1. Controller

NEXOBOTIC LTD
Registration no. HE 429230 (Republic of Cyprus)
Tepeleniou 13, Tepelenio Court, Floor 2
8010 Paphos, Cyprus
Email: [email protected]

2. What we process, and why

• Order and payment data. Checkout runs on Stripe (Managed Payments): Stripe collects your email, billing country and payment details and shares with us your email and order metadata. We never see card numbers. Legal basis: performance of contract. See Stripe's privacy policy.
• Uploaded tester files. Reports and logs you upload are stored in Cloudflare R2 (EU jurisdiction safeguards via standard contractual mechanisms), processed to produce your audit, and account identifiers are stripped at ingest. Aggregated, anonymized statistics may power our benchmarks. Legal bases: performance of contract; legitimate interest in improving the methodology (aggregated data only).
• Email. Purchase confirmations are sent via Cloudflare Email Sending from [email protected]; replies and inbound mail to [email protected] are routed via Cloudflare Email Routing to a mailbox operated by Microsoft (Outlook). Legal basis: performance of contract; answering your requests.
• Hosting and logs. The site is served by Cloudflare Pages; Cloudflare processes technical request data (IP address, user agent) for delivery and security. Legal basis: legitimate interest in secure operation.

3. Cookies and tracking

This site sets no tracking cookies and runs no third-party analytics. The free browser check parses your files locally in your browser; nothing is uploaded until you order. Stripe's checkout pages set their own cookies as described in Stripe's policy.

4. Processors and transfers

Processors: Stripe (payments), Cloudflare (hosting, storage, email), Microsoft (mailbox). Where data leaves the EU/EEA, transfers rely on adequacy decisions or standard contractual clauses of the respective provider.

5. Retention

Order records are kept as long as tax and company law require. Uploaded files and produced audits are retained so you can re-download your audit and receive updates; you can request deletion of your uploads at any time (audits already delivered remain available to you).

6. Your rights

You have the rights of access, rectification, erasure, restriction, portability and objection under the GDPR. Contact: [email protected]. You may lodge a complaint with a supervisory authority; for Cyprus, this is the Commissioner for Personal Data Protection.

7. YouTube API Services

EA Verdict uses the YouTube API Services for one purpose: to upload short videos about our own audits to our own YouTube channel (@eaverdict) and to read that channel's aggregate view, like and comment counts for internal reporting. Only EA Verdict authorizes this access, for its own channel. Visitors of this site and viewers of our videos never connect a Google or YouTube account to EA Verdict, and we do not access, collect, store or share YouTube or Google account data of anyone else.

• By watching or interacting with our videos on YouTube you are bound by the YouTube Terms of Service. Google processes data as described in the Google Privacy Policy.
• The only credential we keep is the authorization token for our own channel, stored outside this website. Channel statistics retrieved through the API are used for internal reports and are refreshed or deleted within 30 days.
• The authorization can be revoked at any time through the Google security settings; the stored token is then deleted. Questions: [email protected].