Privacy Policy

Who we are

Pepi is operated by Nordic Bioconsult OÜ ("we", "us"), a company registered in Tallinn, Estonia. We are the data controller for the personal data described in this policy. You can reach us at the company address above.

What we collect

• Account data. Your email address and password (stored only as a secure hash) when you create a member account.
• Conversation data. The messages you send to Pepi, so the assistant can keep context and you can revisit your conversations.
• Payment data. Membership payments are handled by Stripe. We never see or store your full card details; we receive only a customer reference and subscription status.
• Technical data. A rough IP-based counter used only to rate-limit the public chat endpoints. It is not used to identify you and is not combined with other data.

Why we use it

To provide your account and membership, to operate the assistant, to prevent abuse of public endpoints, and to comply with law. We do not sell personal data and we do not use it for advertising.

Cookies

We only use strictly necessary cookies: a session cookie that keeps you signed in and cookies required for security. We use no advertising, analytics or tracking cookies.

Processors

We use trusted processors to run the service: our hosting and database provider, the AI service that powers the assistant, and Stripe for payments. Each processes data only on our instructions.

Retention and your rights

We keep account and conversation data for as long as your account is active. You may request access, correction, export or erasure of your data at any time, and you may lodge a complaint with a supervisory authority. Deleting your account deletes your conversation history.

Contact

Nordic Bioconsult OÜ, Suur-Karja tn 13, 10140 Tallinn, Estonia.