Privacy Policy

This Privacy Policy explains how Giorgos Moustakas ("we", "us"), operating the client portal at clients.georgemou.gr, collects and processes your personal data in line with the EU General Data Protection Regulation (GDPR). The data controller is Giorgos Moustakas, Greece. Contact: me@georgemou.gr.

What we collect

We only collect what we need to run your projects and invoicing:

• Account data: name, email, company, phone number.
• Project data: projects, milestones, files, and activity related to your engagement.
• Billing data: invoices and their payment status (payments are handled by third-party providers; we do not store card details).
• Communications: messages and emails you exchange with us through the portal.
• Technical data: an essential session cookie to keep you signed in.

Why we process it (legal bases)

• Contract (Art. 6(1)(b)): to deliver services, manage projects, and issue invoices.
• Legal obligation (Art. 6(1)(c)): to meet tax and accounting requirements (e.g. AADE invoicing).
• Legitimate interests (Art. 6(1)(f)): to secure the portal and communicate about your work.
• Consent (Art. 6(1)(a)): for any optional emails you opt into. You can withdraw consent at any time.

Who processes your data

We use trusted processors under data-processing agreements:

• Supabase - database, authentication, and file storage (EU region).
• Vercel - application hosting.
• Resend - transactional email delivery.
• Google (Gemini API) - optional AI features that assist with drafting and summaries.

Some providers may process data outside the EU under appropriate safeguards (e.g. Standard Contractual Clauses).

How long we keep it

We keep account and project data for as long as your engagement is active, and billing records for as long as legally required for tax purposes. You can request deletion of data we are not legally required to retain.

Your rights

Under the GDPR you have the right to access, rectify, erase, restrict, and port your data, and to object to processing. You can exercise your data rights from your account's Privacy & data section, or by emailing me@georgemou.gr. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA).

Cookies

We use only an essential cookie for authentication. See our Cookie Policy.