Privacy policy

Last updated 12.10.2026. If the Estonian and English versions differ, the Estonian version applies.

Who processes the data

The controller is LAJ OÜ (registry code 16703896), which provides the service under the name DigiAI. For questions, write to info@digiai.ee.

What data we collect

Through the contact form we collect what you enter: your name, email address and, if you wish, phone, company or website, message, order choices and your answer to how you heard about us. If you have accepted statistics and your browser passes on that choice, we store that day's visit identifier with your message so we can see where it came from (see below). The site has no advertising or tracking cookies. Fonts are loaded from our own server.

Booking a free call

In the DigiAI booking form we ask for your name, email, the time of the meeting and a short description of what you need help with. Adding a website link is optional. We use the data to arrange the meeting, send a confirmation and reminder and, at your request, to change or cancel the time. Please do not add sensitive personal data to the form.

The booking and message are stored in the DigiAI admin. Google Calendar helps avoid overlapping times and keeps the organiser's time reserved. The call takes place on Zoom; DigiAI sends the meeting link, a calendar invite and a personal management link by email. Keep the management link to yourself: it can be used to change or cancel your call. Meetings are not recorded automatically. If you have accepted statistics, we link the visit identifier and campaign source to the booking.

Visit statistics

We only collect our own statistics with your consent. This covers page views, clicks, time on page, scroll depth, the referring page and campaign tags, country, city, device type and sending a message together with the chosen service. Statistics do not use cookies. IP addresses are not stored in the statistics; visits on the same day are linked with an identifier that changes daily. If you send a message and have accepted statistics, we add that identifier to the message to see which visit led to it. We keep statistics for 13 months. The legal basis is your consent (GDPR Article 6(1)(a)).

Before you accept and after you decline, no statistics are sent and no visit identifier is added to new messages. Withdrawing consent does not affect the lawfulness of processing carried out before.

Cookies and privacy choices

In the privacy window you can accept statistics, decline them or change the choices one by one. Closing the window does not give consent. You can reopen your choice at any time with the button below or the “Cookie settings” link in the footer. The forms work even if you decline statistics.

We remember your choice in the browser's storage for 6 months (entry digiai-consent-v2). This is needed to respect your decision, so no separate consent is asked for it. If the browser does not allow storage, optional tracking stays off. The choices apply to this browser and device.

We do not currently use the Meta Pixel or Google Analytics, so the window does not show a marketing choice.

Cookie settings

What we use the data for

We use the data you send to reply to your message, prepare an offer and carry out the agreed work. The legal basis is taking steps at your request before entering into a contract (GDPR Article 6(1)(b)). We do not sell your data or share it for marketing.

Preventing spam

To limit excessive sending we use separate security identifiers derived from the IP address and email. They are created by hashing with a secret key; neither the IP address nor the email is stored in the counter. The counter lasts 10 minutes and expired counters are deleted during later requests. This protection works even if you have declined visit statistics.

Who else sees the data

We use trusted service providers to process data: Vercel (hosting), Supabase (visit statistics, messages and bookings, data centre in Ireland), Resend (emails for messages and bookings), Google Workspace (email and calendar) and Zoom (video meetings). Some of them may process data outside the European Union. In that case they rely on standard contractual clauses approved by the European Commission.

How long we keep data

If we do not end up working together, we delete your message within 12 months at the latest. We keep data about a completed booking and its notifications for up to 12 months after the meeting; after that we remove them from the DigiAI admin and review the related Google Calendar and Zoom entries. How long service providers keep logs and backups is described in their terms. If we sign a contract, we keep the data while the contract is valid and invoices for the period required by law (7 years).

Your rights

You have the right to ask what data we hold about you and to have it corrected or deleted. You can also object. To do so, write to info@digiai.ee. If you think your rights have been violated, you can contact the Estonian Data Protection Inspectorate.