PRIVACY

Privacy notice

Effective 9 November 2026

Who operates the service

MyAsfaleies is an insurance-office organisation service operated by Konstantinos Nikitidis. For privacy questions, support or a request about your information, email info@knikitidis.gr.

The operator determines how service accounts, access controls and security information are used. An insurance office determines why it collects and uses its customers’ insurance records. We handle those records on that office’s instructions to provide its workspace. Contact your office about its insurance processing; we can help route a request if you contact us.

Information we use and why

• Account and sign-in information: your email, account identifier, verification status and, when supplied by your sign-in provider, name and profile picture. We use these to authenticate you, maintain your account and associate it with authorised office access.
• Office information: records and documents authorised users upload or enter, such as customer details, policies, identification documents, vehicles and property. We store and extract information to help users organise and review it. Signing in alone does not grant access to an office.
• Operational information: request and error records, timestamps, session/device information and changes made during review. We use these to run the service, investigate faults, protect accounts and preserve an audit trail.
• Support correspondence: information you send us when asking for help or exercising your rights.

For account administration and requested support, processing is necessary to provide the service you request. Security and reliability processing serves our legitimate interests in protecting users and operating the service. Processing needed to meet a legal obligation is based on that obligation. The insurance office is responsible for the legal basis and notices for its customer records.

Google sign-in and cookies

Google sign-in is optional. It requests only OpenID identity, email and basic profile information. MyAsfaleies does not request permission to read your Gmail, Drive, contacts or calendar through this connection. Email-based sign-in is also available.

Clerk provides authentication and session management. Necessary cookies and browser storage maintain sign-in and security. Google may use its own cookies during Google sign-in. The public MyAsfaleies website does not set advertising or analytics cookies. We do not sell personal information or use Google sign-in information for advertising.

Service providers, access and location

Amazon Web Services hosts the application and stores production office records in Frankfurt, Germany. Clerk processes authentication information; Google processes information when you choose Google sign-in. Authorised office users and operators providing necessary support may access information according to their permissions. We may disclose information where required by law.

Authentication providers and global delivery/security infrastructure may process technical or account information outside the European Economic Area. Their applicable terms and data-processing arrangements describe the relevant protections. For provider information, see AWS data privacy, Clerk’s privacy notice and Google’s privacy policy. Contact us for information about the arrangements relevant to your account.

We use local extraction and OpenAI to prepare document fields for human review. When AI extraction is needed, document text or images are sent to a dedicated OpenAI project with approved Zero Data Retention. Requests disable response storage and background processing. OpenAI processing may occur outside the European Economic Area; we do not claim EU-only processing. Zero Data Retention is subject to OpenAI’s applicable eligibility rules and exceptions, including image safety checks. See OpenAI’s API data controls. Extracted values are drafts and require an authorised user’s review before they update office records.

Retention and deletion

Account information is kept while your account is active and as needed to resolve account or security requests. Office records, originals and their versions remain until the office instructs us to remove them or closes its workspace, subject to any applicable retention obligation. Deletion requests are handled manually and must cover retained document versions as well as current records. Removing an account does not automatically delete records that belong to its insurance office.

Application operational logs are retained for 30 days. Recovery copies may remain during their configured recovery period; access to them is restricted. Contact us to request deletion or to clarify the retention applicable to a specific record. We do not promise immediate removal from all recovery systems.

Your choices and rights

Depending on the applicable rules and circumstances, you may request access, correction, deletion, restriction or portability of your information, and object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it. Email info@knikitidis.gr; we may need to verify your identity. You may also complain to the Hellenic Data Protection Authority or your relevant supervisory authority.

You can disconnect MyAsfaleies from your Google account through Google’s third-party connections settings. That stops the connection; contact us separately to request deletion of information already held by the service.

Changes

We will update this page when the operator, providers or processing change and communicate material changes to affected users. The effective date above identifies this version.