Privacy Policy

1. Who controls your data

BagClaim is operated by NullLogic s. r. o., Novozámocká 1347/69, 960 01 Zvolen, Slovak Republic. Company registration number (IČO): 56906439. Tax identification number (DIČ): 2122501667. VAT identification number (IČ DPH): SK2122501667. Registered in the Commercial Register of the District Court Banská Bystrica, section Sro, file number 52083/S.

Privacy and support contact: support@bagclaim.eu.

2. Claim information stays in your browser

Claim fields, uploaded documents, extracted OCR text, expense entries and generated letters are processed in temporary memory in your browser. The current BagClaim application has no claim database, document upload API or user account system. Reloading the page or starting over clears the in-memory claim. Files you download remain where you choose to save them.

3. Information our hosting receives

When you visit the site, our hosting and security providers receive ordinary connection information needed to deliver and protect the service. This can include IP address, request time, browser type, requested page, security events and similar technical metadata. Claim documents are not included in those page and asset requests.

Cloudflare may provide BagClaim with a two-letter country code derived from the connection IP. BagClaim uses it only as a fallback to suggest one of the available website languages. The country code is not added to your claim or analytics.

4. Optional analytics

Google Tag Manager and Google Analytics 4 are used only after you allow analytics. The Google Tag Manager script loads through BagClaim's first-party /relay/gtm.js path. Analytics measurement requests are then sent to Google. We measure product and guide interactions using non-content events such as viewing a blog guide, starting a check, completing a step, adding the claim pack to checkout and completing a purchase. We do not send passenger names, email addresses, flight numbers, PIR references, claim text, document names, document contents or claimed amounts to analytics.

The legal basis for optional analytics is consent. You can reject analytics without losing access to the claim builder and can change your choice through Cookie settings.

5. Contact and purchases

If you email BagClaim, the message and address are processed by NullLogic s. r. o. to answer your request. Email is provided through Proton.

Stripe acts as merchant of record for purchases through Stripe Managed Payments and operates the checkout. Stripe Managed Payments collects the buyer information needed for payment, tax, fraud prevention, receipts and support, which may include name, email, country, postal code, payment details and transaction information. Payment details are entered directly into Stripe Managed Payments Checkout and are not received by the BagClaim claim builder. Read Stripe Managed Payments' Privacy Policy.

After checkout, BagClaim sends only the Stripe Checkout Session ID to its verification endpoint. The server asks Stripe Managed Payments whether that transaction is completed, contains the expected product and records the immediate-delivery consent marker. It does not send claim fields, documents, OCR text or claimed amounts to Stripe Managed Payments.

6. Why information is processed

• To provide the claim-building features you request and perform the product contract.
• To operate, secure and troubleshoot the website based on legitimate interests.
• To answer support or privacy messages.
• To measure use of the product only when you consent.
• To verify purchases, prevent fraud and meet accounting or legal obligations.

7. Retention

BagClaim does not retain the claim data processed in browser memory and has no purchase database in this version. Payment and transaction records are retained by Stripe Managed Payments and may be available to NullLogic s. r. o. through the seller dashboard for fulfilment, accounting, fraud prevention, support and legal compliance. Hosting, security and email providers retain operational records under their own policies and configured retention periods.

8. Your rights

Depending on the law that applies, you may ask for access, correction, deletion, restriction, portability or objection, and you may withdraw consent at any time. You may also complain to the competent data protection authority. Withdrawing analytics consent does not affect the claim builder.

9. International providers and changes

Some service providers, including Stripe Managed Payments, may process technical, buyer or analytics data outside your country using the transfer safeguards they describe. We will update this policy when the product, provider list or data flows materially change.