Draft for legal review. This page describes how the Fusion Engine console actually works. A lawyer must review it before the console goes live. Points marked To confirm are still open.
Terms & privacy
For the Fusion Engine console: who we are, what we do with your data and your customers’ data, and the rules for accounts and orders.
Company details
Service provider
SIA IKT Spīdolas
Registration number
40203763365 (Register of Enterprises of the Republic of Latvia)
Registered address
To confirm: legal address
VAT number
To confirm: LV VAT number, if registered
Email
To confirm: e.g. privacy@spidolas.com
Privacy policy
This covers your Fusion Engine account and your use of the console. The website privacy notice covers the public website, its forms and analytics.
Who is responsible
SIA IKT Spīdolas (details above) is the controller for account data. For personal data inside the imagery and files you send us, you are the controller and we are your processor; see Data processing terms. We have not appointed a data protection officer, because the law doesn’t require one for us. Write to the email above with any privacy question.
What we keep, why, and for how long
Access request
Data
Name, work email, organization name, account type, an optional note, your password as a one-way scrypt hash, and when you accepted the terms.
Why
To check the request and open your account.
Legal basis
Steps you asked for before a contract, Article 6(1)(b) GDPR.
Kept
Until approved. Declined requests are deleted after 30 days; requests nobody reviewed are deleted after 90 days.
Your account
Data
Name, email, organization and your role in it, sign-in dates, password hash, and the version of the terms you accepted.
Why
To let you sign in, place orders and work with your team.
Legal basis
Contract, Article 6(1)(b).
Kept
While the account exists. Deleted straight away when you, your organization’s owner or our staff delete it.
Invitations from your colleagues
Data
Name, email and role, entered by someone in your organization (so not collected from you directly).
Why
To send you the link to join.
Legal basis
Our customer’s and our legitimate interest in giving their staff access, Article 6(1)(f).
Kept
The link works for 7 days. If you don’t join, the invitation is deleted 30 days after it expires.
Security log
Data
Sign-ins, failed attempts, lock-outs, password and role changes, data downloads, each with time and IP address.
Why
To protect accounts, spot attacks and investigate incidents.
Legal basis
Legitimate interest in security, Article 6(1)(f), and our duty to keep data secure, Article 32.
Kept
12 months, then deleted automatically. When an account is deleted, its entries keep only an anonymous ID.
Service emails
Data
Your email address and the message: approvals, invitations, password and security notices.
Why
To tell you about your account. We don’t send marketing from the console.
Legal basis
Contract and security, Article 6(1)(b) and (f).
Kept
By our email provider for its delivery logs. To confirm: Resend log retention
Orders, invoices and delivered files
Data
The areas you mark, what to find, prices, invoices, and who in your organization placed each order.
Why
To do the work, deliver it and bill for it.
Legal basis
Contract, Article 6(1)(b); invoices also a legal obligation, Article 6(1)(c).
Kept
Imagery and labels for the period you choose in Settings → Data & privacy. Invoices for as long as Latvian accounting law requires. To confirm: retention period for accounting documents
Improving our base models (optional)
Data
Your imagery and labels, if you switch this on.
Why
To make our models better for all customers. Your data is never shown to other customers.
Legal basis
Your consent, Article 6(1)(a). Off unless you turn it on. Turning it off stops any future use.
Kept
Until you withdraw consent. To confirm: what happens to models already trained
Cookies and browser storage
One cookie,ikt_session, keeps you signed in. It is strictly necessary, so it needs no consent. Page scripts can’t read it, and it ends after 2 hours of inactivity or 12 hours in total.
Your preferences and watched areas are saved in your own browser, for your account only. They are cleared when you sign out, and when a different account signs in on that browser.
The console sets no analytics or advertising cookies and loads no tracking scripts.
Who else handles data
We use these service providers. Each one gets only what it needs, under a contract that binds it to data protection rules.
Hetzner Online GmbH · Germany
Hosts our servers and stores the data described above.
Resend, Inc. · United States
Delivers our service emails (your email address and the message). Covered by the EU–US Data Privacy Framework and standard contractual clauses. To confirm: DPA signed, and Resend's DPF certification
EOX IT Services GmbH · Austria
Supplies the background map tiles. Your browser asks EOX for the tiles, so EOX sees your IP address.
OpenStreetMap Foundation · United Kingdom
Address search (Nominatim). It receives the text you search for and your IP address, and only when you press Enter or choose “Search the whole map”. The UK has an EU adequacy decision.
Copernicus Data Space Ecosystem · EU
Run for the European Commission and ESA. For live orders it receives the outline of the area and the time period, to find and process Sentinel images. It never receives personal details.
Satellite imagery providers
They receive the area to image and the time window, never your personal details. To confirm: list of providers
Partner drone pilots
Certified drone operators who fly your site. Open jobs show them only a rough location (about 1 km), dates and the work; the address, the site contact’s name and phone, and access notes appear only to the pilot who takes the job. Bound by a written agreement. To confirm: pilot agreement and data processing terms
Annotators
IKT Spīdolas staff and contractors who label your imagery, all under a written confidentiality agreement.
We don’t sell data. Apart from Resend, all of the above process data inside the EU or in a country with an EU adequacy decision.
Decisions about you
People at IKT Spīdolas approve every account; no decision about you is made by automated means alone. Our models label objects in imagery. They don’t profile people.
Do you have to give us this data?
We need your name, work email and a password to open an account; without them we can’t give you access. Everything else is optional.
Your rights
See and take your data: Settings → Data & privacy → Download my data gives you a copy in a machine-readable file (Articles 15 and 20).
Correct it: change your name under Settings → Profile; for your email or organization, ask us (Article 16).
Delete it: Settings → Data & privacy → Delete account, or ask us (Article 17).
Restrict or object to how we use it, for example the security log (Articles 18 and 21), and withdraw consent at any time, without affecting earlier use.
We answer requests within one month, and tell you if we need longer.
You can complain to the Data State Inspectorate (Datu valsts inspekcija), Elijas iela 17, Rīga, LV-1050, dvi.gov.lv, or to the authority where you live or work.
How we protect it
Passwords stored only as scrypt hashes; sessions that expire; protection against password guessing and cross-site attacks; every admin action logged; data files readable only by the service; HTTPS everywhere; staff access limited to what each role needs. If a breach puts your data at risk, we tell the Data State Inspectorate within 72 hours and tell you without undue delay where the law requires it.
Data processing terms
Imagery, drone footage and other files you send may show people, vehicles or private property. For that data you are the controller and we process it only for you. These terms form part of our contract (Article 28 GDPR). To confirm: a signed data processing agreement available on request
Subject and purpose: labelling, quality-checking and model training on the files and areas in your orders, for the duration of the order and the retention period you choose.
Your instructions only: we use the data only for your orders, unless EU or Latvian law requires otherwise, in which case we tell you first unless the law forbids it.
Confidentiality: everyone who works on your data is bound to confidentiality. Confidential orders are handled only by named annotators.
Security: the measures listed under “How we protect it”.
Sub-processors: those listed under “Who else handles data”. We tell you before adding or replacing one, and you may object.
Helping you: we help you answer people’s requests and meet your own obligations, including impact assessments.
Breaches: we tell you without undue delay, and at most within 48 hours of becoming aware, with what we know.
At the end: we delete your files, or return them if you ask, when the retention period ends or the contract ends, unless law requires us to keep them.
Checks: we give you the information needed to show we meet these terms, and allow reasonable audits.
Lawful content: you confirm you may send us the data. Drone imagery of people must have been collected lawfully, for example under the rules for drone flights.
Terms of service
Version 2026-11. If you have a signed contract with us, it takes priority where the two differ.
1. For businesses only
The console is a business-to-business service. You use it for your business, trade, profession or organization, not as a consumer, and you confirm this when you sign up or join an organization. Consumer protection rules for distance contracts, such as the 14-day withdrawal right, therefore do not apply.
2. Accounts
IKT Spīdolas approves every account. Give accurate details and use your own work email.
Keep your password to yourself; one person per account. Tell us straight away if you think someone else has used it.
In an organization, the owner decides who joins and what each person may do, and is responsible for the people they invite.
3. Orders
Before you place an order, the console shows what will be done, the price and an estimated delivery date. Placing the order is a binding request on those terms.
Delivery dates are estimates. Weather, satellite schedules and access to the area can move them; if a date moves, we tell you why and give the new date.
We confirm requests for targets outside the standard list before work starts. To confirm: cancellation and changes after ordering
4. Prices and payment
Prices are in euros, excluding VAT, as shown when you order.
Orders are paid from your prepaid balance, or by invoice when they exceed it. Work on an invoiced order starts once it is paid. To confirm: payment terms, late interest and refunds
5. Automated labels
Labels are made by machine-learning models and checked by our annotators. Each delivery includes a quality report with measured accuracy by class. Automated labels can contain errors. Check them before relying on them for decisions with legal or safety consequences.
6. Imagery, results and confidentiality
Satellite imagery is supplied under its providers’ licences; those licences may limit how you use or share it.
Your areas, imagery and delivered labels are used only for your orders and kept confidential. To confirm: ownership and licence of delivered labels and models
7. Acceptable use
Don’t use the console or its results for anything unlawful, or to monitor or identify individual people without a legal basis.
Don’t try to get around security, reach other customers’ data, or overload the service.
Don’t send us personal data you aren’t allowed to share.
8. Suspending and closing accounts
We may suspend an account that breaks these terms or puts others at risk, and we will tell you why. You can delete your account at any time in Settings → Data & privacy.
9. Liability
To confirm: limits of liability and service availability
10. Changes, law and disputes
We’ll tell you at least 30 days before these terms change in a way that matters to you. These terms are governed by the laws of the Republic of Latvia, and disputes go to the courts of Latvia. To confirm with lawyer
Contact
For privacy requests and questions about these terms, write to the email under Company details or to your IKT Spīdolas contact. Signed-in users can download or delete their data themselves in Settings → Data & privacy.
Version 2026-11 · last updated 14 November 2026 · draft for legal review
IKT Spīdolas
Back to sign in