← Back to valkyra

Privacy Policy

valkyra (digital exposure scanner) | Effective date: 3 April 2026 | Controller: Recberry s.r.o.

1. Introduction

This Privacy Policy explains how Recberry s.r.o. ("we," "us," "Recberry") collects, uses, and protects personal data when you use the valkyra website and related services (the "Service"). valkyra helps caregivers understand publicly visible information linked to a child’s social profiles.

This policy is prepared with Regulation (EU) 2016/679 (GDPR) and Czech Act No. 110/2019 Coll. in mind.

2. Data controller

Controller: Recberry s.r.o., Company ID (IČO): 04972236, Tax ID (DIČ): CZ04972236 Registered office: Tupolevova 741, Prague 9 - Letňany, 199 00, Czech Republic Correspondence: Jana Zajíce 2016, 258 01 Vlašim, Czech Republic Email: barbora@recberry.com · Phone: +420 702 080 993 Commercial Register: Municipal Court in Prague, Section C, File No. 256441

3. What data we process

Depending on how you use valkyra, we may process:

  • Inputs you provide — for example a first name or nickname you choose to label a scan, and URLs or usernames for public profiles you ask us to review.
  • Derived analysis — risk scores, explanatory text, and structured findings generated by our systems to present the report.
  • Technical data — standard server logs (e.g. IP address, user agent, timestamps) for security and reliability.
  • Feedback — text you voluntarily submit via the feedback form, and an optional contact email if you provide it.
  • Newsletter — if you subscribe for updates, we process your email address and related subscription metadata to send the messages you signed up for.
  • Operational metrics — aggregated counts such as how many full analyses have completed (not sold to third parties).
  • Product analytics (optional) — after you acknowledge the cookie notice, we may load Microsoft Clarity to understand how the site is used (for example aggregated usage, heatmaps, and session replays). Clarity is operated by Microsoft Corporation; it may process pseudonymous technical and interaction data. See Microsoft’s documentation for Clarity and Microsoft’s privacy statement.

We do not require you to create an account to run a basic analysis. We do not ask children to use the Service directly; it is intended for parents and legal guardians.

4. Purposes and legal bases (GDPR Art. 6)

  • Providing the Service — contractual and pre-contractual steps at your request (Art. 6(1)(b)).
  • Security, abuse prevention, debugging — legitimate interests (Art. 6(1)(f)), balanced against your rights.
  • Feedback you send — consent where we rely on optional fields or email (Art. 6(1)(a)); legitimate interest in improving the product where applicable (Art. 6(1)(f)).
  • Newsletter — consent when you subscribe (Art. 6(1)(a)); you can unsubscribe using the link in any email.
  • Legal obligations — where Czech or EU law requires retention or response to authorities (Art. 6(1)(c)).
  • Optional site analytics (Microsoft Clarity) — when you click OK on the cookie notice, we take that as consent to load Clarity for the purposes described above (Art. 6(1)(a) GDPR).

5. Recipients and processors

We use trusted infrastructure and AI providers to operate valkyra (for example hosting, email delivery, and model APIs). Google Custom Search and SerpApi are used for features that appear in both the free on-page experience (including the teaser analysis) and the paid Layer 2 scan — not only in paid services. They act as processors under Article 28 GDPR where they process personal data on our instructions. Where we enable Microsoft Clarity after you accept the cookie notice, Microsoft Corporation provides Clarity as a processor under Article 28 GDPR for that analytics processing. We do not sell your personal data.

6. Retention

Where reports, subscribers, or feedback are stored in our database, we keep them only as long as needed for the purposes above or as required by law. Technical logs typically have shorter retention. You may request deletion where applicable (see Data protection page).

7. Transfers outside the EEA

Some subprocessors may be located outside the European Economic Area. Where required, we use appropriate safeguards such as Standard Contractual Clauses and assess local law impacts.

8. Your rights

Subject to conditions in GDPR, you may have the right to access, rectify, erase, restrict processing, data portability, and to object. You may lodge a complaint with the Office for Personal Data Protection of the Czech Republic (UOOU). Details are on our Data protection page.

9. Contact

For privacy questions: barbora@recberry.com