Privacy Policy
Last updated: 1 August 2026.
1. Who we are
Made Obvious is operated by Agile Tech UAB, a company registered in the Republic of Lithuania ("we", "us", the "controller" of your personal data under the EU General Data Protection Regulation). For any privacy matter, contact support@madeobvious.com.
2. What data we collect
- Diagnostic answers — the options you select in a diagnostic.
- Identity and contact data — your first name and email address, only if you choose to submit them.
- Technical data — IP address and the approximate region derived from it, device and browser characteristics, and basic usage telemetry (which steps you completed and how long they took).
We do not collect special-category data, and our services are not directed at children (see section 9).
3. Purposes and legal bases
| Purpose | Data used | Legal basis (GDPR Art. 6) |
|---|---|---|
| Producing your personalised diagnosis and delivering it by email | Diagnostic answers, name, email, region | (b) performance of a contract — the service you request |
| Sending follow-up product recommendations by email | Name, email, diagnostic answers, region | (a) consent — the checkbox you tick before submitting; withdrawable at any time via the unsubscribe link in every email |
| Showing prices in your local currency and operating the service reliably | Technical data | (f) legitimate interest — running and localising the service |
| Security, abuse and fraud prevention | Technical data | (f) legitimate interest — protecting the service |
Our diagnostics use automated analysis of your answers to suggest likely causes and fixes. This is product guidance only — it produces no legal or similarly significant effects, so GDPR Art. 22 automated decision-making restrictions do not apply.
4. Recipients and processors
We share personal data only with processors who handle it on our documented instructions:
- Amazon Web Services EMEA SARL — hosting in the EU (Stockholm region) and content delivery (Amazon CloudFront).
- Our email delivery provider — to send the emails described above.
We do not sell personal data and we do not share it with third parties for their own marketing.
5. International transfers
Your data is stored in the EU. Where a processor's infrastructure involves transfers outside the EEA (for example, edge delivery of web content), those transfers are covered by the European Commission's Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework.
6. Retention
- Diagnostic sessions and telemetry: up to 24 months, then deleted or anonymised.
- Subscriber data (name, email, answers): for as long as you remain subscribed.
- If you unsubscribe: we stop emailing you immediately and keep only the minimal suppression record needed to honour that choice.
- On a deletion request: everything is erased except records we are legally required to keep.
7. Your rights
Under the GDPR you have the right of access, rectification, erasure, restriction, data portability, and the right to object to processing based on legitimate interest. Where processing rests on consent, you may withdraw it at any time without affecting prior processing. Write to support@madeobvious.com — we respond within one month.
You also have the right to lodge a complaint with a supervisory authority: in Lithuania, the State Data Protection Inspectorate (VDAI, vdai.lrv.lt), or the authority of your own EU member state.
8. Cookies and local storage
Our diagnostic pages set no cookies — no advertising cookies, no analytics cookies, no third-party trackers — and store nothing in your browser's local storage. The technical processing described above happens server-side and is strictly necessary to provide the service, so no cookie consent banner is required.
9. Children
Our services are intended for adults and are not directed at anyone under 16. We do not knowingly collect data from children; if you believe a child has submitted data, contact us and we will delete it.
10. Security
All traffic is encrypted in transit (TLS). Data is stored on encrypted volumes on EU servers with strict network-level access controls, and access is limited to what operating the service requires.
11. Changes and contact
We will post any changes to this policy on this page with an updated date. Questions: support@madeobvious.com.