Privacy policy
What we collect, why, who else sees it, and what you can ask us to do with it. In short: this website sets no cookies, we only collect what you send us, and we don't sell anything to anyone.
Last updated: 5 November 2026
1. Who we are
The controller of your personal data is AI Solutions 2026 (Ей Ай Солушънс 2026), ЕИК 208961316, registered at ul. Mermer Kamak, Ruse, Bulgaria ("Orbit", "we").
For anything about your data, email info@aisolutions-bg.com or write to the address above. We reply within one month, usually much sooner.
2. What we collect and why
When you visit the website
Our server receives the technical data every browser sends: IP address, browser type, the page requested and the time. We use it only to deliver the page and to protect the site from abuse, and our hosting provider keeps it in server logs for a short time (see section 5). Legal basis: our legitimate interest in running a secure website (Art. 6(1)(f) GDPR).
We don't use analytics, advertising or tracking tools, and the website doesn't load anything from third parties: fonts and images are served from our own server.
When you use the contact form or email us
We receive what you enter: your name, business name, email, phone number, what you're interested in and your message. We use it to answer you, arrange a demo, or prepare a quote. Legal basis: steps you've asked us to take before a contract (Art. 6(1)(b)) and our legitimate interest in replying to business enquiries (Art. 6(1)(f)).
We won't add you to a newsletter or send you marketing unless you ask for it.
When you subscribe to a plan
Checkout is handled by Stripe. We receive your name, business name, email, billing address, VAT number if you give one, the plan you chose, and the status of your subscription and payments. We never see or store your full card number; Stripe holds it.
We use this to provide the service, bill you, issue invoices, and keep the accounting records Bulgarian law requires. Legal basis: performing our contract with you (Art. 6(1)(b)) and our legal obligations under accounting and tax law (Art. 6(1)(c)).
3. Cookies
This website sets no cookies and stores nothing in your browser, so there is no cookie banner. If that ever changes, for example if we add analytics, we'll ask for your consent first and update this policy.
Stripe's checkout and billing pages are run by Stripe on its own domain and use cookies that are needed for payments and fraud prevention. Those are covered by Stripe's privacy policy.
4. Who else processes your data
We use a small number of service providers. Each processes data only on our instructions and under a data-processing agreement, unless noted.
| Provider | What for | Where |
|---|---|---|
| Amazon Web Services EMEA SARL | Hosting the billing server and the call platform | Sweden (Stockholm, EU) |
| Cloudflare, Inc. | Delivering the website, protecting it from attacks and sending contact form messages to our inbox | Global network; EU and US under the EU-US Data Privacy Framework and Standard Contractual Clauses |
| Stripe Payments Europe, Ltd. | Payments, subscriptions, invoices. Stripe also acts as an independent controller for fraud prevention and its legal obligations. | Ireland (EU); some processing in the US under the EU-US Data Privacy Framework and Standard Contractual Clauses |
| Zoho Corporation B.V. | Our business email | EU (Zoho's EU data centres) |
We may also share data with our accountant and with authorities when the law requires it. We don't sell personal data or share it for advertising.
5. How long we keep it
- Server logs: up to 30 days.
- Enquiries that don't lead to a contract: up to 2 years after our last contact, then deleted.
- Customer account data: for as long as you're a customer, then up to 1 year so you can come back or settle open questions.
- Invoices and payment records: as long as Bulgarian accounting and tax law requires, currently up to 10 years.
6. Your rights
Under the GDPR you can ask us to:
- show you the personal data we hold about you and give you a copy;
- correct anything that's wrong or incomplete;
- delete it, unless we have to keep it by law (e.g. invoices);
- restrict how we use it while a question is being resolved;
- give it to you, or another provider, in a machine-readable format;
- stop using it where we rely on legitimate interest. We'll stop unless we have compelling grounds to continue.
Email us to use any of these rights. It's free, and we may ask you to confirm your identity first.
You can also complain to the Bulgarian supervisory authority, the Commission for Personal Data Protection (КЗЛД), 2 Prof. Tsvetan Lazarov Blvd, 1592 Sofia, www.cpdp.bg. We'd appreciate the chance to sort it out with you first.
7. Calls our assistant handles for our customers
When the assistant answers calls for a business that uses our service, that business is the controller of its callers' data (for example their name, phone number, booking details, and call recordings or transcripts). We process that data only on the business's instructions, under a data-processing agreement we sign with every customer, and on infrastructure in the EU.
For medical centres and hospitals, booking calls contain health data (a special category under Art. 9 GDPR), because even the specialty a caller asks for says something about their health. We handle it only for booking the visit: the assistant never asks for a personal ID number (ЕГН), and it does not give medical advice.
If you called a business that uses our assistant and have a question about your data, please contact that business. If you contact us instead, we'll pass your request on to them.
The assistant tells callers it is an AI if they ask.
8. Changes to this policy
If we change how we handle personal data, we'll update this page and the date at the top. If the change matters to existing customers, we'll email them before it takes effect.