Privacy Policy

1. Overview

Expected 11 OÜ (Expected 11, we, us, or our) is based in Tallinn, Estonia. This Privacy Policy applies to information we collect through our website, applications, account systems, communications, and related services (collectively, the Services).

By accessing or using the Services, you acknowledge that your information may be processed as described in this Privacy Policy. If you do not agree, please do not use the Services.

2. Scope

This Privacy Policy applies only to information collected through the Services or directly from you in connection with the Services. It does not apply to third-party services, websites, or platforms that we do not control, even if we link to them or integrate with them.

3. Information We Collect

Depending on how you interact with the Services, we may collect:

• Account data: username, email address, sign-in provider details, and profile information such as display name, avatar, or account preferences.
• Authentication and security data: login events, device/browser metadata, IP address, security logs, and fraud-prevention signals.
• Subscription and billing data: plan selections, subscription status, invoices, transaction metadata, and customer identifiers from payment providers. We do not store full payment card numbers ourselves.
• Usage data: pages viewed, features used, interactions with gated content, resource-consumption events, and diagnostic telemetry.
• Communications: emails, support requests, feedback, survey responses, and other messages you send to us.
• Technical data: device identifiers, browser type, operating system, locale, referrer data, timestamps, and crash or performance logs.
• Cookie and preference data: session tokens, theme preferences, consent signals, and similar identifiers used for security and site functionality.

4. Sources of Information

We collect information:

• directly from you when you register, authenticate, subscribe, contact us, or otherwise interact with the Services;
• automatically when you browse or use the Services;
• from identity, payment, analytics, hosting, customer-support, and anti-fraud providers that help us operate the Services; and
• from lawful business transfers, reorganizations, or corporate diligence processes where applicable.

5. How We Use Your Information

We use personal information to:

• provide, secure, maintain, and improve the Services;
• authenticate users, prevent abuse, enforce usage rules, and protect accounts;
• manage subscriptions, billing, account entitlements, and customer support;
• operate free-usage limits, gated resources, and account-based access controls;
• analyze product usage, diagnose technical issues, and improve performance and reliability;
• communicate with you about service updates, legal notices, security issues, and support matters;
• send marketing or product communications where permitted by law and subject to your choices; and
• comply with legal obligations, resolve disputes, and enforce our Terms of Service.

6. Legal Bases for Processing (EEA, UK, and Similar Jurisdictions)

Where required by applicable law, we rely on one or more of the following legal bases: performance of a contract (for example, to provide account access and subscriptions), legitimate interests (including service security, abuse prevention, analytics, and product improvement), compliance with legal obligations, and your consent where required (for example, certain optional communications or non-essential cookie usage).

7. Cookies and Similar Technologies

We use cookies and similar technologies to keep you signed in, maintain sessions, remember preferences, secure the Services, understand how the Services are used, and improve performance. You can control cookies through your browser or device settings, but disabling certain cookies may affect site functionality.

8. Analytics, Logs, and Security Monitoring

We automatically collect operational and security logs, including IP address, request metadata, device/browser information, error traces, and timestamps. We use this information to investigate incidents, monitor abuse, improve performance, and maintain the security and integrity of the Services.

9. How We Share Information

We do not sell your personal information. We may share information with service providers and processors that help us operate the Services, including identity providers, payment processors, hosting providers, analytics vendors, customer-support tools, and fraud-prevention or security services.

We may also disclose information where necessary to comply with law, respond to lawful requests, protect our rights or users, investigate abuse, enforce our Terms, or as part of a merger, acquisition, restructuring, financing, or sale of assets.

10. International Transfers

We and our service providers may process information in countries other than your own. Where required, we take reasonable steps to ensure that personal data transferred internationally receives an adequate level of protection under applicable law, including through contractual safeguards or similar legal mechanisms.

11. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, update, delete, restrict, or object to certain processing of your personal information, and to request portability of your data. You may also have the right to withdraw consent where processing is based on consent, without affecting prior lawful processing.

You may have additional rights under laws such as the GDPR, UK GDPR, or applicable U.S. state privacy laws. We may need to verify your identity before fulfilling a request.

12. Your Choices

You can update certain account details through your account settings, manage your authentication methods, and control some communication preferences using unsubscribe links or by contacting us. You may also request account deletion, subject to retention requirements described below.

13. Data Retention

We retain personal information for as long as reasonably necessary to provide the Services, comply with legal obligations, resolve disputes, prevent abuse, enforce agreements, maintain financial or tax records, and support legitimate business needs. When retention is no longer required, we delete, anonymize, or de-identify information where reasonably practicable.

14. Data Security

We use technical and organizational measures designed to protect personal information against unauthorized access, loss, misuse, or alteration. However, no internet-based service can be guaranteed to be completely secure, and you use the Services at your own risk.

15. Children’s Privacy

The Services are not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided personal information to us, contact us and we will take reasonable steps to delete it where required.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the Last updated date and may provide additional notice where appropriate. Continued use of the Services after the updated policy becomes effective constitutes acceptance of the revised policy.

17. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us at admin@expected11.com.

Expected 11 OÜ · Tallinn · Estonia