1. Controller

NEXOBOTIC LTD
Registration no. HE 429230 (Republic of Cyprus)
Tepeleniou 13, Tepelenio Court, Floor 2
8010 Paphos, Cyprus
Email: audits@eaverdict.com

2. What we process, and why

• Order and payment data. Checkout runs on Stripe (Managed Payments): Stripe collects your email, billing country and payment details and shares with us your email and order metadata. We never see card numbers. Legal basis: performance of contract. See Stripe's privacy policy.
• Uploaded tester files. Reports and logs you upload are stored in Cloudflare R2 (EU jurisdiction safeguards via standard contractual mechanisms), processed to produce your audit, and account identifiers are stripped at ingest. Aggregated, anonymized statistics may power our benchmarks. Legal bases: performance of contract; legitimate interest in improving the methodology (aggregated data only).
• Email. Purchase confirmations are sent via Cloudflare Email Sending from audits@eaverdict.com; replies and inbound mail to audits@eaverdict.com are routed via Cloudflare Email Routing to a mailbox operated by Microsoft (Outlook). Legal basis: performance of contract; answering your requests.
• Hosting and logs. The site is served by Cloudflare Pages; Cloudflare processes technical request data (IP address, user agent) for delivery and security. Legal basis: legitimate interest in secure operation.

3. Cookies and tracking

This site sets no tracking cookies and runs no third-party analytics. The free browser check parses your files locally in your browser; nothing is uploaded until you order. Stripe's checkout pages set their own cookies as described in Stripe's policy.

4. Processors and transfers

Processors: Stripe (payments), Cloudflare (hosting, storage, email), Microsoft (mailbox). Where data leaves the EU/EEA, transfers rely on adequacy decisions or standard contractual clauses of the respective provider.

5. Retention

Order records are kept as long as tax and company law require. Uploaded files and produced audits are retained so you can re-download your audit and receive updates; you can request deletion of your uploads at any time (audits already delivered remain available to you).

6. Your rights

You have the rights of access, rectification, erasure, restriction, portability and objection under the GDPR. Contact: audits@eaverdict.com. You may lodge a complaint with a supervisory authority — for Cyprus, the Commissioner for Personal Data Protection.