Privacy Policy | Estimay

Estimay is built to need as little personal data as possible: there are no accounts, and you only give a display name. Estimay is free to use today and is funded by ads from Google on its public pages. This policy explains what we, Google and the apps you connect process, why, and the rights you have.

In short: we store what you type into or import into a room (your display name, the room's stories and votes) and delete it as soon as the host ends the room, or automatically 7 days after the room was last used (30 days for an async room). We keep no backups, so deleted data is gone. If you connect Slack, Jira or another app, we keep only its encrypted tokens and the items you import, and the estimates we write there stay in that app. Rooms show no ads, and room content is never shared with advertisers.

1. Who is responsible for your data

The controller of your personal data is the sole proprietorship registered in Poland that runs Estimay ("Estimay", "we", "us"); its name, address and registration numbers are at the end of this policy. For any privacy question or request, write to [email protected].

We are the controller of everything Estimay stores, including what a team imports from its tools, also when you use Estimay for your organisation. As there are no accounts or organisation contracts, we don't act as a processor on an organisation's behalf and don't sign separate data processing agreements. Section 3 of our Integrations Policy explains what project data may be brought into a room.

For the ads, Google is a separate, independent controller of the data it collects through its advertising cookies and scripts (see section 4). So is each app you use Estimay in or connect a room to, for the data it processes itself (see section 3).

2. What we collect

What you enter in a room

Your display name and a random participant ID created by your browser. Use a nickname if you prefer; it doesn't have to be your real name.
Room content: the room name, stories (titles and ticket keys, and for stories imported from a tracker, the item's ID and link), votes and answers to extra questions, saved estimates, the room's settings (such as the deck, disciplines and a running discussion timer), who is the host or a facilitator, and who is watching as a spectator.
Room password, if the host sets one. We store only a salted scrypt hash, never the password itself.

Our cookie

Your browser keeps your participant ID and display name in one strictly necessary cookie that is deleted 30 days after your last visit. Google's consent and advertising cookies are described below and in our Cookie Policy.

From the apps you use Estimay in or connect

If you open Estimay in Slack, Discord, Telegram or Google Meet, that app tells us who you are, and we use its user ID and name instead of a typed name. If a room is connected to Jira, Trello, Linear or Asana, we keep the room's encrypted tokens and the items imported into it. Section 3 lists each one: what we receive, what we write there, what we keep and for how long.

Technical data

Like every website, Estimay receives your IP address, browser type (user agent), the address of the page you request and the time of the request. Our hosting provider's servers record these in access logs, which are kept for 7 days. Our application also holds your IP address in memory for about one minute to limit the number of requests (rate limiting). We don't use any of this to profile you.

Usage statistics

We use Cloudflare Web Analytics to count visits and measure how fast pages load. When a page loads, your browser sends Cloudflare the page address (for a room, it contains the room's code), the referring site, your browser and device type, your country (derived from your IP address) and page load timings. It uses no cookies or other browser storage and doesn't fingerprint you, so it can't recognise you across visits or other websites. We see only aggregated numbers.

Product statistics

To know whether Estimay is used, our server records three events: a room was created, someone joined a room for the first time, and a room was ended. Each event holds only its type, the time and the room's code, and the first two also a one-way hash of the participant ID (salted, so the ID itself is never stored). It holds no names, stories or votes. We look at these events only as totals, such as how many rooms were created this week and how many people came back.

Messages you send us

If you write to us through the form on our Contact page, we receive and store the name (optional), the email address, the topic you pick and the message you type, and nothing else: no IP address and no identifier. We use them only to answer you. If you email us, we receive your email address and whatever you choose to write.

What we don't collect

No email address or password for an account (there are no accounts), no payment details (using Estimay needs none), and nothing from a connected app beyond what section 3 lists: no messages, contacts, files, calendars, or issue descriptions, attachments and assignees. We never sell your data, and we never give room content (names, stories, votes) to Google or any advertiser.

3. Integrations

Every integration follows the rules of our Integrations Policy. In brief: nothing connects unless someone chooses it, and only a room's host or a facilitator can connect it to a tracker. Estimay stores only the items you import, writes back only estimates, keeps access tokens encrypted (AES-256-GCM) on its server, never in anyone's browser, and deletes them when the room is disconnected or ends, or after 30 days unused. What Estimay writes into your tools (comments, estimates, Slack cards) stays there, under that provider's terms and your organisation's settings. Anyone may also connect their own AI assistant over MCP, which then acts as them in the rooms they are in; we keep a record of each connection until it is disconnected or 30 days unused. Before we add an integration, we list it here.

Jira Cloud

Kind	Issue tracker, connected by a room
Provider	Atlassian (Atlassian Pty Ltd, Australia, and its affiliates), an independent controller under its own privacy policy
Who turns it on	The room's host or a facilitator, from the Stories panel's import window, by signing in on the provider's own page. Nobody else in the room can connect it or use the connection.
Permissions	Read projects and issues (read:jira-work), write to issues (write:jira-work, used only for the estimate), read the account's name (read:jira-user) and stay connected (offline_access).
Estimay receives	To pick from: the Jira sites the sign-in allows, their projects, and the keys and summaries of their issues, read when the import window shows them and not stored. For each issue imported: its summary, key, ID, site ID and link. The account's name, asked when it is shown ("Connected as …") and never stored.
Estimay writes there	Each imported issue's final estimate, in its story points field (where the issue has one that can be edited) and in one comment under the connected account (with the answers to the room's extra questions, such as AI tokens, and a link to estimay.io), written when the host or a facilitator asks for it: one story at a time, or each estimate as soon as it is set (and again when it changes) once they turn that on (Estimay reads the comments only to find its own). Nothing else.
Estimay keeps	The room's access and refresh tokens, encrypted. The imported issues, as stories in the room.
For how long	The tokens until the room is disconnected or ends, and otherwise 30 days after the connection was last used. Imported stories are deleted with the room.
To stop it	Disconnect in the import window, or end the room, and Estimay deletes the tokens. Atlassian gives apps no way to revoke a token, so to withdraw the permission itself, remove Estimay from your Atlassian account's connected apps. Comments and estimates already written stay in the tool.

Trello

Kind	Issue tracker, connected by a room
Provider	Atlassian (Atlassian Pty Ltd, Australia, and its affiliates), an independent controller under its own privacy policy
Who turns it on	The room's host or a facilitator, from the Stories panel's import window, by signing in on the provider's own page. Nobody else in the room can connect it or use the connection.
Permissions	Read boards (read:board:trello), write to boards (write:board:trello, used only for the estimate comment), read the account's name (read:member:trello) and stay connected (offline_access).
Estimay receives	To pick from: the boards, lists and card names the account can see, read when the import window shows them and not stored. For each card imported: its name, ID and link. The account's name, asked when it is shown and never stored.
Estimay writes there	One comment on each imported card with its final estimate, the answers to the room's extra questions (such as AI tokens) and a link to estimay.io, under the connected account, written when the host or a facilitator asks for it: one story at a time, or each estimate as soon as it is set (and again when it changes) once they turn that on (Estimay reads the comments only to find its own). Nothing else.
Estimay keeps	The room's access and refresh tokens, encrypted. The imported cards, as stories in the room.
For how long	The tokens until the room is disconnected or ends, and otherwise 30 days after the connection was last used. Imported stories are deleted with the room.
To stop it	Disconnect in the import window, or end the room, and Estimay deletes the tokens. Atlassian gives apps no way to revoke a token, so to withdraw the permission itself, remove Estimay from your Atlassian account's connected apps. Comments and estimates already written stay in the tool.

Linear

Kind	Issue tracker, connected by a room
Provider	Linear Orbit, Inc. (USA), an independent controller under its own privacy policy
Who turns it on	The room's host or a facilitator, from the Stories panel's import window, by signing in on the provider's own page. Nobody else in the room can connect it or use the connection.
Permissions	Read (read) and write (write). Linear offers no narrower permission for writing an estimate, so its write permission covers the workspace; Estimay uses it only for what is listed here.
Estimay receives	To pick from: the account's teams, and the identifiers and titles of their issues, read when the import window shows them and not stored. For each issue imported: its title, identifier, ID and link. The account's name, asked when it is shown and never stored.
Estimay writes there	Each imported issue's final estimate in one comment under the connected account (with the answers to the room's extra questions, such as AI tokens, and a link to estimay.io) and, where the team's estimate scale has the value, as the issue's estimate, written when the host or a facilitator asks for it: one story at a time, or each estimate as soon as it is set (and again when it changes) once they turn that on (Estimay reads the comments only to find its own). Nothing else.
Estimay keeps	The room's access and refresh tokens, encrypted. The imported issues, as stories in the room.
For how long	The tokens until the room is disconnected or ends, and otherwise 30 days after the connection was last used. Imported stories are deleted with the room.
To stop it	Disconnect in the import window, or end the room: Estimay asks Linear to revoke the tokens, then deletes them. You can also revoke it in your Linear settings. Comments and estimates already written stay in Linear.

Asana

Kind	Issue tracker, connected by a room
Provider	Asana, Inc. (USA), an independent controller under its own privacy policy
Who turns it on	The room's host or a facilitator, from the Stories panel's import window, by signing in on the provider's own page. Nobody else in the room can connect it or use the connection.
Permissions	Read the account's name (users:read), its workspaces (workspaces:read), projects (projects:read) and tasks (tasks:read); read and write comments (stories:read, stories:write, used only for the estimate comment); and edit tasks and their custom fields (tasks:write, custom_fields:read, custom_fields:write, used only to find and fill in the story points field). Estimay never creates or changes a field itself.
Estimay receives	To pick from: the account's workspaces and projects, and the names and sections of their open tasks, read when the import window shows them and not stored. For each task imported: its name, ID and link. The account's name, asked when it is shown and never stored. Asana's sign-in also sends the account's ID, name and email address, which Estimay ignores.
Estimay writes there	Each imported task's final estimate in one comment under the connected account (with the answers to the room's extra questions, such as AI tokens, and a link to estimay.io) and, where the task has a number field named Story points (or Points, or Estimate), in that field, written when the host or a facilitator asks for it: one story at a time, or each estimate as soon as it is set (and again when it changes) once they turn that on (Estimay reads the task's comments only to find its own). Nothing else.
Estimay keeps	The room's access and refresh tokens, encrypted. The imported tasks, as stories in the room.
For how long	The tokens until the room is disconnected or ends, and otherwise 30 days after the connection was last used. Imported stories are deleted with the room.
To stop it	Disconnect in the import window, or end the room: Estimay asks Asana to revoke the tokens, then deletes them. You can also remove Estimay in your Asana settings, under Apps. Comments and estimates already written stay in Asana.

Slack

Kind	Chat or video app Estimay runs inside
Provider	Slack Technologies, LLC (USA), an independent controller under its own privacy policy
Who turns it on	A member of a workspace adds the app, as the workspace's settings allow. Anyone in the workspace can then type /storyvote in a channel.
Permissions	Answer the /storyvote command (commands), post messages (chat:write, and chat:write.public for public channels it hasn't joined), preview Estimay links (links:read, links:write) and look up people's names (users:read). Not email addresses or messages.
Estimay receives	The workspace's access token. For whoever types /storyvote or opens a room's card: their Slack user ID and display name. The ID of the channel a room was started in, and the Estimay links in messages Slack asks us to preview.
Estimay writes there	The room's card in that channel, previews of room links, and a reply only its creator sees; the cards are updated until the room ends. Nothing else.
Estimay keeps	The workspace's ID and its encrypted access token. Your Slack user ID and name, in the rooms you join. The channel and message ID of each of a room's cards.
For how long	The token until the app is removed from the workspace. Card IDs until the room ends, and otherwise 30 days after the room last changed. Names and IDs with the room.
To stop it	Remove the app in the workspace's app settings: Slack tells us, and we delete the token. Messages and cards already posted stay in Slack, under your workspace's retention settings.

Discord

Kind	Chat or video app Estimay runs inside
Provider	Discord Inc. (USA), an independent controller under its own privacy policy
Who turns it on	Anyone in a voice channel starts the Estimay Activity. Discord asks each person once to let Estimay see who they are.
Permissions	Your identity (identify). Not your email address, servers, friends or messages.
Estimay receives	Your Discord user ID, username and display name, read once with a token Discord issues for it, which is not kept. Discord also relays all traffic between your device and Estimay through its own servers.
Estimay writes there	Nothing.
Estimay keeps	Your Discord user ID and display name, in the rooms you join. The Activity session's ID, linked to its room's code.
For how long	The Activity's link 30 days after it was made. Names and IDs with the room.
To stop it	Leave the Activity. You can remove Estimay's access in Discord's settings, under authorised apps.

Kind	Chat or video app Estimay runs inside
Provider	Telegram, an independent controller under its own privacy policy
Who turns it on	Anyone opens the Estimay Mini App from Telegram.
Permissions	None to grant: Telegram sends its signed launch data when the Mini App opens.
Estimay receives	Telegram's signed launch data, whose signature Estimay checks: your Telegram user ID and name. Not your phone number, contacts or messages.
Estimay writes there	Nothing.
Estimay keeps	Your Telegram user ID and name, in the rooms you join.
For how long	With the room.
To stop it	Close the Mini App. Nothing about you is kept outside the rooms you joined.

Google Meet

Kind	Chat or video app Estimay runs inside
Provider	Google LLC (USA), an independent controller under its own privacy policy
Who turns it on	Anyone in a call opens the add-on from Activities and starts it for everyone.
Permissions	None. The add-on doesn't sign you in and gets nothing from your Google account.
Estimay receives	Your browser turns the meeting's ID into a one-way hash and sends only that hash, never the meeting's ID, code or participants. You type the name the others see.
Estimay writes there	Nothing.
Estimay keeps	The meeting's hash, linked to its room's code. Your typed name and a random ID, in the rooms you join, and in Meet's local storage on your device.
For how long	The meeting's link 30 days after it was made. Names and IDs with the room; on your device until you clear the site's data.
To stop it	Close the add-on, and clear the site's data in your browser to remove your name from the device.

AI assistants (MCP)

Kind	AI assistant that acts in rooms for you, over MCP
Provider	The AI assistant you connect, such as Anthropic, PBC (USA) for Claude, an independent controller under its own privacy policy
Who turns it on	Anyone, from their own AI assistant (Claude, Cursor, ChatGPT or another MCP client): the assistant opens Estimay in their browser, where they allow it to act as the guest that browser already is. Nobody else can connect an assistant to you.
Permissions	Read the rooms you are in (rooms:read) and, if you choose Read & write, change them as you could yourself (rooms:write): create and join rooms, add, edit and delete stories, start a vote, vote, reveal and set estimates. Nothing outside Estimay.
Estimay receives	The name the assistant registers under and the address it returns to. Then each request it makes: which tool, and its arguments, such as story titles.
Estimay writes there	Nothing into the assistant's own service. Each tool's answer, the room as your browser would show it (its stories, people's names in it, and votes once revealed), goes to the assistant, and so to its provider.
Estimay keeps	One record per connected assistant: your browser's guest ID and name, the assistant's name, the access you chose, a one-way hash of its current refresh token, and when it was connected and last used. What it changes in rooms is kept like any other change, with the room.
For how long	The record until you disconnect the assistant, or 30 days after it was last used. Each access token expires after an hour.
To stop it	Disconnect it under Connected assistants (/connect/assistant), in the browser you connected from: its next request is refused and its record is deleted. Remove Estimay from the assistant too.

4. Advertising

Estimay shows ads through Google AdSense, which pays for running the service. Ads appear only on public pages such as the home page, the guides, the FAQ and the blog. Rooms, the page where you create one, the contact form and our legal pages never load Google's ad script, and neither does Estimay inside Slack, Discord, Telegram or Google Meet. On a page with ads, your browser loads Google's ad script, which receives from your browser:

your IP address, browser and device information, and your language;
the address of the page you're on, and the page that sent you there;
identifiers stored in cookies or similar browser storage, if you allow them, and how you interact with ads (views and clicks).

Your choice. When you first visit from the European Economic Area, the United Kingdom or Switzerland, Google's consent message asks whether Google and its advertising partners may store and read information on your device and show you personalised ads. You can accept, refuse or choose purposes and partners one by one. Refusing is as easy as accepting, and Estimay works the same either way.

With your consent, Google and its partners use cookies to show ads based on your interests and on your previous visits to Estimay and other websites, to limit how often you see an ad, and to measure ads.
Without it, Google shows limited or non-personalised ads, chosen from the page you're on and your approximate location, and uses only what the law allows without consent, such as preventing fraud and ad abuse.

To change or withdraw your consent at any time, use Privacy & cookie settings at the bottom of our pages. Withdrawing doesn't affect processing that happened before.

Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to this and other sites on the internet. You can opt out of personalised advertising in My Ad Center, and of other vendors' personalised ads at youronlinechoices.eu (Europe) or aboutads.info. Read how Google uses information from sites that use its services and how Google uses cookies in advertising.

Google acts as an independent controller of this data: Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) for visitors in the EEA and Switzerland, and Google LLC (USA) elsewhere, including the UK. Its processing is described in the Google Privacy Policy.

5. Who can see what you enter

Anyone with a room's invitation link (and its password, if one is set) can join and see the room name, the stories (including the titles and links of imported ones), the participants' names and, once a story is revealed, each person's vote. They don't need an account in a connected tracker to see imported stories; a story's link leads to the tracker, where its own permissions apply. In an anonymous room, nobody sees who voted what, only how many people picked each card. Only the host and facilitators see which account a tracker is connected as. Treat the invitation link like a meeting link and share it only with the people who may see the stories.

Anyone in a room may connect their own AI assistant (section 3). It sees what that person sees in the room, so the room's name, stories, participants' names and revealed votes can reach that assistant's provider, under its own privacy policy. It never sees a vote before the reveal.

Reactions are shown to everyone in the room as they happen and are never stored. A reaction thrown at someone's seat shows who threw it and at whom; an emoji sent to the whole room from the top bar carries no name, so the others in the room can't tell who sent it, and we don't record it.

6. Why we process your data and on what legal basis

Purpose	Data	Legal basis (GDPR)
Providing planning poker rooms you create or join	Display name, participant ID, room content, our cookie	Art. 6(1)(b): performing our agreement with you (the Terms)
Running the integrations you choose: knowing who you are in a chat app, importing items and writing estimates back to a tracker	The app's user ID and name, tokens, imported items' titles, keys, IDs and links, the estimates written (section 3)	Art. 6(1)(b): performing our agreement with you, at your request
Showing how users rate Estimay, if you choose to rate it	Your star rating, with a one-way hash of your participant ID (so one person counts once)	Art. 6(1)(f): our legitimate interest in an honest public rating
Keeping Estimay secure and preventing abuse	IP address, user agent, request details	Art. 6(1)(f): our legitimate interest in a secure, available service
Counting how many rooms are created, joined and ended	Event type, time, room code, a one-way hash of your participant ID	Art. 6(1)(f): our legitimate interest in knowing whether Estimay is used
Understanding which pages are useful and keeping the site fast	Page address, referrer, browser and device type, country, page load timings	Art. 6(1)(f): our legitimate interest in improving Estimay
Personalised ads, and storing or reading advertising cookies on your device	Cookie identifiers, IP address, device data, page address, ad interactions	Art. 6(1)(a): your consent, which you can withdraw at any time
Showing limited, non-personalised ads to fund the service	IP address (approximate location), device data, page address	Art. 6(1)(f): our legitimate interest in funding Estimay through advertising
Remembering your consent choice	Your choice and when you made it, kept in a cookie	Art. 6(1)(c) with Art. 7(1): our duty to be able to show consent
Answering your messages and complaints	Email address, message content	Art. 6(1)(f): our legitimate interest in responding to you
Meeting legal obligations, such as tax, accounting and reporting a data breach	Data required by the specific obligation	Art. 6(1)(c): compliance with a legal obligation

Giving us your name is voluntary, but you need some name to take part in a room. Estimay makes no decisions about you by automated means and doesn't profile you. If you consent to personalised ads, Google builds an interest profile to choose which ads you see; this doesn't have legal or similarly significant effects on you.

7. How long we keep it

Deleting means deleting: we keep no backups of Estimay's database, so data that is deleted can't be restored, by us or anyone else.

Room data (names, stories including imported ones, votes, password hash): deleted immediately when the host ends the room ("End and delete room"), and otherwise automatically 7 days after the room was last used, or 30 days for an async room (one where everyone votes in their own time). Email us the room code if you want it deleted sooner.
Integrations (tracker tokens, Slack workspace tokens and room cards, and the links between a Discord Activity or a Meet call and its room): as section 3 states for each one. What Estimay wrote into a connected app stays there until you delete it in that app.
AI assistant connections (your guest ID and name, the assistant's name and access, a hash of its refresh token): until you disconnect it, or 30 days after it was last used.
When you leave a room early (the host removes you, or you are the host and hand the room over): your name and role are removed from the room at once. Votes you cast on stories that were already revealed stay with those stories, linked only to your random participant ID, until the room is deleted.
Ratings: a star rating you give is kept, with a one-way hash of your participant ID and no name, for as long as Estimay shows its average. Your browser also remembers in its local storage that you were asked, so the question isn't repeated. What else your browser keeps for Estimay (such as the emoji you use most in a room's emoji picker) stays on your device and is listed in the Cookie Policy.
Our cookie: 30 days after your last visit.
Your consent choice: up to 13 months, after which you're asked again.
Google's advertising cookies: up to 13 months, depending on the cookie (see the Cookie Policy). How long Google keeps ad data is set out in its privacy policy.
Access logs: 7 days. Rate-limiting data: about one minute.
Product statistics: deleted automatically after 90 days.
Usage statistics: Cloudflare keeps the detailed measurements for 7 days, then only aggregated statistics, which are available for 6 months.
Contact form messages: deleted automatically after 90 days, or sooner when we have answered and removed them.
Emails: as long as needed to handle your request, and no longer than 12 months after it is resolved, unless the law requires longer.

These service providers process data on our instructions:

Railway Corporation (USA) hosts the application and its database in its EU West region, in Amsterdam, the Netherlands, so what Estimay stores stays in the European Union. Railway is SOC 2 Type II certified.
Cloudflare, Inc. (USA) provides our cookieless website analytics, so it receives the usage statistics described above and your IP address. It also forwards email sent to [email protected] to our mailbox (Cloudflare Email Routing), passing your messages on without keeping them.
Google (Gmail) hosts our mailbox, so it receives the messages you send to [email protected].

These receive data as independent controllers, under their own privacy policies:

Google and, if you consent, its advertising partners (listed in the consent message) receive the advertising data described in section 4.
The apps you use Estimay in or connect a room to (Atlassian, Linear, Asana, Slack, Discord, Telegram and Google) receive what section 3 lists for each. Discord also passes every request between your device and Estimay through its own servers, so it receives what you send and see in the room.
The AI assistant you or someone in your room connects (for example Anthropic's Claude) receives what that person could see in the rooms it reads, as section 3 lists.
Trustpilot A/S (Denmark) shows a box inviting you to review Estimay on the Features page, the blog articles and the "Session ended" page, and receives your IP address and browser details when it loads. If you write a review, you do so on Trustpilot; the box itself sends us nothing.
Buy Me a Coffee (Publisherr, Inc., United States) shows a button for supporting Estimay in the bottom corner of our public pages (not in rooms or the apps Estimay runs inside), and receives your IP address and browser details when it loads. If you open it, Buy Me a Coffee's own page opens in a frame, and anything you give there (a payment, a message) goes to Buy Me a Coffee under its privacy policy; the button itself sends us nothing and sets no cookie on our site.

We disclose data to public authorities only when the law requires us to.

9. Transfers outside the EEA

Some of the data leaves the European Economic Area:

Railway keeps our servers and everything Estimay stores in the Netherlands, but it is a US company, so its staff may reach that data from outside the EEA (for example, to keep the platform running). Such access is protected by the European Commission's Standard Contractual Clauses (Art. 46 GDPR), part of Railway's Data Processing Agreement. You can ask us for a copy.
Cloudflare and Google (usage statistics, email and advertising data) may process data in the United States; both are certified under the EU-U.S. Data Privacy Framework and its UK Extension.
Buy Me a Coffee loads its button from, and processes what you give it in, the United States, under the safeguards its privacy policy describes.
Integrations: when you connect an app, data moves between our servers in the EU and that provider, which processes it where its own privacy policy says, under the transfer safeguards it describes there.

10. Your rights

Under the GDPR you have the right to:

access your data and receive a copy of it;
have inaccurate data corrected (you can also change your name in any room's Settings);
have your data erased;
restrict how we process it;
receive it in a portable format;
object to processing based on our legitimate interests;
withdraw your consent at any time, through Privacy & cookie settings at the bottom of our pages;
lodge a complaint with a supervisory authority: in Poland, the President of the Personal Data Protection Office (Prezes UODO, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl), or the authority where you live or work.

To exercise a right, email [email protected]. Since there are no accounts, please include the room code and the display name you used so we can find your data. We reply within one month. You can also act yourself: the host can end a room, which deletes it, and disconnect a tracker, which deletes its tokens; a Slack workspace can remove the app. What Estimay wrote into a connected app is deleted in that app. For data Google collects through its ads, you can also use the tools in Google's privacy policy and My Ad Center.

11. If you're in the United Kingdom

The UK GDPR, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR) apply to you. You have the same rights as listed above, and you can complain to the Information Commissioner's Office (ico.org.uk). Google's consent message also asks visitors in the UK for consent before advertising cookies are used. Transfers of UK data to the United States are covered by the UK Extension to the EU-U.S. Data Privacy Framework and the UK Addendum to the Standard Contractual Clauses.

12. Children

Estimay is a tool for work teams and is not intended for children under 16. We don't knowingly collect their data.

13. Security and data breaches

We protect your data with encryption in transit, encrypted integration tokens, permissions checked on the server and minimal data collection. If a breach puts personal data at risk, we report it to the supervisory authority within 72 hours where the GDPR requires it, and tell the people affected without undue delay when it is likely to put them at high risk. Read more on our Security page.

14. Changes to this policy

If we change this policy, we'll update the date at the top of this page and announce significant changes on the site. If we start using new services that process personal data, including a new integration, we'll update this policy first and ask for your consent where the law requires it.

Data controller: Daniel Grynyk, ul. Lubostroń 22C lok. 12, 30-383 Kraków, Poland. NIP 6762588667, REGON 387580871, entered in the Central Register and Information on Economic Activity (CEIDG).