Privacy Policy

This Privacy Policy explains how SIA Baltic Signs (“Baltic Signs AI”, “we”, “us”) collects, uses and protects personal data when you visit balticsigns-ai.com or use our products — Rate Radar, AI Studio and AI Visibility. We are committed to processing personal data lawfully and transparently under the EU General Data Protection Regulation (GDPR) and Latvian data-protection law.

01Who we are

The data controller is SIA Baltic Signs, a company registered in Latvia, VAT LV40003824281, registered address 17 Patversmes Street, Rīga LV-1005, Latvia. For any privacy question or to exercise your rights, contact us at ip@signs.lv.

02What this policy covers

It covers personal data we process as a controller — visitors to our website and the staff at hotels and hotel groups who buy and use our products. When we process data on behalf of a client under their instructions (for example, hosting a client’s account), we act as a processor, and the client’s own privacy notice governs that data; the terms are set out in our client agreement.

03The data we collect

Website visitors

• Contact details you give us — your name, email address, hotel/company and the message you send when you email us or fill in an enquiry.
• Technical data — basic request information (such as IP address and browser type) processed by our hosting provider to deliver and secure the site, and limited error diagnostics to keep the site working.

Clients using our products

• Account data — the names and work email addresses of the users you authorise, and their role/permissions.
• Configuration data — the hotels, brands and target markets you ask us to monitor.
• AI Studio inputs — the photographs and brand assets you upload so we can produce your video. These may occasionally contain images of people; you are responsible for having the right to share them.
• Rate Radar & AI Visibility data — publicly observable market information (search results, published rates, AI-assistant answers about hotels) captured with a timestamp. This is generally not personal data, but we treat any incidental personal data with the same care.

04How and why we use it

• To respond to enquiries and set you up as a client — legal basis: steps taken at your request and our legitimate interest in answering you.
• To provide and support the products you subscribe to — legal basis: performance of a contract.
• To keep the service secure and reliable and to improve it — legal basis: legitimate interest.
• To send occasional service or product updates — legal basis: legitimate interest or, where required, your consent, which you can withdraw at any time.
• To meet legal, accounting and tax obligations — legal basis: legal obligation.

05Hosting, processors & transfers

Our infrastructure and client data are hosted on servers located in the European Union. We use a limited set of vetted service providers (“processors”) who act only on our instructions — for example cloud hosting, database, email and video/AI processing providers. A current list is available on request at ip@signs.lv.

Some product features rely on third-party AI providers that may process data outside the EU/EEA (for example, generating video or querying AI assistants). Where that happens, we rely on appropriate safeguards such as the European Commission’s Regulations, Directives and Standard Contractual Clauses, as well as the legislation of the Republic of Latvia.

06Cookies & analytics

The public marketing site uses no advertising or tracking cookies. It loads fonts from Google Fonts, which means your browser contacts Google to fetch them. Our applications use only the strictly necessary cookies required to keep you signed in.

07How long we keep it

We keep personal data only as long as needed for the purpose it was collected: enquiry correspondence; source files, client account and configuration data for the life of the contract and a short period afterwards; and records we must keep for legal or accounting reasons for the period required by the laws of the Republic of Latvia.

08Your rights

Under the GDPR you have the right to access your data, to correct or erase it, to restrict or object to processing, and to data portability. Where processing is based on consent, you can withdraw it at any time. To exercise any right, email ip@signs.lv and we will respond within one month.

If you are not satisfied, you may lodge a complaint with the Latvian supervisory authority, the Data State Inspectorate (Datu valsts inspekcija) — dvi.gov.lv.

09Security

We apply appropriate technical and organisational measures — including access controls, encryption in transit, per-client data isolation and least-privilege access — to protect personal data against loss, misuse or unauthorised access.

10Children

Our products are business tools for hotels and are not directed at children. We do not knowingly collect personal data from anyone under 16.

11Changes to this policy

We may update this policy from time to time. The “last updated” date at the top shows the current version; material changes will be communicated to active clients.