1. Who We Are
The mAIndware website and mAIndware software products are operated by SIA Baltic Supply Hub, Registration No. 40203720296, VAT No. LV40203720296, Brīvības iela 168-8, Rīga, LV-1012, Latvia. Contact: [email protected].
SIA Baltic Supply Hub is the data controller for personal data processed through the mAIndware website and our direct communications with customers.
2. Information We May Collect
When you visit our website, our hosting infrastructure may process technical information such as IP address, browser and device information, request dates and times, requested pages and files, and technical or security logs.
If you contact support, we may process information you provide, including your name, email address, company name, CS-Cart version, mAIndware product/version, screenshots, error messages and other information necessary to investigate your request.
Do not send us passwords, OpenAI API keys, payment card information or other secret credentials.
3. mAIndware Software and Store Data
mAIndware products may operate inside the customer's own CS-Cart environment. The customer remains responsible for data stored and processed in their CS-Cart installation and for configuring the software appropriately.
Installing a mAIndware add-on does not by itself give SIA Baltic Supply Hub unrestricted access to the customer's CS-Cart store, administration panel, customer database or other store data. If access is required for a specific support case, it will be arranged separately and should be limited to what is necessary to resolve the issue.
4. OpenAI Account and API Key
Some mAIndware products provide functionality that can use the OpenAI API. mAIndware uses a Bring Your Own Key (BYOK) approach.
- The customer creates and manages their own OpenAI account.
- The customer obtains and configures their own OpenAI API key.
- The customer is responsible for their OpenAI account, API usage and related charges.
- OpenAI API charges are separate from the mAIndware software licence.
- SIA Baltic Supply Hub does not sell OpenAI API access, issue API keys or manage the customer's OpenAI account.
mAIndware documentation may provide instructions or links explaining how to obtain and configure OpenAI API access. The customer's relationship with OpenAI is governed by the terms and privacy policies applicable to the customer's OpenAI account.
Never send your OpenAI API key to mAIndware support.
5. Purchases Through CS-Cart Marketplace
Where a mAIndware product is purchased through the CS-Cart Marketplace, information relating to the Marketplace account, checkout and payment may be processed by the Marketplace operator and its payment providers under their own terms and privacy policies.
SIA Baltic Supply Hub does not receive or store a customer's full payment card details merely because a product is purchased through the CS-Cart Marketplace. We may receive information reasonably necessary to identify a purchase, licence, customer or support entitlement.
6. Why We Process Personal Data
Where applicable, we process personal data to operate and secure the website, respond to support requests, provide purchased software and related services, manage licences and updates, diagnose technical problems, prevent abuse, comply with legal obligations, and establish or defend legal claims.
Under the GDPR, processing may be based on performance of a contract, compliance with a legal obligation, our legitimate interests, or consent where consent is required.
9. International Data Transfers
Some third-party services may process data outside Latvia or the European Economic Area. Where SIA Baltic Supply Hub is responsible for such a transfer, we take reasonable steps to use an appropriate legal mechanism or safeguard where required. Services independently configured by the customer, including the customer's own OpenAI account, are subject to the arrangements between the customer and that provider.
10. Data Retention
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected or where retention is required by law. Support correspondence may be retained while relevant to support, maintenance, security or dispute resolution. Accounting records are retained for legally required periods, and technical/security logs may be retained for a reasonable period for troubleshooting and abuse prevention.
11. Data Security
We use reasonable technical and organisational measures intended to protect personal information against unauthorized access, loss, misuse, alteration or disclosure. No internet-based system can guarantee absolute security. Customers are responsible for protecting their own CS-Cart environment, administrator accounts, passwords and third-party API credentials.
12. Your Rights
If the GDPR or other applicable data-protection law applies to you, you may have rights to access, correct or delete personal data, restrict or object to processing, request portability where applicable, withdraw consent where processing is based on consent, and lodge a complaint with a competent supervisory authority.
To make a privacy request, contact [email protected]. We may need to verify your identity before fulfilling certain requests.
13. Third-Party Websites and Services
Our website and documentation may link to third-party websites and services, including OpenAI and CS-Cart. These third parties operate under their own terms and privacy policies. A link does not mean that SIA Baltic Supply Hub controls their privacy practices.
14. Changes to This Privacy Policy
We may update this Privacy Policy when our website, products, services or legal obligations change. The current version will be published on the mAIndware website and the “Last updated” date will show when it was most recently revised.
15. Contact
Registration No.: 40203720296
VAT No.: LV40203720296
Brīvības iela 168-8
Rīga, LV-1012, Latvia
Email: [email protected]