Privacy Policy
Last updated 28 June 2026
This policy explains what personal data we process and your rights under the GDPR.
Data controller
MB VARIANTAI (brand "PELNINGA"), company code 306133252, VAT LT100016340412, Lithuania. Contact: hello@pelninga.lt.
What we collect
Account data (name, email, password — stored only as a salted hash). Order and machine data. Earnings data shown on your dashboard. Any marketplace API key you connect is stored encrypted (AES-256-GCM) and used read-only. Technical data such as cookies and server logs.
Why we use it (legal basis)
To provide the service and your account (performance of a contract); to invoice the management fee (contract / legal obligation); to keep the service secure (legitimate interest); and to comply with law.
Who we share it with
Service providers acting as processors: our payment provider Paysera (billing), our hosting provider Vercel and database provider Neon (both EU regions). Your machine's earnings are processed by the third-party AI generation rental marketplace your account is listed on. We do not sell personal data.
Retention
We keep account data while your account is active and as required by law (e.g. accounting records), then delete or anonymise it.
Your rights
Under the GDPR you may request access, rectification, erasure, restriction, portability, and object to processing. To exercise these, email us. You may also lodge a complaint with the State Data Protection Inspectorate of Lithuania (VDAI, vdai.lrv.lt).
Security
Passwords are hashed; connected API keys are encrypted at rest; access is limited. No method is perfectly secure, but we take reasonable measures.
Cookies
See our Cookie Policy for details on the cookies we use.
Contact
Privacy questions: hello@pelninga.lt.