Privacy Policy

1. Who is responsible for your data

Rastanex is a trading name of UAB Snaigex, Pylimo g. 61, Vilnius, Lithuania. For our website, marketing and client accounts we act as the data controller. Privacy questions and requests go to Info@rastanex.com.

When we run AI agents and automations for a client, we process the end customers' data on that client's instructions — the client is the controller and we are a processor. If you were contacted by an agent we operate and want your data removed, contact the business you were dealing with; you can also write to us and we will pass the request on.

2. Data we collect

Website visitors

• Contact details you submit through forms or audit requests: name, company, email, phone, and what you write to us.
• Technical data: IP address, browser and device type, pages viewed, referring page, and approximate location derived from IP.

Client accounts

• Account identity data: email address, hashed password credentials, sign-in timestamps and session data.
• Billing and engagement details needed to invoice and support you.

AI agent services (processed for our clients)

• Call metadata, recordings and transcripts where the client has enabled them.
• Message content across SMS, email, WhatsApp, Telegram and Teams conversations handled by an agent.
• Contact and CRM records, bookings, quotes, proposals and signature records synced through the workflows we build.

3. Why we use it, and our legal basis

• Contract — to deliver the services, run your account, provide support and invoice you.
• Legitimate interests — to secure our systems, prevent abuse, understand how the site is used and improve our services, and to respond to business enquiries you send us.
• Consent — for non-essential cookies and analytics, and for marketing emails where consent is required. You can withdraw consent at any time.
• Legal obligation — to meet accounting, tax and other statutory duties.

We do not sell personal data, and we do not use client or end-customer data to train publicly available AI models.

4. Cookies and analytics

We use strictly necessary cookies to keep the site working and to hold your signed-in session. These are required and cannot be switched off.

Where analytics or performance cookies are used, they help us count visits and see which pages are useful. They are set only on the basis described above, and you can clear or block cookies in your browser settings at any time — some parts of the client area may then stop working.

5. Who we share data with

We share data with service providers who help us run the platform. Each is bound by a contract that limits them to processing data on our instructions.

The exact providers used in your setup depend on the channels and tools your engagement includes. We can supply an engagement-specific list on request, and we give notice before adding a new subprocessor that handles client data.

We may also disclose data where the law requires it, or to protect our rights, users and systems.

6. International transfers

Some providers process data outside the European Economic Area. Where that happens, transfers rely on an adequacy decision or on the European Commission's Standard Contractual Clauses together with additional safeguards.

7. How long we keep it

• Enquiry and audit-request data: up to 24 months after our last contact.
• Client account and engagement records: for the life of the engagement, then as required for accounting and tax purposes.
• Call recordings, transcripts and conversation logs: for the retention period the client sets for their workspace; deleted or returned on request at the end of the engagement.

8. Security

Data is stored in access-controlled infrastructure with encryption in transit, role-based access limited to staff who need it, and row-level access rules on client records. Access credentials and API keys are held in managed secret storage. No system is perfectly secure, so we also monitor for unusual activity and will notify affected parties and regulators where the law requires it.

9. Your rights

Under the GDPR you can ask us to:

• Access a copy of the personal data we hold about you.
• Correct data that is inaccurate or incomplete.
• Delete data where we no longer have grounds to keep it.
• Restrict or object to certain processing, including direct marketing.
• Receive your data in a portable, machine-readable format.
• Withdraw consent at any time, without affecting processing already carried out.

Write to Info@rastanex.com and we will respond within one month. You also have the right to complain to your local data protection supervisory authority.

10. Changes to this policy

We update this policy when our services or providers change. The date at the top of the page shows the current version, and we notify active clients of material changes by email or through the client dashboard.

This page is maintained by UAB Snaigex to answer common privacy questions about Rastanex. It describes our own practices and is not an independent certification or audit result.