Effective 11 August 2026

Privacy notice

Makru consultancy, operating Pair-Vera, is the controller for the personal data described here. Contact: [email protected].

1. Data we process

• Account and security: pseudonymous account identifiers, hashed session and CSRF credentials, and security audit events. Google sign-in verifies an identity and derives a stable pseudonymous Pair-Vera account; Pair-Vera does not persist the Google email address or Google subject identifier.
• Compatibility service: product identifiers, selected country, saved devices and setups, result history, corrections and evidence interactions you request.
• Payments: provider customer and transaction references, orders, entitlements, refunds, disputes and accounting records. Stripe hosts payment collection; Pair-Vera does not store payment-card data.
• Support and rights: case content, correction requests and privacy requests.
• Optional measurement: consent state and bounded pseudonymous events. Optional analytics remains off until you choose it.

2. Why we process it

We use data to provide requested and paid services, authenticate and secure accounts, prevent abuse, maintain evidence and corrections, fulfil support and consumer remedies, reconcile payments, comply with legal and accounting duties, and—only with consent—measure and improve the service. The applicable bases are contract or pre-contract steps, legal obligations, legitimate interests in security and service integrity, and consent for optional analytics.

3. Providers and transfers

We use Hetzner for EU infrastructure and backups, Cloudflare for DNS, TLS edge and security, Stripe for hosted payments and related payment services, Google Identity as an independent provider when you voluntarily use Google sign-in, and Google Analytics only after analytics consent. Google sign-in uses only OpenID and email verification; Pair-Vera stores neither the Google email nor Google subject. A provider may process data outside the EEA under its applicable data-processing and transfer safeguards. We disclose only what the relevant purpose requires.

4. Retention

Raw screenshots or uploads target deletion after 6 hours and have a 24-hour hard maximum unless an explicit forensic or legal hold applies. Extracted product identifiers and claims follow their purpose, evidence version and source-rights lifecycle. Optional analytics is retained for at most 90 days. Account, support, payment and accounting records follow the account, case, legal and accounting schedules that apply; Pair-Vera does not retain recoverable personal data merely to defeat a valid erasure.

5. Your choices and rights

You can change optional analytics through Privacy settings. Depending on applicable law, you may request access, correction, deletion, restriction, portability or objection, and withdraw consent without affecting earlier lawful processing. We verify identity proportionately before disclosing or changing account data. Contact support to exercise a right or complain; you may also complain to your competent supervisory authority.

6. Security and decisions

Pair-Vera uses encrypted transport, hashed credentials, session rotation and revocation, tenant isolation, least privilege, audit controls and tested recovery. Compatibility verdicts concern products and do not make legal or similarly significant decisions about people.

7. Changes

We update this notice when processing, providers or legal requirements materially change and show the effective version on this page.