Legal

Privacy Notice

Draft version 0.1, 30 October 2026.

Draft. Not yet in force. This notice is a working draft published for review during the beta. It will be reviewed and completed before the service processes client data.

1. Controller

The controller for personal data processed through Mandate Office (mandateoffice.com) is Saba ja Sarved OÜ, a private limited company registered in Estonia under registry code 12759581.

2. This website

This website is a static site. It sets no cookies, uses no analytics and loads no third-party scripts or fonts. Our hosting provider processes technical request data, such as IP addresses, to deliver and protect the site.

3. Data processed through the service

When an AI agent uses the service for a client, we process the data needed for the requested action, for example names, identity document details and company details given by the agent, and documents the client uploads.

Company data returned from public registers comes from official public sources and is returned with its source and date.

4. Board member data from the Estonian e-Business Register

For Estonian companies, the names and roles of board members and other representatives come from the open data of the Estonian e-Business Register (Registrite ja Infosüsteemide Keskus), licensed under CC BY 4.0. We keep only current persons, their role, name and start date. We do not keep personal identification codes, addresses or contact details. The purpose is company verification for AI agents. Board data is returned only for a query on one exact registry code.

5. Purpose

We process this data only to provide the requested action: queries, standard documents, data packages and instructions. We do not sell personal data.

6. What we do not do with your data

We never file, submit or sign documents in anyone’s name, and we never handle client payments. Personal data is therefore not passed to registers or authorities by us.

7. Security and retention

The intended approach is encryption of stored documents, servers within the European Union, and deletion after the action is complete. Exact retention periods will be stated here before the service processes client data.

8. Partners

Where a client chooses to use an independent notary or lawyer, that professional processes the client’s data under their own responsibility.

9. Your rights

Under the EU General Data Protection Regulation you may ask for access to, correction of and deletion of your personal data, and you may complain to a data protection supervisory authority.

10. Contact

Privacy requests: info@mandateoffice.com