Privacy policy

The data controller is Splype, an AI agent studio based in Novi Sad, Serbia.

Contact for data questions and requests: the contact form on this site.

We process data in accordance with the Law on Personal Data Protection of the Republic of Serbia (Official Gazette RS No. 87/2018).

• Contact form: name, email and/or phone number, company name, what you are interested in and your message.
• Audit questionnaire: details about your company and the process you want to automate, your name, email, phone number and preferred way of contact.
• Technical data: the page the request was sent from, UTM tags from the link you followed and the site language. When you visit the site, our server receives your IP address and browser data to deliver the page; we do not keep a visit log.
• Visitor analytics — only if you accept analytics cookies: the pages you open, button clicks and form submissions, where the visit came from, your device, browser and approximate location (country, city). Google Analytics does not store your IP address.

We do not ask for health data or other special categories of data. Please do not enter them in free-text fields.

• To reply to your request, carry out the audit and prepare a proposal — based on your consent and on steps taken at your request before entering into a contract.
• To protect the forms from spam and abuse — based on our legitimate interest.
• To understand how the site is used and improve it (visitor analytics) — only based on your consent in the cookie banner.

We do not use your data for marketing emails, do not sell it and do not make automated decisions that have legal effects on you.

Only members of our team see your data. To run the site, we use the following services:

• CLODO CLOUD SERVICE CO. L.L.C (Clodo, UAE) — site hosting; the server is in the EU (Amsterdam, Netherlands). Requests are not stored on it: the server only passes them on to the database and Telegram.
• Supabase, Inc. — the database where we store requests; servers in the EU (Frankfurt).
• Telegram Messenger Inc. — a notification about a new request in our team’s work chat: name, contact details, company and message.
• Google Ireland Limited and Google LLC — visitor analytics (Google Analytics 4), only if you accept analytics cookies. We have turned off advertising signals and ad personalisation.

We disclose data to public authorities only when the law requires us to.

The site server and the request database are in the EU. Google and Telegram may process data on servers outside Serbia and the EU, including in countries that do not offer the same level of data protection. Public authorities in such countries may have broader access to data.

Transfers to Supabase and Google rely on standard contractual clauses. For Telegram notifications, the basis is your explicit consent, which you give by ticking the box in the form after being informed of this risk.

• Requests and questionnaires — up to 2 years after our last communication with you; if we sign a contract — as long as the contract and accounting laws require.
• Spam — deleted as soon as we detect it.
• Server error logs — may contain IP addresses; their size is limited and old entries are deleted automatically.
• Analytics data — Google Analytics keeps it for 14 months, then deletes it automatically.

When the period ends or you withdraw consent, we delete the data from the database and the messages in Telegram.

Cookies are small files a site stores in your browser. On your first visit, a banner asks whether you allow analytics cookies. We do not use advertising cookies.

Necessary — set without consent, because without them the site cannot remember your choice or protect itself:

• cookie_consent — remembers whether you accepted analytics; set by our site; kept for 6 months.
• audit-draft-v1 (browser local storage, not a cookie) — a draft of the audit questionnaire so you do not lose your answers; stays on your device only and is deleted when you submit the questionnaire.

Analytics — only if you click “Accept”:

• _ga — Google Analytics, tells visitors apart using a random identifier; kept for 1 year.
• _ga_<ID> — Google Analytics, keeps the state of the visit; kept for 1 year.

You can change your choice at any time via the “Cookie settings” link in the site footer. When you withdraw consent, analytics is switched off and the _ga cookies are deleted from your browser. You can also delete cookies yourself in your browser settings.

You have the right:

• to know whether we process your data and to get a copy of it;
• to have inaccurate data corrected or completed;
• to have your data deleted or its processing restricted;
• to receive your data in a machine-readable format and transfer it to another controller;
• to object to processing based on legitimate interest;
• to withdraw your consent at any time — this does not affect processing carried out before withdrawal.

Send your request to the contact in section 1. We reply within 30 days.

If you believe your rights have been violated, you can file a complaint with the Commissioner for Information of Public Importance and Personal Data Protection — www.poverenik.rs. If you are in the EU, you have the same rights under the GDPR.

Data is transmitted only over HTTPS. The database cannot be accessed from the browser — only the site’s server writes to it, and only our team has access.

The site is intended for businesses. We do not knowingly collect data from persons under 15.

When we change the policy, we publish the new version with its date on this page. With every request we store the version of the policy you agreed to.