Privacy Policy

Who is responsible

Nacho Tsvetkov — independent software engineer and consultant, based in Sofia, Bulgaria.

Contact for privacy questions or requests: nacho.tsvetkov@gmail.com

What data I collect

The amount of data depends on how you interact with the site:

• Contact & lead forms — email, business type, free-text answers about your situation, goals, budget, and interest level when you request a free AI opportunity report or similar intake form.
• Checkout — name, email, business name, phone (optional), and order notes when you pay for a service or bundle via PayPal or email invoice.
• Marketing analytics (only if you click Accept on the cookie banner) — page views, button clicks, checkout steps, and hashed identifiers (email/phone when you enter them on forms) sent to Meta (Facebook) Pixel and Conversions API for ad measurement.
• Cookies & local storage — your language preference (locale), theme (light/dark), shopping cart contents (via Shopify), marketing consent choice (accepted/rejected, 365 days), and session-scoped form identifiers for analytics matching when consent is granted.
• Server logs — standard hosting data (IP address, browser type, timestamps) retained briefly by Vercel as part of normal web hosting.

Why I use your data

• Respond to your enquiries and deliver free personalised reports you request.
• Process orders, schedule discovery calls, and provide the services you purchase.
• Improve the website and measure marketing performance (Meta Pixel / CAPI) — only after you accept cookies.
• Maintain internal CRM records (Firebase / Firestore) so I can follow up consistently and not lose context between touchpoints.

Legal basis (GDPR)

• Consent — marketing cookies and Meta Pixel tracking (you can reject or withdraw consent anytime by clearing site cookies).
• Contract / pre-contract steps — processing checkout details and form submissions needed to deliver a service you asked for.
• Legitimate interest — basic site operation, fraud prevention, and replying to business enquiries at a proportionate level.

Third parties

I do not sell your personal data. I share data only with processors that help run this site:

• Meta (Facebook) — ad analytics when you accept marketing cookies.
• PayPal — payment processing when you pay online.
• Google Firebase / Firestore — secure storage of leads, orders, and journey records.
• Shopify — product catalog and cart session for the demo store areas of the site.
• Vercel — website hosting and edge delivery.
• Calendly — when you book a call via an external scheduling link (their privacy policy applies on their domain).

How long I keep data

Lead and order records are kept for as long as needed to deliver services, maintain business records, and follow up on enquiries — typically up to 3 years unless a longer period is required by law or you ask for deletion sooner.

Marketing consent cookie — 365 days. Session analytics identifiers — cleared when you close the browser tab.

Your rights

If you are in the EU/EEA (including Bulgaria), you have the right to access, rectify, erase, restrict, or export your personal data, and to object to certain processing. You may also lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP).

Email nacho.tsvetkov@gmail.com with the subject “Privacy request” and I will respond within 30 days.

Security

Data is transmitted over HTTPS. Firestore access is protected by security rules. Payment card data is handled entirely by PayPal — I never store card numbers on this site.

Changes to this policy

I may update this page when the site’s features or legal requirements change. The “last updated” date at the bottom reflects the most recent revision.