Privacy Policy
1. Controller
IQRIC Systems OÜ, Harju maakond, Kuusalu vald, Pudisoo küla, Männimäe/1, 74626, Estonia
Email: customersupport@iqric.com
2. Data we process
In connection with a purchase we store:
- the user's email address
- payment information, to the extent processed and transmitted by Mollie
Independently of this we store the data described in sections 6 and 7: your cookie decision as proof of consent, and counts without any personal reference. Using this website does not require an email address.
3. Payment processing
Payments are handled by Mollie (Mollie B.V., Keizersgracht 126, 1015 CW Amsterdam, Netherlands). Personal data is transmitted directly to Mollie. Mollie's own privacy terms apply in addition to this policy.
4. Hosting and technical logs
Server log data (IP address, timestamp, browser type) may be processed for technical reasons in order to provide the application.
5. Cookies and tracking (Google Analytics)
This website uses Google Analytics for statistical analysis of usage. Cookies are used for this purpose. Processing takes place only with the user's consent (cookie banner). Legal basis: Art. 6(1)(a) GDPR.
6. Proof of your cookie decision
When you make a choice in the cookie banner, we store that decision on our server. We are legally required to be able to demonstrate that consent was given (Art. 7(1) in conjunction with Art. 5(2) GDPR). The legal basis for storing it is Art. 6(1)(c) GDPR.
We store only:
- a random identifier generated in your browser that is not linked to any person
- the version of the banner text shown to you
- your choice per category (necessary, analytics)
- whether you used the application in a browser or as an installed app
- the device class (iOS, Android, desktop) and the time of the decision
We store no IP address, no browser identification string (user agent), no email address and no name. The random identifier is created separately per browser and device and is not linked to your account, your orders or any other data.
Each decision is stored as its own entry, including a withdrawal. A withdrawal does not delete the earlier entry, because that would remove the very proof the storage exists for. You can change or reset your decision at any time under cookie settings; a reset is recorded as an entry as well.
Entries are deleted three years after the decision.
7. Usage counts without personal reference
We count how often the application is installed, opened for the first time and set up, and which campaign led to the visit. These counts contain no identifier that makes a user or a device recognisable and cannot be attributed to any person. What is transmitted is the occasion for the count, the time, the language, the channel and the host of the referring page. The legal basis is our legitimate interest in providing and improving the application (Art. 6(1)(f) GDPR).
8. Retention
Data is stored only for as long as required to perform the contract or as required by law.
9. Your rights
You have the right of access, rectification, erasure, restriction of processing and objection under the GDPR.
10. Right to lodge a complaint
You may lodge a complaint with a data protection supervisory authority.
11. Research and press contacts
We contact journalists, authors of specialist newsletters and podcast hosts about data points from the Boiling Frog Risk Score that may be relevant to their reporting. To do so, we process data about these individuals that we did not obtain from them directly.
- What we store: name, professional role and outlet, public channels, subject areas, publicly listed business contact details, and the history of any contact.
- Where it comes from: publicly accessible sources only — mastheads, channel and author pages, podcast directories, public registers. We do not guess addresses and do not access anything behind a login or paywall.
- Why: solely for editorial, subject-matter tips. We do not send advertising, partnership or affiliate requests through this channel.
- Legal basis: Art. 6(1)(f) GDPR — our legitimate interest in making our product known to relevant multipliers. The balancing test is documented.
- How long: 24 months without interaction, then deletion. If you object, we keep only a suppression record without any content, indefinitely, so that we do not contact you again.
- Sharing: none. This data is not passed to third parties and not published.
Right to object: you may object at any time under Art. 21 GDPR. An informal message to customersupport@iqric.com is enough — or simply replying to our email. We do not assess the objection; we act on it immediately and permanently.