Privacy policy.

Data controller

Chaos Gates OÜ · Registry code 17207484 · Lõõtsa 5, Lasnamäe, Tallinn, Harju, 11415, Estonia. SoulReaper operates as a brand of Chaos Gates OÜ.

What we process

Depending on your relationship with SoulReaper, we may process contact and correspondence information you provide voluntarily; information required for an enquiry or private commission; identity and billing data; project documents, decisions and approvals; technical information required for security and access; and payment-related information handled through specialist providers.

Purposes and legal bases

• Operate, maintain and secure the website and its private access areas.
• Respond to enquiries, press, partnerships and communications initiated by the user.
• Prepare, negotiate and perform private commissions, proposals, agreements, production and delivery.
• Manage billing identity, payments, business records and legal or tax obligations.
• Protect legitimate operational interests, prevent abuse and maintain traceability of decisions and deliveries.

The applicable legal basis may include steps taken at your request, pre-contractual measures, performance of a contract, compliance with legal obligations or legitimate interests. Where a future feature requires consent, it will be requested before activation.

Service providers and recipients

SoulReaper uses Vercel for hosting and deployment, Supabase for application data, authentication and storage, Stripe for payments where applicable, and SoulReaper's mail infrastructure for operational notifications. These providers may process technical or transactional data required to provide their services under their own data-protection arrangements.

International transfers

Some providers operate internationally. Where data is processed outside the European Economic Area, the relevant provider must apply the applicable international-transfer mechanisms and safeguards.

Retention

Data is retained for as long as necessary to handle the enquiry, manage the client relationship, maintain appropriate contractual and production records, meet legal, tax and accounting obligations, and defend potential claims. Contact data that does not progress to a contractual relationship is retained only while a legitimate operational purpose remains.

Your rights

Subject to applicable data-protection law, you may request access, correction, deletion, restriction, portability or object to certain processing. To exercise these rights, use the Contact page and select the privacy/data category.

Supervisory authority

You may lodge a complaint with a competent data-protection supervisory authority. Chaos Gates OÜ is established in Estonia, where the national authority is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon).

Automated decisions

SoulReaper does not use personal data to make solely automated decisions that produce legal effects or similarly significant effects for visitors or clients.

Analytics and marketing

The public website currently does not use advertising pixels, remarketing or optional advertising analytics. If this changes, the appropriate choice will be requested before technologies requiring consent are activated.