Legal
Privacy policy
This page says which personal data the GoProject website processes, for what, for how long, who sees it and what you can ask of us. It is written from what the site actually does.
Last updated: 7 October 2026
Who is responsible
The controller of the personal data processed through https://goproject.lv is LTECH, SIA, registration number 40003826013, Ieriku street 3-201, Riga, LV-1084, Latvia.
Questions and requests about personal data go to [email protected]. We answer within a month.
What this policy covers
The public website, the customer portal under /account and the forms on the site. What the site keeps in your browser is described separately in the cookie policy.
It does not cover a GoProject installation on the servers of your organisation. The data in it belongs to your organisation, which is the controller of it; we have no access to it.
When we process your data
Each situation below says what we take, why, on which legal basis under the GDPR, and for how long.
Reading the site
- What
- The address of your device (IP address), the browser you use, the page you ask for and the time, as every web server receives them.
- Why
- To deliver the pages and to protect the site against overload and abuse: too many requests from one address in a short time are refused.
- Legal basis
- Legitimate interest in running a working and secure website (Article 6(1)(f)).
- How long
- The site itself stores none of it; the counters against abuse live in memory for minutes. The server that hosts the site keeps its request log for security for a limited time.
Visit statistics
- What
- Only after you have pressed "I agree" in the notice: the address of the page, campaign marks (utm), the website you came from, the browser, operating system and language, the country and city worked out from a shortened IP address, and the steps towards a request such as a sent form. Never what you typed into a form, and never the full IP address.
- Why
- To know which pages are read, where visitors come from and which pages lead to a demo request.
- Legal basis
- Your consent (Article 6(1)(a)), which you can withdraw at any time on the cookie policy page.
- How long
- Records are removed after 24 months; the tool, Umami, runs on our own server and nothing is passed on.
A demo request
- What
- Your name, e-mail address, company, role, the package you chose, the tool you use today, your message and the language of the page.
- Why
- To arrange and hold the demo and to answer your questions about the product.
- Legal basis
- Steps at your request before a possible contract (Article 6(1)(b)).
- How long
- 12 months after the last exchange about the request, unless a contract follows; then for as long as the contract and the accounting law require.
A contact message
- What
- Your name, e-mail address, company if you gave one, the topic, your message and the language of the page.
- Why
- To answer you.
- Legal basis
- Legitimate interest in answering the people who write to us (Article 6(1)(f)), or steps at your request before a contract (Article 6(1)(b)).
- How long
- 12 months after the last exchange about the message.
A customer portal account
- What
- Your name, e-mail address, password (stored only as a hash), language, and the organisation you register: its name, country, registration and VAT numbers, phone. Then the licence requests, trials and licences of the organisation, the reports a GoProject installation sends in when its owner registers it (installation id, licence, seats in use, time), and a log of the actions in the account: who did what and when.
- Why
- To run the account, issue and renew licences, invoice, remind you before a licence ends, and show the organisation what it has.
- Legal basis
- The contract with your organisation (Article 6(1)(b)) and the accounting law (Article 6(1)(c)); the log of actions out of legitimate interest in traceable licensing (Article 6(1)(f)).
- How long
- For as long as the organisation has an account, and 12 months after its last licence ended; invoicing records for as long as the accounting law requires.
A conversation on WhatsApp
- What
- Your phone number, the name and picture of your WhatsApp profile, and the messages you send.
- Why
- To answer you.
- Legal basis
- Legitimate interest in answering the people who write to us (Article 6(1)(f)), or steps at your request before a contract (Article 6(1)(b)).
- How long
- The conversation stays in the WhatsApp account of the LTECH team that answers; we delete it 12 months after the last message.
E-mail we send
- What
- Your e-mail address and the content of the message: confirmation of the account, a password reset link, licence keys, reminders before a licence ends.
- Why
- To run the account and the licences; no newsletters and no advertising.
- Legal basis
- The contract with your organisation (Article 6(1)(b)).
- How long
- Sent mail is not kept by the site; your mail provider keeps your copy.
Who receives the data
We do not sell data, show no advertising and build no profiles. The data reaches:
- 1LTECH staff who handle sales, licensing and support, through the admin panel of the site, each with a second sign-in factor.
- 2Discord Inc. (United States): when a demo request, a contact message or a portal registration arrives, the site posts a notification with its content to a private LTECH channel on Discord, so the team sees it at once. Discord takes part in the EU-U.S. Data Privacy Framework and the transfer rests on it. The notification is a copy; the record itself stays on our server.
- 3The hosting provider that runs the server of the site, in the European Union, as a processor under contract.
- 4The mail server through which the site sends its e-mail.
- 5Public authorities, only where the law obliges us.
- 6WhatsApp Ireland Limited (Meta group): a conversation you start with the WhatsApp button runs through WhatsApp under its own terms and privacy policy. The site sends nothing to WhatsApp; the button only opens the app.
How the data is protected
The site is served over TLS only; secrets such as webhook addresses and mail passwords are stored encrypted; staff sign in with a password and a second factor; customers see only their own organisation; passwords are stored as hashes and never sent by e-mail.
Forms are protected against automated submission by a check that runs in your browser, and against flooding by limits per address. Access to the data is limited to the people named above.
Your rights
Under the GDPR you can ask us at any time:
- to see the personal data we hold about you (access);
- to correct data that is wrong or incomplete (rectification);
- to have data erased when there is no longer a reason to keep it (erasure);
- to limit how we use it while a question is settled (restriction);
- to receive the data you gave us in a common file format (portability);
- to object to processing based on legitimate interest (objection).
Consent to the visit statistics you withdraw on the cookie policy page; it does not affect what was counted before. A withdrawal, like any request above, costs nothing; write to [email protected]. We make no decisions about you by automated means.
If you think we handle your data wrongly, you can complain to the supervisory authority: Datu valsts inspekcija, Elijas iela 17, Rīga, LV-1050, Latvija, www.dvi.gov.lv.
Changes
When what the site does with personal data changes, we update this page and the date at its top. Earlier versions are available on request.
This policy applies from 7 October 2026.