Privacy Policy

1. Who We Are

Skim HQ is a subscription newsletter service operated by OÜ HMB tech ("we", "us", "our"), a company registered in the Republic of Estonia. We are the data controller for personal data processed through skimhq.com.

2. What Data We Collect

When you subscribe

• Email address — required to deliver digests and manage your subscription
• Payment data — processed and stored entirely by Stripe, Inc. We never see or store your card number. We receive a Stripe customer ID and subscription ID for billing management.
• Subscription plan — monthly or annual

During onboarding (optional)

• Country of residence — to personalise idea focus and market angles
• Situation — e.g. employed, founder, freelancer
• Interest preference — business ideas, income moves, or both

Onboarding preferences are voluntary. Skipping them does not affect your subscription.

Automatically collected

• Email engagement data — open and click events recorded via Resend (our email provider) when you interact with digest emails. You may use an email client with image blocking to opt out of open tracking.
• Server logs — standard access logs (IP address, browser, timestamp) retained for up to 14 days for security purposes.

3. Legal Basis for Processing

Data	Legal basis
Email, billing, plan	Performance of contract (Art. 6(1)(b) GDPR) — necessary to provide the subscription service
Country, situation, interests	Legitimate interest (Art. 6(1)(f) GDPR) — personalising content to improve relevance
Email engagement	Legitimate interest — measuring delivery quality and improving the digest
Server logs	Legitimate interest — security and abuse prevention

4. How We Use Your Data

• Delivering the daily Business Ideas Digest and weekly Income Opportunities Digest to your inbox
• Processing subscription payments and managing billing events via Stripe
• Sending transactional emails — welcome email, subscription reminders, payment failure notices
• Personalising digest content based on your country and stated preferences
• Detecting and preventing fraud or abuse

We do not use your data for advertising, profiling for third parties, or any purpose not listed above.

5. Third-Party Processors

Processor	Purpose	Location
Stripe, Inc.	Payment processing and subscription management	United States (EU SCCs in place)
Resend, Inc.	Transactional email delivery	United States (EU SCCs in place)
Railway Corp.	Web hosting and database	United States (EU SCCs in place)

All transfers to processors outside the EEA are governed by Standard Contractual Clauses approved by the European Commission.

6. Data Retention

• Active subscribers — data retained for the duration of the subscription
• After cancellation — email and preferences retained for up to 12 months in case of resubscription, then deleted
• On erasure request — deleted within 30 days, except where retention is required by law (e.g. billing records kept 7 years under Estonian Accounting Act)
• Server logs — automatically deleted after 14 days

7. Your Rights Under GDPR

As a data subject in the EEA, you have the following rights:

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your data ("right to be forgotten")
• Restriction — request that we limit processing of your data
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interest
• Withdraw consent — where processing is based on consent, withdraw it at any time without affecting prior processing

To exercise any right, email [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the supervisory authority in your country. In Estonia, this is the Data Protection Inspectorate (aki.ee).

8. Cookies

Skim HQ uses minimal cookies. We set a session cookie to maintain your authenticated state when accessing account features. We do not use advertising cookies, third-party tracking pixels on the website, or analytics services that track you across the web.

9. Children

Skim HQ is not directed at persons under the age of 16. We do not knowingly collect data from minors.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified to subscribers by email at least 14 days before taking effect. The current version is always available at skimhq.com/privacy.

11. Contact

For privacy questions or to exercise your rights:
📧 [email protected]