Privacy Policy

LAST_UPDATED: FEBRUARY_9_2026

Northnode OU, based in Estonia (trading as "Initia"), respects your privacy and protects your personal data in accordance with the General Data Protection Regulation (GDPR) and the Estonian Personal Data Protection Act.

SEC_01: DATA_CONTROLLER

01.Data Controller

Northnode OU Address: Telliskivi tn 57, 10412 Tallinn, Estonia Email: hello@initia.studio Supervisory Authority: Estonian Data Protection Inspectorate (www.aki.ee)

SEC_02: DATA_WE_COLLECT

02.Data We Collect

We collect only the data necessary to provide AI automation services. Data is obtained directly from you through our contact form, email, or during service delivery.

Contact data (name, email, company) - Legal basis: Art. 6.1.b GDPR (contract) Communication data (messages, inquiries) - Legal basis: Art. 6.1.f (legitimate interest) Technical data (IP, cookies, usage data) - Legal basis: Art. 6.1.a (consent) Business data (billing information) - Legal basis: Art. 6.1.c (legal obligation)

SEC_03: PROCESSING_PURPOSES

03.Processing Purposes

Provision of consulting and business automation services. Client management and billing. Commercial communication and support. Service improvement through aggregated analysis. Legal compliance and fraud prevention.

SEC_04: DATA_SHARING

04.Data Sharing

We share data with: service providers (hosting, email, payments - e.g., Stripe), technology partners (only with DPA agreements), and authorities when required by law. We do not sell personal data.

SEC_05: INTERNATIONAL_TRANSFERS

05.International Transfers

For operations with Spain, Italy, and the US, we use the European Commission's Standard Contractual Clauses and equivalent safeguards.

SEC_06: DATA_RETENTION

06.Data Retention

Contact data: contract duration + 5 fiscal years. Technical data: 14 months. Billing data: 7 years (Estonian legal obligation).

SEC_07: YOUR_GDPR_RIGHTS

07.Your GDPR Rights

You have the right to: access, rectification, erasure ("right to be forgotten"), restriction, portability, objection, and to withdraw consent. We will respond to your request within 30 days.

You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate (www.aki.ee).

SEC_08: AUTOMATED_DECISIONS

08.Automated Decision-Making

We do not make decisions based solely on automated processing that produce legal effects or significantly affect you.

SEC_09: SECURITY_&_COOKIES

09.Security and Cookies

We implement encryption, access controls, and regular audits. We use functional and analytical cookies (manage preferences in consent banner). Third-party cookies may include Google Analytics (if applicable).

SEC_10: POLICY_CHANGES

10.Changes to This Policy

We may update this policy and will notify you of significant changes via email or website notice.