How PAYMESE handles information
Desigo Ventures OÜ, registry code 17635464, is the controller for the PAYMESE website and marketplace during this release. This notice applies to public browsing, account profiles, listings, enquiries, deal rooms, verification results, decisions, invoices, private watchlists, action plans and support communication.
Private professional and local-service enquiries
When you request a specialist, explore a role or offer local services, PAYMESE processes the contact details, professional background, profile links, location, availability, commercial expectations and brief you provide to assess and respond to that request. Authorised staff may record interview notes, relevant evidence references and sharing permissions. Submitting a profile does not permit public publication or disclosure to prospective employers or other counterparties. PAYMESE seeks a separate agreement before sharing a profile or arranging an introduction. Do not submit identity documents, sensitive personal information or confidential information about other people through this form. Contact info@paymese.com to update or withdraw your profile.
Your operating workspace
Your private watchlist stores saved public opportunity details, decision stages and your notes. These notes are not shared with sellers or shown in the PAYMESE client desk. Action plans and support messages are available to you and authorised PAYMESE staff to progress your request. Message and task notifications link back to the signed-in workspace; their content is not included in these notification emails. Due-date email reminders are optional. CSV and calendar exports are downloaded to your device when you request them.
Information we collect
We process signed-in identity data, business and authority details, listing and enquiry content, deal-room terms and decisions, external verification method, result, source reference, review dates and audit history, versioned account acceptances, invoice and payment-status information, security events and technical logs. Authorised users may upload business and transaction files into private deal rooms. Passport, ID-card and selfie uploads are not permitted. We process file contents, filenames, upload times, integrity hashes and access permissions. Public teasers exclude the private company and contact fields.
Opportunity updates
Newsletter signup is optional and separate from your PAYMESE account. We record your email, consent wording version and time, and confirmation time. We send opportunity updates only after you confirm your email subscription. Each subscription email includes a way to unsubscribe. Withdrawing consent does not stop essential account or transaction messages. Contact info@paymese.com to request access or deletion; we may retain a minimal record of your opt-out to respect it.
Identity verification with Didit
If you choose the online identity check, Didit processes your ID document and face images on PAYMESE’s behalf to check document authenticity, liveness and face matching. The secure check opens on Didit’s website, where its privacy notice and terms are shown. PAYMESE retrieves the outcome through its server, compares the checked name with your current representative name and checks age 18+ from the document birth date. PAYMESE stores only the session reference, status, pass/fail indicators, check dates, profile version and your confirmation of the notice; it does not store the document image, document number, birth date or biometric template. A private session link is retained while you can continue the check. Company and representative authority are reviewed separately. Contact PAYMESE to request another verification method or exercise your privacy rights.
Signing in and account security
Email sign-in and authenticator verification use Supabase. Supabase processes the account email and authentication events to verify access. PAYMESE stores the provider account reference, encrypted provider session credentials and a hash of the browser session identifier. Essential Secure, HttpOnly cookies maintain the sign-in flow and session; they are not advertising cookies. Existing accounts can use their original sign-in once to connect verified email access without losing their saved work. Email access does not itself constitute identity, business or regulatory verification.
Why we use it
We use information to create and secure accounts, review anonymous listings, qualify enquiries, operate controlled introductions, preserve accepted term versions, record external checks and manage invoices, prevent misuse, respond to requests and meet accounting, claims, sanctions or other legal obligations. The legal basis depends on the activity and may be steps requested before a contract, performance of a contract, legitimate interests in operating a secure business marketplace, consent where requested, or compliance with law.
Controlled disclosure
PAYMESE does not publish account contact details. For a new introduction, both participants must have current identity and business checks, current account terms and acceptances of the same deal terms for their current company profiles. PAYMESE then authorises contact release. Identity verification is handled by an external checker under its own privacy notice and retention policy, made available before identity documents are provided. Business files stay private to the uploader and PAYMESE until the uploader permits sharing and PAYMESE grants access after the agreed introduction. Service providers supporting hosting, storage, email, verification, accounting or professional advice receive only the information needed for their work.
International processing
A cross-border marketplace may involve providers or counterparties outside the EEA. Where GDPR transfer restrictions apply, PAYMESE uses an available lawful transfer mechanism and proportionate safeguards. A participant’s information is not released to a proposed counterparty merely because that person submits an enquiry.
Retention and security
Records are retained for the period needed to operate the account or deal and for applicable accounting, legal-claim, fraud-prevention and regulatory periods. The verification record contains the result and reference, rather than a new identity-document image or biometric template. Business files remain restricted to authorised users and can be removed from the room. Relevant records may be retained where a legal duty requires it; previously downloaded copies are outside the platform’s deletion controls. PAYMESE uses access controls, private storage, versioned acceptances, audit events and controlled document permissions, while no internet service can promise absolute security.
Google Analytics and your cookie choices
With your consent, we use Google Analytics 4, provided by Google Ireland Ltd, for visitor statistics and to understand how our website is used. Analytics collection starts only after you select Accept. IP addresses are anonymised: Google Analytics 4 discards them before logging or storing the analytics data. Advertising storage and advertising personalisation remain disabled. We remember your choice in your browser’s local storage. You can withdraw consent at any time by opening Cookie settings in the footer and selecting Reject; this stops further analytics collection and removes the Google Analytics cookies set by this site. Essential sign-in cookies are unaffected.
Your rights and contact
Subject to applicable law, you may request access, correction, deletion, restriction, portability or objection and may complain to the Estonian Data Protection Inspectorate or another competent authority. Submit a privacy request through your secure PAYMESE workspace or by written correspondence to the registered address below. We may need to verify identity and authority before acting.