Privacy notice

What this site collects

• Contact form: your name, e-mail, company (optional), area of interest and message, plus the time you gave consent and the language of the page.
• Abuse prevention: a one-way keyed hash of your IP address (not the address itself) and your browser's user-agent, to rate-limit spam.
• Visit statistics: Cloudflare Web Analytics counts page views, referring sites, countries, browsers and page speed. It uses no cookies, stores no IP address and does not follow you across sites. There is no advertising or other third-party tracking, and the cookies we do use are listed below.

Presentations (deck.stopan.ai)

• Customer access: your name, e-mail, company and which presentations you may open. You sign in with a one-time code that Cloudflare Access sends to your e-mail.
• Guest links: a label naming the person we shared it with, optionally their e-mail, the expiry (2 days or 2 weeks) and how often the link was opened.
• Visit records: for each visit, who opened which presentation, when, for how long, the furthest slide, downloads, and whether the vendor selector was used. Kept for 90 days, then deleted. We use them to know what was useful and to follow up (legitimate interest).

The dashboard demo (demo.stopan.ai)

The demo has no accounts. To cap sign-ups it keeps a keyed hash of your IP address for the current day, and a one-time sign-in, in memory only; both disappear when the demo ends (at most 60 minutes) or the service restarts. Each demo start writes one log line (time and country), which is removed when the server logs rotate.

Why, and on what legal basis

To answer your enquiry, take steps at your request before a possible contract, and give customers the presentations they asked for (GDPR Art. 6(1)(b)); to protect the site against abuse, to understand how it is used and to follow up on material we shared (legitimate interest, Art. 6(1)(f)).

Who receives it

• Our own servers in Bulgaria: hosting of this website, its database and its backups.
• Cloudflare, Inc.: network protection, the spam check on the form, privacy-friendly visit statistics, sign-in to the presentations, and delivery of e-mail notifications.
• Google LLC: the mailbox where enquiry notifications arrive and from which we reply.

Transfers outside the EU

Cloudflare and Google are US companies. Both are certified under the EU–US Data Privacy Framework, and their data processing terms include the EU Standard Contractual Clauses, which we rely on for these transfers.

How long it is kept

Enquiries that do not lead to a business relationship are reviewed every quarter and deleted within 24 months. Presentation visit records are deleted after 90 days. Customer access ends with the business relationship or when you ask. Client records follow statutory accounting retention periods.

Cookies and similar storage

Everything below that is stored in your browser is strictly necessary for something you asked for (protection of the site, signing in, a choice you made), so it needs no consent under the ePrivacy rules. The visit statistics store nothing in your browser, and there are no analytics or advertising cookies.