Your evidence stays yours.

MB Bird (trading as BIRD), company code 308111297, J. Janonio g. 12A-1, LT-92252 Klaipėda, Lithuania, is responsible for personal data used to administer BIRD accounts, operate our website and services, communicate with you, and keep the platform secure.

This policy covers birdinspect.com, the BIRD web application, BIRD mobile application, our APIs, and related customer support. It does not cover third-party websites or services that have their own privacy notices.

BIRD is a business service. When a customer organisation decides why and how personal data is included in an inspection, report, photograph, recording, or other project material, that customer is normally the controller and MB BIRD processes the data on its instructions. The customer's agreement with us governs that processing.

If you are an occupant, property owner, tenant, employee, contractor, or other person whose information appears in customer inspection content, please contact the relevant customer first. We will assist that customer in responding to valid requests.

The data we handle depends on how you use BIRD.

• —Account and organisation data, such as your name, work email address, profile details, role, organisation membership, authentication records, and session information.
• —Inspection and report content, such as property addresses and details, rooms and building components, photographs, documents, voice recordings, transcripts, notes, findings, signatures, and report outputs.
• —Contact and support data, including the information you send through our contact form, by email, or during support conversations.
• —Technical and security data, such as IP address, device and browser type, app version, timestamps, request metadata, and diagnostic or security logs.
• —Camera, photo-library, and microphone data only when you choose features that need those device permissions. BIRD does not currently collect precise device location.

We receive data directly from you when you create an account, submit a form, capture or upload inspection evidence, prepare a report, or contact us. We also receive data from your organisation's account administrator and collect limited technical data automatically when our services are used.

If you choose to open a property address in Google Maps, the address or search query is sent to Google under Google's own privacy terms. BIRD does not receive your precise location from that action.

We process personal data only where we have a legal basis under applicable data-protection law.

• —Contract: to create and manage accounts, accept inspection evidence, generate and store report drafts, provide exports, and deliver support requested by you or your organisation.
• —Legitimate interests: to secure, maintain, troubleshoot, and improve BIRD; prevent misuse; understand service performance; and communicate about an existing business relationship, where those interests are not overridden by your rights.
• —Legal obligation: to comply with accounting, tax, law-enforcement, regulatory, and other legal requirements.
• —Consent: where the law requires it, including for optional device permissions or communications. You may withdraw consent at any time without affecting earlier lawful processing.

BIRD sends relevant inspection inputs, which may include photographs, audio, transcripts, notes, and building context, to Google Cloud's Vertex AI and Gemini services. This processing helps transcribe voice notes, organise evidence, identify visible building components, and prepare report-ready drafts.

AI output supports professional work; it does not replace the inspector's judgement. Users are expected to review and correct outputs before relying on or sharing a report. BIRD does not make solely automated decisions that produce legal or similarly significant effects about individuals.

We do not use customer inspection content to train general-purpose AI models. Customers and users must have an appropriate legal basis for content they capture and should avoid recording people or unrelated personal information whenever possible.

We share personal data only as needed to provide the service, follow customer instructions, protect BIRD and its users, complete a business transaction, or comply with law. Our principal service providers currently include Supabase for authentication, database, and storage infrastructure; Google Cloud for application infrastructure, object storage, and Vertex AI/Gemini processing; and email delivery providers for service and contact messages.

Customer administrators and authorised members of your organisation can access data according to their roles. Reports or project content may also be shared with recipients selected by authorised users. Our providers may process data only for contracted services and must protect it appropriately.

We do not sell personal data and do not share it for cross-context behavioural advertising.

We configure core Google Cloud processing in the European Union where supported. Some providers or their support operations may process data outside Lithuania or the European Economic Area. Where required, we use recognised safeguards such as an adequacy decision, the European Commission's Standard Contractual Clauses, and supplementary security measures. Contact us if you would like information about the safeguards relevant to your data.

We keep account and customer content for as long as needed to provide BIRD and for the period agreed with the customer. After an account or contract ends, we delete or anonymise personal data when it is no longer needed, subject to backup cycles, unresolved disputes, security needs, and legal retention obligations.

Retention depends on the type of record, the customer's instructions, contractual commitments, legal requirements, and whether the data is needed to establish or defend claims. You or your organisation may delete eligible project content through available product controls or request deletion by emailing info@birdinspect.com. In the mobile app, you can permanently delete your login and profile from Profile → Delete account. You may also send an account-deletion request to the same email address. We may need to verify your identity and coordinate with your organisation's administrator.

We use technical and organisational measures designed to protect personal data, including access controls, organisation-level separation, authenticated access, encrypted network connections, restricted service credentials, and controlled storage access. No internet service is completely secure, so we cannot guarantee absolute security. Please contact us promptly if you believe an account or inspection has been compromised.

Depending on applicable law, you may ask to access, correct, erase, or restrict your personal data; object to certain processing; receive data you provided in a portable format; or withdraw consent. You may also complain to the Lithuanian State Data Protection Inspectorate or the supervisory authority where you live or work.

Send requests to info@birdinspect.com. We may ask for information needed to verify your identity. If MB BIRD processes the relevant data for a customer, we will forward or support the request as appropriate. These rights can be limited in specific circumstances permitted by law.

BIRD uses cookies or similar browser storage that are necessary for authentication, security, session continuity, and language preferences. The current service does not use third-party advertising cookies. If we introduce optional analytics or other non-essential technologies, we will update this policy and request consent where required.

BIRD is a professional business service and is not directed to children. People under 18 should not create an account or submit personal data to us. If you believe a child has provided personal data, contact us so that we can investigate and delete it where appropriate.

We may update this policy as BIRD, our providers, or legal requirements change. We will publish the revised version here, change the effective date, and provide additional notice where a change materially affects your rights or where the law requires it.