Privacy Policy
Updated: October 13, 2026
This template must be reviewed by a lawyer before publishing.
1. Who we are
Data controller: {{COMPANY_OR_SOLE_PROPRIETOR}}, tax ID {{TAX_ID}}, address {{LEGAL_ADDRESS}}, email {{PRIVACY_EMAIL}} ("we"). We process data under the Law of Ukraine "On Personal Data Protection" and the EU General Data Protection Regulation (GDPR) for visitors from the EU.
2. Data we collect
- Form and chat data: name, contact (phone, email, Telegram username), task description, attachments, answers in the calculator, quiz and AI brief.
- Technical data: IP address (stored hashed), browser type, referring pages, UTM tags and click IDs (gclid, fbclid) for up to 90 days.
- Analytics and marketing cookies only with your consent (see the Cookie Policy).
- Payment data is processed by payment providers (WayForPay, Stripe). We never receive or store card numbers.
3. Why we process data
| Purpose | Legal basis |
|---|---|
| Reply to your request and prepare an offer | Consent, pre-contract steps |
| Perform the contract and support | Contract |
| Send the newsletter | Consent (double opt-in), one-click unsubscribe |
| Analytics and site improvement | Cookie consent |
| Security and anti-spam | Legitimate interest |
4. AI features
Messages in the AI chat, AI brief and Lab are processed by the model provider (Anthropic) via API. The provider does not train models on API data. Do not send passwords, card data or medical information in the chat. AI request logs used to improve prompts contain no personal data. Documents uploaded to the Lab are deleted automatically after 1 hour.
5. Who we share data with
Only processors needed to run the service: hosting (Vercel), database ({{DB_PROVIDER}}), email (Resend), CRM ({{CRM}}), Telegram (team notifications), analytics (Google, Meta, PostHog - with consent), payment providers. Contracts or standard contractual clauses apply to transfers outside the EU.
6. Retention
- Requests and correspondence: up to 3 years after the last interaction.
- AI chat conversations: 12 months.
- Lab files: 1 hour.
- Newsletter data: until you unsubscribe.
7. Your rights
You may request access, correction, deletion, restriction, portability, withdraw consent and lodge a complaint with a supervisory authority. Email {{PRIVACY_EMAIL}} and we will reply within 30 days.
8. Security
HTTPS/HSTS, least-privilege access, two-factor admin authentication, daily backups, bot protection on forms.
9. Changes
We may update this policy. The latest revision date is shown on this page.