Privacy information

Effective from 06.10.2026 · Version 1.2

In short: we keep only what the service needs – your e-mail, your Word files and the number of pages used. Photos are deleted 7 days after processing. We don't sell data or use it for advertising. When you delete your account, your files are deleted.

1. Data controller

Normrise OÜ (registry code 17620764, VAT number EE103040909), address Käpa AÜ 4, Pangodi küla, Kambja vald, 62017 Tartu maakond, e-mail info@opsiabi.ee. Since 12.10.2026 the data controller has been Normrise OÜ (previously Marko Toomik).

2. What data we process and why

Data	Purpose	Legal basis
E-mail address, password hash (the password itself is not stored)	Account, login, confirmation and password reset e-mails, important notices	Contract
Photos and PDFs of the selected pages	Text recognition and building the Word file; temporarily on the server so they are available on all your devices	Contract
Finished Word files, the pictures in them, folder names	Storing files in your account, preview and download	Contract
Number of pages processed, usage, purchases	Keeping track of free and purchased pages, preventing abuse	Contract, legitimate interest
Invoice details (name, e-mail, institution details for a school)	Issuing invoices and accounting	Contract, legal obligation
IP address and request times	Security (e.g. limiting too many attempts), troubleshooting	Legitimate interest
Error report (if you send one): photos of the marked pages, their result, your comment and e-mail	Investigating the error and improving the service	Consent (you can withdraw it at any time – write to us and we'll delete the error report)
Survey answers (if you answer)	Developing the service	Consent (you can withdraw it at any time – write to us and we'll delete your answers)

Pupils' data: Õpsiabi does not need pupils' data. Please don't photograph pages with pupils' names, grades or other personal data. If it happens anyway, delete the file.

Feedback on pupil's work: when you use the feedback feature, the image or text of the pupil's work, together with the task and assessment criteria, is sent to the AI service provider (Anthropic) to produce the feedback. Õpsiabi does not store the image, text or feedback: they are not kept on the server, in a cache or in logs; the result reaches only your device. We only record that 1 check was made (for accounting). The app does not ask for the pupil's name – please cover the name before taking the photo. For processing pupils' data, the school is the controller; Õpsiabi acts as a processor.

3. Who data is shared with

Zone Media OÜ (Estonia) – web hosting and database; data is located in the European Union.
Anthropic PBC (USA) – AI (Claude) that reads the text from the straightened page image and does extra work (answer sheet, simplification, etc.). The image and text are sent for processing; Anthropic acts as a processor, processes the data only to provide the service and does not use data sent via the API to train its models. Anthropic may briefly retain requests in its systems (for security and abuse prevention) in accordance with its terms. Data is transferred outside the European Union; the basis for the transfer is the European Commission's standard contractual clauses, which are part of Anthropic's data processing addendum.
Wikimedia Commons – when you search for replacement pictures, the search term is sent (not your photo or e-mail). The author and licence are added below the replaced picture.
When updating data, public data is looked up from official sources; your personal data is not sent there.

We do not sell or pass on data for advertising or any other purpose. The service provider looks at a user's files only if the user asks for help or sends an error report, if it is needed to fix a fault or check an infringement report, or if the law requires it.

4. How long we keep data

Photos: photos of processed pages stay with the file for 7 days so you can reprocess a faulty page, and are then deleted automatically (also if you delete the file); unprocessed photos are deleted after 14 days.
Error reports: 30 days, then deleted automatically.
Word files: until you delete them or delete your account.
Account: until the account is deleted. On deletion, all your files and data are deleted.
Invoices and purchase data: 7 years, as required by the Accounting Act.
Security logs: up to 30 days.

5. Browser storage and cookies

The app keeps a login key and some settings (e.g. recently used options) in your browser so you don't have to log in every time. We don't use advertising or tracking cookies or third-party analytics.

6. Your rights

You have the right to receive information about your data, correct it, delete it (also in the app: account menu → "Delete account"), restrict processing, object, and take your files with you. Write to info@opsiabi.ee – we will reply within one month at the latest. If you believe your rights have been violated, you can contact the Data Protection Inspectorate.

7. Security

The connection is encrypted (HTTPS), passwords are stored only as hashes, each user sees only their own files, and access to the server is restricted. If we discover a data-related incident, we will notify affected users and, if necessary, the Data Protection Inspectorate.

8. Changes

This privacy information may be updated. We will announce significant changes by e-mail or in the app.