GDPR Compliance

MindGear is the data controller for RouteForge. All personal data is processed within the European Union. Contact the DPO: hello@routeforge.eu

• Contract performance (Art. 6(1)(b)): Account data and API usage logs are processed to provide the service you signed up for.
• Legitimate interests (Art. 6(1)(f)): Security monitoring and abuse prevention.
• Legal obligation (Art. 6(1)(c)): Retention of billing records as required by Romanian fiscal law.

We collect only what is necessary. API request payloads (coordinates, addresses, route parameters) are never logged. We log only: endpoint name, HTTP status, response time, cost, and timestamp.

• Right of access (Art. 15): Request a copy of all data we hold about you.
• Right to rectification (Art. 16): Correct inaccurate data via your dashboard or by contacting us.
• Right to erasure (Art. 17): Delete your account and all associated data.
• Right to restriction (Art. 18): Ask us to pause processing while a dispute is resolved.
• Right to portability (Art. 20): Export your usage data in JSON format from the dashboard.
• Right to object (Art. 21): Object to processing based on legitimate interests.

To exercise any right, email hello@routeforge.eu. We respond within 30 days. You also have the right to lodge a complaint with the Romanian data protection authority (ANSPDCP) or your local supervisory authority.

We do not transfer personal data outside the European Economic Area. All infrastructure (database, authentication, file storage) operates within EU boundaries.