Privacy Notice

1. Data controller

Your personal data controller is Inga Jurgelevičiūtė, provider of the service “Needs Test”. Contact: jurgeleviciute.inga@gmail.com. As the data controller I decide the purposes and means of processing your personal data.

2. Data we collect

• Account data: email address, login credentials (passwords are stored encrypted), name if you provide it.
• Test data: your answers about needs, results, test history and priority lists.
• Feedback and correspondence: feedback you submit and support requests.
• Technical data: IP address, browser and device information, error logs, aggregated usage statistics.
• Purchase data: purchase fact, plan, validity date and payment identifier. We do not collect or see card details — those are handled by Paddle.

3. Purposes and legal basis

• Account creation and service provision, storing results — performance of a contract.
• Granting paid access and accounting — performance of a contract and legal obligation.
• Security, fraud prevention, bug fixing and service improvement — legitimate interest.
• User support — performance of a contract and legitimate interest.
• Publishing feedback and marketing messages — your consent, which you may withdraw at any time.

4. Who we share data with

• Service providers (processors): hosting, database, authentication and email sending providers.
• Paddle.com, our Merchant of Record: for product sale, payments, subscription management, tax handling and invoicing.
• Professional advisers: legal or accounting specialists when required.
• Public authorities: when required by law.

5. International transfers

Some service providers may process data outside the EEA. In such cases we apply appropriate safeguards — European Commission standard contractual clauses or adequacy decisions.

6. Retention periods

Account and test data are stored as long as you have an active account. When you delete your account, data is removed or anonymised. Purchase-related accounting records are kept for as long as required by law (usually 10 years). Technical logs are kept for up to 12 months.

7. Your rights

Under GDPR you have the right to access, rectify, erase, restrict processing of, port, object to and withdraw consent for your personal data. Send requests to jurgeleviciute.inga@gmail.com — we will respond within one month. You may also lodge a complaint with your national data protection authority.

8. Data security

We apply appropriate technical and organisational measures: encrypted data transmission (HTTPS), encrypted passwords, row-level database access control and limited staff access.

9. Cookies and local storage

We only use essential cookies and browser local storage (localStorage) for your session, language selection and test progress. We do not use marketing cookies. During checkout Paddle may use its own essential cookies. You can manage or delete cookies in your browser settings.

10. Changes

This notice may be updated. The current version is always published on this page. Also see terms and conditions and refund policy.