Privacy Notice
Last updated: 6 October 2026
RaiseMargins helps small and mid-market companies recover margin by automating back-office work. We sell EU AI Act compliance, so we hold our own funnel to the same standard. This notice explains, in plain terms, what personal data we collect when you use our free Margin Check calculator, why we process it, who processes it on our behalf, and the rights the GDPR gives you.
1. Who is responsible for your data
The controller of your personal data is:
Mykhaylo Matkovskyy, sole trader, trading as RaiseMargins, established in Austria
Email: privacy@raisemargins.com
For any question about this notice or to exercise your rights, contact us at the address above. We answer data requests within one month, as the GDPR requires.
2. What data we collect
We only collect what the calculator and report need. When you submit the email gate, you send us:
- Your email address. So we can send you the report and, if you consent, occasional updates.
- Your consent choice and a timestamp. A record of whether you ticked the marketing box, and when, kept as proof of consent.
- The figures you entered and the figures we calculated. The tasks you ticked with their volumes and minutes, your blended rate, and, if you fill in the optional cash part, your supplier spend, discount terms, late fees, overtime and temp spend and expected growth, plus the resulting annual cost, annual recoverable amount, hours recovered and three year value. These are business estimates about a workflow, not special category data. From them we build your one-page summary (PDF) and the spreadsheet behind it, which we attach to your report and offer for download; we do not keep copies.
- Invoices you choose to upload, if you use the free sample. Up to five files, which you should black out where sensitive. We send each file to our document reader only to show you what it reads, return the fields to your screen, and store neither the file nor the result.
- Your answers to the three questions in the report form. Your role, as you type it, your industry, and when you would start. Your industry shapes the tips in your report. If you tick the box for follow-up emails, we also store your figures, your industry and your start date as you gave them, so those four emails can be written around your own numbers. Your role is not used in them. We use them, with your calculator result, to decide whether your report email includes an offer of a free audit. We store them, with the result, only when it does, so we can prepare for your audit call.
We also process, automatically:
- Technical and security data. When your browser reaches our site and our lead endpoint, our infrastructure provider processes your IP address and basic request data to deliver the page and protect the endpoint from abuse (a hidden anti-bot field and rate limiting).
- Email engagement. Our email provider records whether you open the report or marketing emails and whether you click their links, so we can see that the report was delivered and improve what we send.
We do not buy data about you, we do not run advertising trackers on the site, and we do not collect more than what is listed here.
3. Why we process it, and our legal basis
| What we do | Why | Legal basis (GDPR Art. 6) |
|---|---|---|
| Send you your Margin Check report | You asked for it by submitting the calculator. It is the service you requested. | Art. 6(1)(b), steps taken at your request; and 6(1)(a), your request to send it |
| Store your email and figures, and follow up with marketing emails and our nurture sequence | To keep you informed and offer the audit, only if you opted in | Art. 6(1)(a), consent (with double opt-in, withdrawable anytime) |
| Decide whether your report email includes a free audit offer, and keep your answers when it does | You answered the questions when you requested the report, so we can see if the audit is offered to you | Art. 6(1)(b), steps taken at your request before a contract |
| Read the invoices you upload to the free sample and show you the result | You asked for it by uploading them | Art. 6(1)(b), steps taken at your request |
| Protect the endpoint (anti-bot field, rate limiting, security logs) | To stop our report system being abused to send spam | Art. 6(1)(f), legitimate interest in security |
| Keep a record of your consent | To prove the marketing consent was freely given | Art. 6(1)(c), legal obligation; and 6(1)(f) |
The report and the marketing are separate. You always get the report you asked for. You only enter the nurture sequence if you tick the consent box, and you can leave it at any time.
4. Who processes your data for us
We keep the stack EU based wherever possible and use established providers under data processing agreements. We never sell your data.
| Provider | Role | Location / safeguards |
|---|---|---|
| Brevo (Sendinblue SAS) | Sends the report and marketing emails, stores your contact record and figures, runs the nurture sequence | France (EU). Data stays in the EU. |
| Cloudflare, Inc. | Hosts the website and the lead endpoint, manages DNS, provides security and anti-abuse | US headquartered, served from EU edge. Covered by a data processing agreement and EU Standard Contractual Clauses. |
| Google Ireland Limited (Google Workspace) | Receives and stores emails you send us, and holds the calendar event and Google Meet link if you book a call | EU contracting entity. Any processing outside the EU is covered by Google's data processing terms and EU Standard Contractual Clauses. |
| Telegram FZ-LLC | Delivers a private alert to our founder when your report includes an audit offer, when you book a call, or when you upload invoices to the free sample: your email address, your role, your calculator figures, and for the sample only the file name and how many fields were read, so he can prepare and reply quickly | United Arab Emirates, outside the EU. Used only for these internal alerts, and only what is listed here is sent. |
| Mistral AI SAS | Reads the invoices you upload to the free sample and returns the fields it finds | France (EU). Data hosted in the EU and never used to train its models. Mistral keeps the request for up to 30 days to detect abuse, then deletes it, under its data processing agreement. |
| Cal.com, Inc. | Handles your booking only if you choose to book an audit call | Covered by its own privacy terms and a data processing agreement. |
Except for the founder alerts sent through Telegram, described above, if a processor would transfer data outside the EU or EEA, that transfer is covered by EU Standard Contractual Clauses or an equivalent safeguard. You can ask us for a copy of the relevant safeguard.
5. How long we keep it
- The report email is a one time send. We do not store the report, the one-page summary or the spreadsheet.
- Invoices you upload to the free sample are not stored by us at all. Our document reader keeps them for up to 30 days to detect abuse, then deletes them, and never uses them to train its models.
- Your contact record and figures are kept while you remain a subscriber, so we can serve and tailor what we send. If you unsubscribe, withdraw consent, or ask us to erase your data, we delete the contact record promptly and within 30 days, except where we must keep a minimal record of your past consent or are otherwise legally required to retain something.
- Your answers to the questions, when your email included the audit offer, are kept on your contact record until your audit is done, and for no more than 12 months if you do not book one, unless you ask us to erase them sooner.
- Security and email engagement logs are kept only as long as needed for security and deliverability, then deleted or aggregated.
6. Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you, and get a copy.
- Rectify data that is wrong or incomplete.
- Erase your data (the right to be forgotten).
- Restrict or object to our processing, including objecting to marketing at any time.
- Portability, receiving your data in a structured, machine readable format.
- Withdraw consent at any time, which does not affect processing done before you withdrew. Every marketing email carries a one click unsubscribe link, and you can also email us.
To exercise any right, email us at privacy@raisemargins.com. If you believe we have mishandled your data, you can lodge a complaint with a supervisory authority, in particular the Austrian Data Protection Authority (Datenschutzbehörde) at dsb.gv.at, or the authority in your own country of residence.
7. Cookies and tracking
This site sets no cookies at all and stores nothing on your device. We verified this on the live site on 11 September 2026: no Set-Cookie header on any page, and no local or session storage. That is why you see no cookie banner, there is nothing to consent to. On the same date we also removed the last third party request from the site, our typeface, which had been loading from Google's font CDN and disclosing your IP address to Google. It is now served from our own domain. Full detail, including what still appears in server logs, is in our cookie policy. If we ever add analytics we will ask for consent before it loads.
8. Do you have to give us this data
No. Nothing on this site requires you to identify yourself. The calculator runs completely without an email address and shows you your number on screen. You only give us an email if you want the written report sent to you, and the marketing tick box is separate and optional. If you leave it unticked you still get the report. There is no automated decision making that produces legal effects for you within the meaning of Article 22 GDPR: the calculator is a transparent arithmetic model whose assumptions are published, and a person reads every enquiry.
9. Changes to this notice
We may update this notice as the product or the law changes. The current version always lives at this page, with the date at the top. Material changes that affect you will be communicated where appropriate.
10. Contact
Questions about this notice or your data: privacy@raisemargins.com.