This Privacy Policy explains what personal data Combat Ready OÜ (“Combat Ready”, “we”, “us”) processes when you use the Combat Ready training environment, why we process it, and the rights you have. The lead-qualification chat on our marketing site is a separate service with its own privacy notice.
Who we are
The data controller is Combat Ready OÜ, registry code 16348509, Öö tn 2-4, 50103 Tartu, Estonia. For any privacy question or request, contact us at info@combatready.eu.
What data we collect and why
| Category | Examples | Purpose | Legal basis (GDPR Art 6) |
|---|---|---|---|
| Account data | name, email address, Google/Clerk sign-in identifier | create and secure your account, sign you in | Contract (Art 6(1)(b)) |
| Conversation content | your messages to the trainer, the situations you describe, debriefs and drafts | deliver the training service and keep your sessions continuous | Contract (Art 6(1)(b)) |
| Technical & location | IP address and the country/city derived from it, basic device/browser data | set your language, prevent abuse, keep the service secure | Legitimate interest (Art 6(1)(f)) |
| Contact & enquiry data | name, email, organization, role, what you need | respond to your enquiry and follow up | Consent / legitimate interest (Art 6(1)(a)/(f)) |
| Usage analytics | page views and product events (via PostHog, cookieless) | understand and improve the product | Legitimate interest (Art 6(1)(f)) |
Please don’t enter other people’s data. We ask you not to enter information that identifies other individuals, or special-category data (health, political opinions, religion, and the like). When a situation involves someone else, describe them generally (“a team member”) rather than by name. Combat Ready is a tool for your own development, not a place to keep records about third parties.
How we use your data
- Provide the AI-assisted training service and keep your sessions continuous.
- Maintain your account, authenticate you, and keep the service secure.
- Respond to enquiries and provide support.
- Understand product usage in aggregate and improve the service.
- Meet our legal and accounting obligations.
We do not use your conversations to advertise to you, and we do not sell your personal data.
Sharing and sub-processors
We share personal data only with a small set of trusted service providers (processors) that help us run the service, each under a data processing agreement and only as far as they need it. These fall into a few categories: cloud hosting and database, authentication, and product analytics.
One is worth naming directly: the trainer’s responses are generated by Anthropic (the Claude API), so your conversation content is sent to Anthropic for processing, including in the United States under EU Standard Contractual Clauses. Your input is not used to train Anthropic’s models.
We do not sell personal data or share it for third-party advertising. A current list of our sub-processors is available on request at info@combatready.eu.
International transfers
Some processing — including the AI responses generated by Anthropic — takes place outside the European Economic Area, including in the United States. For those transfers we rely on the European Commission’s Standard Contractual Clauses together with additional safeguards.
How long we keep it
| Data | Retention |
|---|---|
| Account and conversation data | until you delete your account |
| Contact & enquiry data | until you withdraw your consent or ask us to delete it |
| Analytics | kept in aggregated / de-identified form |
Cookies
We use only strictly necessary cookies, so we don’t show a cookie-consent banner:
cr.locale— remembers your language choice.- Clerk session cookies — keep you signed in.
cr_join_slug— carries a shared-link invitation through to sign-up.
Our product analytics (PostHog) run in cookieless mode. We do not use advertising or third-party tracking cookies.
Your rights
Under the GDPR (Art 15–22) you have the right to:
- access the personal data we hold about you;
- have it corrected or completed;
- have it erased (“the right to be forgotten”);
- restrict or object to certain processing;
- receive your data in a portable form; and
- withdraw consent at any time, where processing relies on consent.
To exercise any of these, email info@combatready.eu. You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee).
Data security
Access to the service is authenticated. Credentials and access tokens are stored securely and never sold. We limit access to personal data to what is needed to run and support the service.
Children
Combat Ready is intended for professional use by adults and is not directed at children under 18.
Changes to this policy
When we update this policy we post the new version on this page and change the “last updated” date. We will communicate significant changes as appropriate.
Contact
Questions or requests? Email info@combatready.eu, or write to Combat Ready OÜ, Öö tn 2-4, 50103 Tartu, Estonia.