Predvora

Privacy policy

This policy is issued by Jakov Manojlovski, trading as Predvora ("Predvora", "we", "us"), operating from Bulgaria. Predvora provides a service that turns business websites into AI representatives.

This policy explains what personal data we process, why we process it, and your rights.

Two roles matter: for personal data our customers entrust to us, including their visitors' conversations and leads, the customer is generally the controller and Predvora acts as a processor on the customer's behalf. For account, service, security, and other data that Predvora collects for its own purposes, Predvora acts as the controller.

What we process, and why

  • Account data (we are controller): name, email address, password hash or Google sign-in identity, workspace membership, and subscription status. Purpose: providing and administering your account. Legal basis: performance of a contract.
  • Customer website content and documents (we are processor): pages of the customer's public website, read at the customer's instruction, and documents the customer uploads. We use this information to build that customer's knowledge base and provide the service.
  • Visitor conversations and leads (we are processor): messages exchanged with a representative, conversation summaries and outcomes, and contact details a visitor chooses to share. This information is made available to the business operating the representative. The business is the controller of this data.
  • Technical data (we are controller): hashed network identifiers, such as IP addresses in hashed form, and operational metadata used for security, abuse prevention, and service reliability. We do not store raw IP addresses long-term. Legal basis: our legitimate interest in securing and operating the service.
  • Communications (we are controller): information you provide when contacting us for support, sales, privacy requests, or other enquiries. We use it to respond to you, provide support, and operate Predvora. Legal basis: performance of a contract where applicable and our legitimate interests in operating and supporting the service.
  • Payments: purchases are made from Paddle, our merchant of record. Paddle processes payment and billing information as an independent controller under its own privacy policy and may share information with us that is necessary to provide and manage your Predvora subscription. We do not receive or store your full payment card details.

We may obtain personal data directly from you, from our customers, from visitors interacting with a representative, from publicly accessible customer websites at the customer's instruction, and from service providers involved in operating Predvora.

We do not sell personal data or use customer or visitor data for third-party advertising.

AI processing

Conversations and website content are processed by our AI service providers under appropriate data processing terms.

We do not use customer or visitor data to train AI models, and our agreements with those providers exclude training on this data.

Recipients and subprocessors

We share personal data only where necessary to operate Predvora.

Our service providers include Vercel (hosting and site analytics), Neon (database), Trigger.dev (background processing), Upstash (traffic management), Anthropic and OpenAI (AI processing), Firecrawl (website reading), Resend (email delivery), Cloudflare (bot protection), Sentry (error monitoring), and Axiom (operational logging).

Paddle handles purchases as our merchant of record and acts as an independent controller for the payment and billing data it processes.

A current list of subprocessors and processing regions is available on request.

International transfers

Some service providers may process data outside the European Economic Area. Where required, we rely on appropriate safeguards such as an adequacy decision, including the EU-U.S. Data Privacy Framework where applicable, or Standard Contractual Clauses approved by the European Commission.

You may contact us for more information about safeguards applicable to international transfers.

Retention

  • Conversation transcripts: retained for 12 months, then deleted automatically.
  • Leads and conversation-outcome records: retained while the customer's account exists.
  • Hashed IP identifiers: deleted after 30 days.
  • Account and billing records: retained for the life of the account and for any additional period required by applicable law.
  • Deleted workspaces: customer content is removed from active systems after deletion, subject to limited retention in backups and where retention is required by law.

Your rights

Under the GDPR, where applicable, you have rights including access, rectification, erasure, restriction of processing, data portability, and objection. You also have the right to lodge a complaint with the competent data protection supervisory authority.

Website visitors should normally direct requests relating to conversations or leads to the business whose representative they interacted with, because that business is the controller of that data. Predvora assists its customers in responding to such requests.

Customers can request export or deletion of their workspace at any time.

For privacy questions or requests, contact privacy@predvora.com.

Cookies and local storage

We use only strictly necessary cookies for functions such as sign-in and workspace preferences. We do not use advertising or cross-site tracking cookies.

The embedded representative may use browser session storage to maintain a conversation session. It does not use tracking cookies.

Changes

We may update this policy as Predvora develops or legal requirements change. Material changes will be announced on this page and, where appropriate, by email.

Operator: Jakov Manojlovski, trading as Predvora
Privacy contact: privacy@predvora.com