Updated 21 October 2026
Privacy policy
How SIA Vietne handles Licitu account information, public posts, procurement records and privacy requests.
Controller and contact
SIA Vietne, registration 40103048838, Ozolciema iela 46 k-5 – 35, Rīga, LV-1058, Latvia, is the controller for Licitu account administration, security and public publication services. Our shared privacy contact is privacy@otnox.com; please include “Licitu” in the subject. This notice concerns Licitu, not every feature or integration offered by Otnox.
Information we process
Account data includes your email, authentication identifiers and session information. Profile and preference data includes your name, optional biography and company, selected countries and sectors, follows and saved posts. Community data includes posts, replies and notifications. Connection and security data may include IP addresses, request timestamps and error information. Public procurement records may contain names and professional information published by contracting authorities or other original sources.
What is public
Profile names, biographies, company descriptions, posts and replies are public. A public profile may also show the organisations you follow, and signed-in members can see some follower names. Public publications can be viewed without an account and discovered by search engines and AI-search services. Your account email, credentials, session tokens, saved posts and notifications are not part of public page data. Public sharing can create copies on third-party services that we do not control.
Purposes and legal bases
We process account, session and preference information to provide the service you request (GDPR Article 6(1)(b)). We rely on legitimate interests (Article 6(1)(f)) for proportionate security, abuse prevention and making public procurement information useful and accessible, balanced against affected people’s rights. We process information when required by law (Article 6(1)(c)). If we introduce an optional activity requiring consent, we will request that consent separately; creating an account is not consent to marketing.
Sources and recipients
You provide account details and community content. Procurement information comes through Otnox from public source notices. Production hosting uses Google Cloud Run and Firebase Hosting. Hosted authentication and application data use Supabase, with the Licitu project configured in Frankfurt, Germany. Mailgun, configured in its EU region, delivers account confirmation and other transactional authentication emails and processes recipient addresses, message content and delivery events. Open and click tracking are disabled for these emails. Authorised service providers may process information to operate hosting, authentication and technical support. We do not sell account information. External notice links and sharing destinations operate under their own privacy policies; sharing a post sends its public content to the destination you choose.
International processing
An EU database region does not mean every support operation is confined to the EU. Where a service provider processes personal data outside the EEA, applicable transfer safeguards, such as an adequacy decision or standard contractual clauses, are required. You can contact our privacy address for information about applicable providers and safeguards.
Retention and account closure
We retain account and preference data while needed to operate your account. You can request closure or erasure at privacy@otnox.com. We assess which records must be deleted or de-identified and whether any limited retention is required for a legal obligation, security investigation or legal claim. Public procurement records have their own source and purpose and are not automatically removed when an unrelated member closes an account. Search engines and sharing destinations may retain their own copies; where applicable, we will take reasonable steps required by law to address public erasure requests.
Cookies and device storage
Licitu uses the __session cookie to maintain your authenticated session. In hosted production the cookie lasts up to one hour and is marked HttpOnly, Secure and SameSite. Signing out invalidates the session. The current release does not include advertising cookies or third-party analytics scripts. Disabling the necessary session cookie prevents sign-in. Your appearance preference is stored locally on your device. A temporary counter in session storage controls when the sign-in prompt appears; it stays in your browser tab and is not sent to an analytics service.
Your rights
Depending on the applicable legal basis and circumstances, you may request access, correction, erasure, restriction or portability of personal data, object to legitimate-interest processing, and withdraw any optional consent. Send requests to privacy@otnox.com. We may ask for proportionate identity verification and respond within the period required by GDPR, normally one month, with any permitted extension explained to you.
Complaints and automated decisions
You may lodge a complaint with the Latvian Data State Inspectorate (Datu valsts inspekcija, dvi.gov.lv) or another competent supervisory authority. Licitu does not use its procurement summaries to make automated decisions producing legal or similarly significant effects about you. Current automated publication text is assembled from database fields and templates; no generative AI service is used to produce these posts.
Updates
We will update this notice as the service or its processing changes and give appropriate notice of material changes. The date above identifies the current version. The provider list will be updated when new production services are introduced.
Ozolciema iela 46 k-5 – 35, Rīga, LV-1058, Latvia
privacy@otnox.com