Privacy Policy

1. Who we are

The data controller is Invenios Ltd, based in Varna, Bulgaria. For any privacy question or to exercise your rights, contact us at hello@invenios.dev.

2. What data we collect

We only collect data you choose to give us, plus limited technical data needed to run the site:

• Project enquiries — when you use the contact form or the “Discuss a project” intake (form, AI chat, WhatsApp or call), we collect what you provide: typically your name, email, company, phone number, budget range and the description of your project.
• AI intake conversation — the messages you type into the AI intake are processed to help scope your project and are sent to us as a lead summary.
• Technical data — like any website, our hosting provider may process your IP address and basic request logs for security and reliability.
• Local storage — small entries saved in your browser (for example, remembering that you already submitted an enquiry, and your cookie choice). See our Cookie Policy.

3. Why we use it and our legal basis

• To respond to your enquiry and take steps to enter into a possible contract with you — Art. 6(1)(b) GDPR (pre-contractual steps) and Art. 6(1)(f) (our legitimate interest in answering prospective clients).
• To operate, secure and improve the website — Art. 6(1)(f) (legitimate interest).
• For any non-essential cookies or future analytics — only with your consent, Art. 6(1)(a).

4. AI processing

The AI intake uses a third-party large-language-model provider to understand your messages and help structure your requirements. Please do not enter sensitive personal data, passwords or confidential third-party information into the chat. The conversation is used solely to prepare your enquiry for our team.

5. Who we share data with

We do not sell your data. We share it only with service providers (“processors”) who help us run the site and respond to you, under appropriate agreements:

• Our website hosting and infrastructure provider.
• Our email delivery provider, used to send us your enquiry.
• Our AI model provider, used only for the AI intake.

6. International transfers

Some providers may process data outside the European Economic Area. Where that happens, the transfer is protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses.

7. How long we keep it

We keep enquiry data only as long as needed to respond to you and, if we work together, for the duration of our engagement plus any period required by law (for example, tax and accounting rules). After that it is deleted or anonymised.

8. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased;
• restrict or object to processing;
• data portability;
• withdraw consent at any time, where processing is based on consent.

To exercise any of these, email hello@invenios.dev. You also have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (КЗЛД) at cpdp.bg.

9. Changes to this policy

We may update this policy from time to time. The “last updated” date above reflects the current version.

10. Contact

Questions about this policy or your data? Email hello@invenios.dev.