security
Documents are stored in private encrypted storage with strict role-based access.
Inactive accounts
Client accounts with no activity for 3 years lose login access; we send an email notice 30 days beforehand. This closes the login — it does not mean we keep the application file. Accounting records remain for 7 years. Staff accounts are not affected.