Privacy terms for your subscription and billing data.
How J&L Serverid OÜ handles your data in SubHorizon: what we collect, who processes it, how long we keep it, and your rights.
Short version
J&L Serverid OÜ runs SubHorizon and is responsible for your data. We use it to run and improve SubHorizon, we do not sell it, and you can ask us to see, correct or delete it.
1. Who we are
- Company: J&L Serverid OÜ
- Registry code: 11478495
- Address: Haaviku tee 9, 61702 Külitse alevik, Kambja vald, Estonia
- VAT number: EE101657514
- Email: support [at] subhorizon.app
2. What we collect and why
- Account details: your name, email address and login details, so you can use your account and get account emails.
- Subscriptions you add: names, prices, renewal dates and notes, so we can show your costs and remind you before renewals.
- Payments: Stripe takes the payment and your billing address for VAT. We never see your full card number.
- Text you send to AI features: what you type or paste into the AI assistant or AI import, so the AI can answer.
- Website use, if you accept analytics cookies: pages visited, browser and device type, and an approximate location from your IP address, so we can see how the site is used.
Legal bases: account, subscriptions, payments and AI features – contract (GDPR Art. 6(1)(b)); invoices – legal obligation (Art. 6(1)(c)); analytics – your consent (Art. 6(1)(a)), which you can withdraw at any time; security – legitimate interest (Art. 6(1)(f)).
3. Who processes your data
We share your data only with these providers, to run SubHorizon, and when the law requires it:
- Hosting in Germany (EU): stores your account and subscription data.
- Stripe (Ireland and USA): payments, invoices and VAT.
- OpenRouter (USA): passes the text you send to the AI assistant or AI import to an AI model provider and returns the answer.
- Resend (USA): sends account emails and renewal reminders.
- Google Analytics (USA) and PostHog (EU): website usage statistics.
Providers in the USA may process your data there under an adequacy decision (including the EU–US Data Privacy Framework) or standard contractual clauses.
We use appropriate technical and organisational measures to protect personal data.
4. How long we keep it
- Account and subscription data: while your account is open.
- When you delete your account in Settings, we delete or anonymize your personal data.
- Sign-ups never confirmed by email: deleted after 7 days.
- Email and payment logs: 30 to 60 days.
- Invoices and payment records: 7 years, as Estonian accounting law requires.
5. Your rights
You can ask us for a copy of your data, and ask us to correct, delete or restrict it, move it to another service, or stop using it. You can export your data and delete your account in Settings, or email us at support [at] subhorizon.app.
If you think we handle your data unlawfully, you can complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee).
6. Cookies
We use a cookie to keep you signed in. Google Analytics and PostHog use cookies to count visits, and they load only after you accept them in the cookie banner. You can change your choice at any time with Cookie settings at the bottom of the page.