Privacy Policy

Lesno (lesno.host) is operated by Easy Pie Digital Ltd, a Bulgarian company specializing in software development and professional business services. We operate in full compliance with applicable personal data protection legislation, including GDPR (Regulation (EU) 2016/679), and employ technical and organizational security measures tailored to our activities. This policy explains what data we collect when you use Lesno, why, and what rights you have.

What we collect

• Account data — your name, email address and sign-in identifiers, managed through our authentication provider.
• Estimate request data — your name, email address, website address, and any note you send when asking us to review your site.
• Billing data — handled by our payment provider, Stripe. We receive payment status, invoices and tax details; we never store full card numbers.
• Your website — the content and design of the website you ask us to rebuild, the rebuilt source code, and related assets.
• Edit requests — the instructions you submit, associated screenshots, and the previews and change history they produce.
• Usage data — server logs, IP addresses and session information needed to run and secure the Platform.
• Correspondence — messages you send us, such as support email.

Why we process it — legal grounds

• To review your website, respond to your request, and prepare an offer before you decide whether to become a customer (steps taken at your request before entering a contract, Art. 6(1)(b) GDPR).
• To provide the services you signed up for — migrations, hosting, and edits (performance of a contract, Art. 6(1)(b) GDPR).
• To bill you and meet accounting and tax obligations (legal obligation, Art. 6(1)(c) GDPR).
• To secure the Platform, prevent abuse, and improve the service — including calibrating the estimates we quote you (legitimate interest, Art. 6(1)(f) GDPR).
• For anything beyond the above, such as marketing communications, only with your consent (Art. 6(1)(a) GDPR), which you may withdraw at any time.

Who processes it for us

We do not sell your data. We share it only with the service providers we rely on to run Lesno, each bound by a data processing agreement:

• Clerk — accounts and sign-in
• Stripe — payments, invoicing and VAT
• Neon — our database
• Vercel — hosting of the Platform and of the websites we build
• Cloudflare — networking and storage
• GitHub — private source-code repositories for your website
• Anthropic — AI processing of edit requests
• Resend — transactional email

When you submit an edit request, your instruction and the relevant parts of your website’s code are processed by our AI provider to perform the change. Our agreement with the provider does not permit your data to be used to train their models.

We may also disclose data where the law requires it.

Transfers outside the EU

Some of the providers above are based in the United States. Where personal data leaves the EU, we rely on recognized safeguards — the EU–U.S. Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses — so that your data receives the same protection as in the EU.

How long we keep it

• Estimate request data — while we review and respond to your request, and normally for up to 12 months afterwards unless you ask us to delete it sooner.
• Account and billing data — for as long as your account exists, and thereafter for the statutory retention periods that apply to accounting documents.
• Your website’s code and edit history — for as long as we provide the services, and for a reasonable period after termination so you can export them.
• Server logs — for short, rolling periods needed for security and diagnostics.

Your rights

As a data subject you have the right to:

• access the personal data we hold about you, and correct or update it
• request erasure of your personal data
• restrict or object to processing
• data portability
• withdraw consent at any time, for processing based on consent
• lodge a complaint with the Bulgarian Commission for Personal Data Protection or your local supervisory authority

You may exercise these rights by emailing hello@easypiedigital.com with your name, contact details that help us identify you, and a description of your request.

Visitors of the websites we host

For websites we rebuild and host on behalf of our customers, the customer — the website’s owner — is the data controller for their visitors’ data. We host the website and keep technical server logs as a processor on the owner’s behalf. If you are a visitor of such a website, please direct privacy inquiries to the website’s owner.

Cookies

lesno.host itself uses only essential cookies — those required to sign you in and keep your session secure. We set no advertising or cross-site tracking cookies. Websites owned by our customers may use analytics or marketing tags that their owners choose; those are governed by the owners’ own policies.

Data administrator details

Easy Pie Digital Ltd, UIC 206081317
Address: Solun 64B Str., 1680 Sofia, Bulgaria
Contact email: hello@easypiedigital.com

Policy updates

This policy is subject to updates, which will be reflected on this page. Changes will be made where necessary for our legitimate interests, ensuring your fundamental rights are not compromised.