Privacy Policy

1. Data Controller

2. Data We Collect

We may collect the following categories of personal data:

• Contact information: name, email address, phone number, company name -- when you fill out a contact form, request a demo, or subscribe to our newsletter.
• Usage data: pages visited, time spent on pages, referral source -- collected through Vercel Analytics, which is cookieless and does not track personal data.
• Booking data: when you schedule a demo through Calendly, your name, email, and chosen time slot are processed by Calendly in accordance with their privacy policy.
• Communication data: any information you voluntarily provide in emails or messages to us.

3. How We Use Your Data

We use your personal data for the following purposes:

• To respond to your inquiries and provide customer support.
• To schedule and conduct product demonstrations.
• To send you information about our products and services (only with your consent).
• To improve our website and services based on aggregated, anonymized usage data.
• To comply with legal obligations.

4. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your data based on:

• Consent -- when you voluntarily submit a contact form, book a demo, or subscribe to communications.
• Legitimate interest -- to improve our services and website experience.
• Contractual necessity -- to provide our services when you become a customer.
• Legal obligation -- to comply with applicable laws and regulations.

5. Cookies and Tracking

Our website uses minimal cookies. Our analytics solution (Vercel Analytics) is fully cookieless and does not collect any personal data. The only cookies used are by the Calendly booking widget on our contact page, which requires your consent before loading. You can accept or decline cookies via our consent banner.

6. Data Sharing

We do not sell your personal data. We may share your data with:

• Calendly -- for demo booking functionality (subject to Calendly's privacy policy).
• Vercel Analytics -- anonymized, aggregated website usage data only.
• Email service providers -- to send transactional and marketing communications you have opted into.
• Legal authorities -- when required by law.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law. Contact form submissions and demo requests are retained for up to 24 months. You may request deletion at any time.

8. Your Rights

Under the GDPR, you have the following rights:

• Right of access -- request a copy of your personal data.
• Right to rectification -- request correction of inaccurate data.
• Right to erasure -- request deletion of your personal data.
• Right to restrict processing -- request limitation of how we use your data.
• Right to data portability -- receive your data in a structured, machine-readable format.
• Right to object -- object to processing based on legitimate interest.
• Right to withdraw consent -- withdraw consent at any time without affecting prior processing.

To exercise any of these rights, contact us at hello@planificator.bg.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes encryption in transit (TLS/SSL), secure cloud infrastructure, and access controls.

10. International Data Transfers

Some of our service providers are located outside the European Economic Area (EEA). In particular, our website is hosted on Vercel Inc. (United States), which also provides our analytics service (Vercel Analytics). When your data is transferred to the United States, the transfer is protected by Standard Contractual Clauses (SCCs) approved by the European Commission and, where applicable, the EU-U.S. Data Privacy Framework. Vercel Analytics is cookieless and does not collect personally identifiable information; only anonymized, aggregated usage data is processed.

11. Children's Privacy

Our services are not directed to individuals under 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this page periodically.

13. Contact Us