Legal

Privacy Policy

How SIA "Tech Dev Baltic" handles personal data for Dom-shot and getdomshot.com. We sell a desktop tool, not your data — this page explains exactly what we hold and why.

Last updated: 10 August 2026

1Who we are

The data controller responsible for your personal data is:

We are established in Latvia, so this policy is written to meet the EU General Data Protection Regulation (GDPR) and Latvian data protection law. We have not appointed a Data Protection Officer, as we are not required to — write to the address above and your request will reach the people who can act on it.

2What we collect and why

We only collect personal data when you give it to us, plus minimal technical data needed to serve and protect the website.

We do not use personal data to build advertising profiles, and we do not carry out automated decision-making or profiling that produces legal effects for you.

3What the Dom-shot application does not collect

This deserves its own section, because it is the part people most often assume works the other way.

Specifically, the following never leave your machine or your network:

• The dashboard URLs you configure
• The screenshots Dom-shot captures
• Any credentials, cookies or browser session data used to log in to your dashboards
• Your configuration file and output folders
• Any record of when, how often, or whether you run the software

Your license file is validated offline, on your machine, using a cryptographic signature. There is no activation server to call and no licence check that requires an internet connection.

If we ever introduce optional product telemetry, it will be off by default, it will ask for your explicit consent first, and this policy will be updated before it ships.

4Who we share data with

We do not sell, rent or trade personal data. We share it only with the service providers we need in order to run the business, and only to the extent required:

We may also disclose personal data where we are legally required to — for example to tax authorities, or in response to a valid order from a competent authority.

5International transfers

Some of the providers above are based in the United States. Where personal data is transferred outside the European Economic Area, that transfer is protected by the safeguards permitted under Chapter V of the GDPR — in practice the European Commission's Standard Contractual Clauses and, where the provider is certified, the EU–US Data Privacy Framework. You can ask us for details of the safeguards applying to a specific provider.

6How long we keep it

• Trial enquiries that do not convert — up to 24 months from your request, then deleted.
• Customer records — for as long as your license is active and for 24 months afterwards, so we can help you with renewals and support history.
• Invoices and accounting records — 5 years, as required by Latvian accounting law. We cannot delete these earlier, even on request.
• Maintenance notification signups — deleted once the notification has been sent, or when you withdraw consent.
• Support correspondence — up to 24 months after the issue is closed.
• Server and security logs — retained by Cloudflare for a short period under their standard retention, typically days rather than months.

7Cookies and analytics

This site loads no third-party analytics script. There is no Google Analytics, no advertising pixel, no session recorder and no A/B testing tool. The only measurement we do is our own counting, described below, and it runs on our own servers.

We count the steps of our own sign-up funnel so we can tell whether the site is doing its job — for example, how many people who click "Start free trial" actually receive a license. There are eight events in total. Three are sent by your browser:

• Trial button clicked — you click any "Start free trial" button
• Trial form opened — the trial form actually appears on screen
• Buy button clicked — you click the "Buy license" button

The other five are recorded by our server when it does the work itself, never by your browser:

• Trial requested — you submit the trial form and it passes validation
• Trial license sent — your trial license email is accepted for delivery
• Download served — the application ZIP is downloaded
• Purchase completed — a Stripe checkout for Dom-shot completes
• Commercial license sent — your paid license email is accepted for delivery

Every one of those events stores exactly four things, and nothing else:

1. the name of the event, from the list above;
2. the page path it happened on — the query string is stripped, so /pricing?email=you@example.com is stored as /pricing;
3. where the event came from. For anything that happens in your browser this is the domain that referred you, such as google.com — never the full link, so a search term or a token in the referring URL is never stored. For the two events our own server records after a payment ("Purchase completed" and "Commercial license sent") there is no browser involved and nothing to refer you, so this field is instead the fixed word stripe, naming our payment provider as the source of the event. It is the same word on every such event and says nothing about you; and
4. the two-letter country code your request came from, as reported by Cloudflare.

That is the whole payload. There is no cookie, no device fingerprint, no identifier, no IP address, no email address and no license id, and nothing that lets us connect one event to another or to you — two visits from the same person are indistinguishable from two different people. We keep these as counts, not as a history.

We may in future add Cloudflare Web Analytics for page-view counts. It is cookieless and does not fingerprint your device or track you across other sites — but it is not running today, and we will update this page before it is.

When you open the Stripe checkout to pay, you are on Stripe's own domain, and Stripe sets its own cookies there under its own privacy policy. That is outside our control.

A note on web fonts

Our pages currently load the Inter typeface from Google Fonts. This means your browser makes a request to Google's servers, and your IP address and browser details are visible to Google as part of that request. We are disclosing this because we would rather tell you than not, and we intend to serve the font from our own domain to remove the third-party request entirely.

8Your rights

Under the GDPR you have the right to:

• Access — ask for a copy of the personal data we hold about you.
• Rectification — have inaccurate data corrected.
• Erasure — ask us to delete your data, where we have no overriding legal duty to keep it.
• Restriction — ask us to pause processing while a dispute is resolved.
• Portability — receive the data you gave us in a machine-readable format.
• Objection — object to processing we base on legitimate interests.
• Withdraw consent — where we rely on consent, withdraw it at any time, without affecting processing already carried out.

Email support@techdevbaltic.lv to exercise any of these. We will respond within one month. We do not charge for this, and we will not ask you to justify the request.

If you believe we have handled your data improperly, you may complain to the Latvian supervisory authority, the Data State Inspectorate (Datu valsts inspekcija), www.dvi.gov.lv, or to the supervisory authority in your own EU country of residence. We would appreciate the chance to put it right first.

9Security

All traffic to getdomshot.com is encrypted in transit with TLS. License signing keys and API credentials are held as encrypted secrets and are not present in our source code. Access to customer records is limited to people who need it to run the business. Payment card data never reaches our systems at all.

No system is perfectly secure. If you believe you have found a vulnerability in Dom-shot or this website, please report it to support@techdevbaltic.lv — we will take it seriously and will not pursue researchers who act in good faith.

10Changes to this policy

If we change how we handle personal data, we will update this page and change the "last updated" date at the top. Where a change materially affects you — for example a new category of data or a new purpose — we will tell active customers by email before it takes effect.

11Contact us

Questions about this policy, or about your data, go to support@techdevbaltic.lv, or by post to SIA "Tech Dev Baltic", Gaileņu iela 6–1, Rīga, LV-1023, Latvia. A real person reads it.