Legal

Privacy Policy

Last updated: 29 July 2026

1. Controller

The controller of your personal data is:

AMIRO INVEST d.o.o. ("Amiro Invest", "we", "us") Cesta XIV. divizije 36, 2000 Maribor, Slovenia Company no.: 8301565000 · VAT no.: SI26609924 E‑mail: info@warrantyark.com · Tel.: +386 41 380 655

We are the controller for the website, the consumer web app, the Android and iOS apps, the merchant plugins (WooCommerce and Shopify), and the checkout/licensing. WideLabs GmbH (Switzerland) acts as our technical service provider (processor) for parts of the platform.

2. Scope

This policy explains how we handle personal data across the whole WarrantyARK ecosystem:

  • warrantyark.com — the marketing website.
  • app.warrantyark.com — the consumer web app and checkout.
  • WarrantyARK for iOS and Android — the consumer apps.
  • WarrantyARK Connect (WooCommerce) and the WarrantyARK app (Shopify) — the merchant plugins.

Different surfaces process different data; each is described below.

3. The mobile apps (iOS and Android)

The WarrantyARK apps for iOS and Android use a user account and synchronise your data with our servers (hosted in the EU). When you sign in, the receipts, warranties, notes, reminders and claims you add are stored in your account on our backend, so they are available across your devices and the web app. This is the same processing described in section 4(b) below.

Data is sent over an encrypted connection (HTTPS) and access is protected by signed session tokens stored securely on your device. If you enable iCloud or Google backup, your device's operating system may additionally include app data in your own device backup, which is controlled by Apple or Google.

4. What we collect, why, and the legal basis

a) Website (warrantyark.com)

  • Analytics/advertising data (via Google Analytics 4 and Google Ads) — only with your consent via the cookie banner. See our Cookie Policy. Legal basis: consent (Art. 6(1)(a) GDPR; ePrivacy).
  • Server logs (IP, timestamp, user agent) for security and operation. Legal basis: legitimate interests (Art. 6(1)(f)).

b) Consumer web app, iOS and Android apps (accounts)

  • Account data — e‑mail, and (if you use social sign‑in) the identifier from Apple/Google. Legal basis: contract (Art. 6(1)(b)).
  • Warranty vault data — products, purchase details, receipts/photos you add, warranty periods, reminders and claims. Legal basis: contract.
  • Purchases saved via "Add to WarrantyARK" — when you tap the button after checkout in a partner store and sign in, we save that purchase (store, order number, item names, price, dates, warranty) to your account, with your explicit action/consent. Legal basis: contract / consent.
  • Push device tokens (for reminders) — legal basis: contract / consent.

c) Merchant plugins (WooCommerce, Shopify)

  • Merchant/store data — store name, domain, contact e‑mail, licence key, activation records, and configuration. Legal basis: contract.
  • Shopper purchase context passed to the "Add to WarrantyARK" flow — the plugin itself sends only non‑personal purchase context in the link (store, order number, item names); personal data is saved only after the shopper signs in and consents in the app.

d) Checkout and licensing (app.warrantyark.com/buy)

  • Order and billing data — work e‑mail, company name and address, VAT ID, country, plan, and payment confirmation. Legal basis: contract and legal obligation (invoicing/tax, Art. 6(1)(c)).
  • Payment data — processed by Braintree/PayPal; we receive a payment confirmation and do not store full card numbers.

5. Cookies, local storage and consent

We use strictly necessary local storage (e.g. to keep you signed in) and, with consent, analytics and advertising cookies/identifiers (Google Analytics 4, Google Ads) with Google Consent Mode. Full details, categories and how to change your choice are in our Cookie Policy.

6. Who we share data with (processors and recipients)

We share data only as needed to run the Services, with providers acting under contract:

  • WideLabs GmbH (Switzerland) — technical development/operation (processor).
  • Braintree / PayPal — payment processing.
  • Google (Analytics, Ads) — measurement and advertising, subject to your consent.
  • Cloud hosting — servers located in the EU (AWS, eu‑central‑1).
  • E‑mail delivery — for invoices, licence keys, reminders and notifications.
  • Apple / Google — sign‑in and push notifications, and the respective app stores.
  • Authorities — where required by law.

We do not sell your personal data.

7. International transfers

Our platform data is hosted in the EU. Some providers (e.g. Google, PayPal, WideLabs GmbH in Switzerland) may process data outside the EEA. Where they do, transfers are protected by appropriate safeguards such as the EU Standard Contractual Clauses, adequacy decisions (Switzerland benefits from an EU adequacy decision), or equivalent mechanisms.

8. How long we keep data

  • Account and vault data — while your account is active; deleted on account deletion (subject to short technical backups).
  • Order and invoice data — retained for the period required by tax and accounting law (in Slovenia generally up to 10 years).
  • Analytics/advertising data — per Google's retention settings and your consent.
  • Logs — a limited period for security.

9. Your rights

Under the GDPR you have the right to access, rectification, erasure, restriction, portability, and objection, and to withdraw consent at any time (without affecting prior processing). To exercise your rights, contact info@warrantyark.com. You also have the right to lodge a complaint with your supervisory authority — in Slovenia, the Information Commissioner (Informacijski pooblaščenec), https://www.ip-rs.si.

10. Security

We use appropriate technical and organisational measures, including EU hosting, encrypted transport (HTTPS), access controls, signed session tokens, and data minimisation. No system is perfectly secure; we work to protect your data and to notify you and the authorities of breaches where legally required.

11. Children

The Services are not directed to children under the age required for consent in your country. We do not knowingly collect data from children.

12. Changes

We may update this policy; material changes will be notified (e.g. by e‑mail or on the site) and the "last updated" date will change.

13. Contact

AMIRO INVEST d.o.o., Cesta XIV. divizije 36, 2000 Maribor, Slovenia — info@warrantyark.com — +386 41 380 655.

← WarrantyARK