Privacy policy

Who is responsible for your data

The data controller is Angel Borisov, trading as AB Intelligence, Sofia, Bulgaria (below: we).

For questions and requests about your personal data, write to info@abintelligence.org.

What data we collect and why

• The contact form on the site: name, email, phone, company and message — to answer your enquiry. Basis: steps at your request before a contract.
• Sign-up and workspace on the platform: email, name, organisation details and the records you and your team enter — to provide the service. Basis: contract.
• Payments: processed by Stripe; we do not store card numbers. Basis: contract and statutory accounting duties.
• Technical data: IP address, browser, pages visited — for security and, only with your consent, for visit statistics. Basis: legitimate interest and consent.
• Correspondence: emails you send us and the platform's service emails (sign-up confirmation, password reset, record notifications).

Cookies and analytics

The site uses Google Analytics 4 only after you accept analytics cookies in the banner. Without consent Google Analytics does not record your visit. Strictly necessary cookies (for example, remembering your choice) need no consent.

The platform at app.abintelligence.org uses only the cookies and local storage needed for sign-in and the session.

Who we share data with

Processors acting on our instructions, for the stated purposes only:

• Supabase — the platform's database, sign-in and files; servers in the European Union (Frankfurt).
• Netlify — hosting of the site and the platform.
• Formspree (USA) — delivery of contact-form messages, under EU standard contractual clauses.
• Stripe — subscription payments.
• Resend — the platform's service emails.
• Google — site analytics, only with consent.
• The AI assistant's language-model provider and Telegram — only if you enable the assistant; it receives only the data needed for the specific request.

How long we keep data

• Contact-form data — up to 12 months after the last correspondence.
• Data in your workspace — while the account is active. After the trial the workspace stays readable.
• When a workspace is closed, records and files are kept for 30 days for recovery and then deleted. The audit trail of actions in it is retained separately.
• Accounting documents — for the periods required by Bulgarian law.

Your rights

Under the General Data Protection Regulation (GDPR) you have the right to:

• access your data and receive a copy;
• correct inaccurate data;
• erasure, where we have no legal ground to keep it;
• restriction of processing and objection;
• portability — an export of your workspace in a machine-readable format;
• withdraw consent at any time — for analytics cookies via the “Cookies” link at the bottom of every page, which reopens the banner;
• lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP), 2 Prof. Tsvetan Lazarov Blvd, Sofia, www.cpdp.bg.

Security

Access to data in the platform is restricted at the database level per workspace. Connections are encrypted (HTTPS), and administrative access to the platform requires a second factor. In the event of a security incident we notify you without undue delay.

Changes

When this policy changes, the date at the top is updated. Material changes are announced to registered users by email.