Privacy notice
Draft of 13 October 2026 · TrueSmartTech OÜ, Estonia
This notice explains how TrueSmartTech OÜ (“we”) processes personal data when you visit this website, buy or try TIATool, and when the software checks its licence. The TIATool software itself runs on your computer, sends no telemetry and never sends us your project data.
1. Controller
TrueSmartTech OÜ, Estonia. Contact for privacy matters: hello@truesmarttech.com. Full company details: imprint.
2. What we process, and why
| Data | Purpose | Legal basis (GDPR) |
|---|---|---|
| Email, name, company, billing address | Selling and administering your subscription, invoices | Contract (Art. 6(1)(b)); legal obligation for accounting (Art. 6(1)(c)) |
| Licence key, hashed machine id, computer name, activation and refresh times | Activating licences and enforcing the machines-per-seat limit; showing your machines in your account | Contract (Art. 6(1)(b)) |
| A keyed hash of your IP address (never the address itself) with each licence activation, refresh, removal and sign-in link | Rate limits against abuse of the licence API and sign-in; the activity log in your account | Legitimate interest in security (Art. 6(1)(f)) |
| IP address, user agent and time of requests | Operating and securing the website and licence API | Legitimate interest in security (Art. 6(1)(f)) |
| Your emails to us | Answering support and sales questions | Contract or legitimate interest (Art. 6(1)(b), (f)) |
The machine id is a SHA-256 hash derived from the Windows machine GUID; we never receive the GUID itself. We do not process TIA Portal project data, and we do not use your data for advertising or profiling.
3. Your AI provider
When you connect TIATool to an AI client (for example Claude, Cursor or VS Code), that client sends the information your assistant reads to its AI provider. That processing happens between you and the provider under its terms; we are not involved and receive nothing.
4. Processors
We use these service providers, bound by data processing agreements:
| Provider | Purpose | Data |
|---|---|---|
| Vercel Inc. | Hosting of this website and the licence API | Request logs (IP address, user agent, time) |
| Neon Inc. | Database for accounts, licences and activations | Account, licence and activation records |
| Stripe Payments Europe Ltd. | Payments, subscriptions and invoices | Billing name, email, address and payment details |
| Unosend | Sending licence keys, sign-in links, receipts and account notices | Email address and message content |
Some providers are established or process data outside the EU/EEA. Such transfers rely on an adequacy decision (including the EU-U.S. Data Privacy Framework where the provider is certified) or on the European Commission’s standard contractual clauses.
5. Retention
- Account, licence and activation data: for the life of your subscription and up to 3 years after it ends, for support and claims. Deleting your account in its settings erases them at once.
- TIATool does not offer a trial. Records of a trial started earlier, if any, are deleted with the account.
- Sign-in links: deleted a day after they expire. Rate-limit counters: two days.
- Invoices and accounting records: 7 years, as required by the Estonian Accounting Act.
- Request logs: kept by the hosting provider for a short period, typically days to weeks.
6. Cookies
This website sets no analytics or advertising cookies. It sets two strictly necessary cookies, only on the sign-in, sign-up and account pages and their forms:
- tt_csrf: a random value set when you open one of those pages, kept 30 days. It protects the account forms against requests from other websites.
- tt_session: a signed value set when you sign in (30 days) or right after a checkout (24 hours). It keeps you signed in.
Stripe sets its own cookies on its checkout and billing pages.
7. Your rights
You have the right to access, rectify and erase your data, to restrict or object to processing, and to data portability. Write to hello@truesmarttech.com. You may also complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee) or the authority in your country.
8. Changes
We update this notice when our processing changes and show the date at the top.