What I do with your data

The short version: I collect only what I need to write your posts, I never sell it, and I never show your work to anyone else. Last updated 7 October 2026.

Who I am

Blessed Pirate is run by Annika Helendi through Astronaut Veebiturundus OÜ, a company registered in Estonia (registry code 12141935). Astronaut Veebiturundus OÜ is the data controller for the personal data described here. You can reach me at support@blessedpirate.com.

What I collect

When you apply: your name, email, whether the posts are for you or your company, your LinkedIn profile or company website, the plan and extras you pick, and anything you write in the notes.
When I review your application: public information from your LinkedIn profile and website, such as your profile photo, role, recent posts, what your company sells, your logo and brand colours.
When you become a client: your billing details, the brand file I build for you, the posts and blogs I write, and the feedback you send.
Payments: Stripe handles your card details. I never see or store your full card number.

When you visit this website: which pages you view, how you got here, your browser and device type, and your approximate location (country or city, based on your IP address). I use this to see which parts of the site are useful.

The analytics run without cookies and don't store anything on your device, so there's no cookie banner. This website uses no advertising cookies.

Why I use it, and the legal basis

To review your application and reply to you. This is a step you ask for before we sign up, so the basis is the contract (GDPR Article 6(1)(b)).
To deliver the service: writing posts in your voice, making images, emailing batches and handling feedback. Basis: the contract.
To bill you and keep accounting records. Basis: legal obligation (Article 6(1)(c)).
To keep the service secure and working. Basis: legitimate interest (Article 6(1)(f)).
To measure how people use this website and improve it. Basis: legitimate interest (Article 6(1)(f)).

I don't use your data for marketing to you unless you ask, and I never sell it.

Who helps me process it

I use a small set of tools to run Blessed Pirate. Each one only gets the data it needs:

Airtable stores applications, client brand files and posts.
Hostinger hosts this website.
PostHog (EU cloud, hosted in Germany) measures website visits without cookies.
Stripe processes payments and sends invoices.
Google Workspace (Gmail) sends and receives email, including your post batches.
Slack notifies me when a new application arrives.
AI writing tools (such as Claude by Anthropic) help draft posts from your brand file. I don't use tools that train their models on your content.

Some of these providers are based in the United States. Where data leaves the EU, they rely on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

How long I keep it

Applications that don't lead to a plan: deleted within 12 months.
Client data: kept while you're a client and for 12 months after you leave, in case you come back. Ask and I delete it sooner.
Invoices and accounting records: 7 years, as Estonian accounting law requires.

Confidentiality

Blessed Pirate is a ghostwriting service. I don't publish, show or mention your posts, your brand file or the fact that you're a client without your written permission.

Your rights

You can ask me to show you the data I hold about you, correct it, delete it, limit how I use it, or send it to you in a portable format. You can also object to processing based on legitimate interest. Email support@blessedpirate.com and I'll reply within 30 days.

If you think I've handled your data wrongly, you can complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) at aki.ee, or to the data protection authority where you live.

Changes

If I change this policy, I'll update the date at the top. Clients get an email about any change that affects them.