Privacy policy

1. Who is responsible

The controller is the provider named above. For any privacy question or to exercise your rights, write to stefan@simicdev.com.

2. What we process and why

We process only what you give us or what is needed to run the site.

• Visiting the site: IP address, browser and device type, pages requested and time. Our hosting provider records this in server logs to deliver the site, keep it secure and fix errors (legitimate interest). We also use Vercel Web Analytics to count visits in aggregate; it does not use cookies or follow you across sites.
• Project inquiry (/start): name, email, phone (optional), company, industry, website, goals, timeline, budget range and your message. Used to answer you and prepare an offer (steps taken at your request before a contract). We keep inquiries that do not lead to cooperation for up to 24 months, then delete them.
• Chat: the messages you write, the language and the answers gathered during the conversation. Replies are drafted by an AI assistant and the provider can read the conversation and take over. Please do not share passwords, payment data or other sensitive information in the chat. Retained like an inquiry.
• Recommendation quiz (/recommend): your answers, email, optional name and the offer code created for you. Used to show the result and send the offer; if you tick the box, also for occasional news (consent).
• Newsletter: email address, language and the page you signed up from. Double opt-in: nothing is sent until you confirm. Kept until you unsubscribe; we then keep only what is needed to prove consent and to avoid writing to you again.
• Contracts and invoices: if we work together, we process your business contact details and billing data to perform the contract and to meet accounting and tax obligations, which require us to keep invoices for the legally prescribed period.
• Abuse protection: a salted hash of your IP address (not the address itself) limits how often forms and the chat can be used, to prevent spam (legitimate interest).

3. Cookies and similar technologies

Strictly necessary: your language choice (cookie NEXT_LOCALE), your light/dark theme (browser storage) and the record of your cookie choice (cookie cookie_consent, one year). These need no consent.

Marketing, only if you accept: the Meta Pixel and the Meta Conversions API measure our ads and show them to relevant people. With your consent, Meta receives your IP address, browser details, cookie identifiers (_fbp, _fbc), the pages you view and, when you submit a form, your email, phone number and name in hashed form. Meta Platforms Ireland Ltd. is responsible for its own use of this data. Nothing is loaded before you accept.

You can change or withdraw your choice at any time with the "Cookie settings" link in the footer of the home page. Withdrawal does not affect earlier processing.

4. Who receives your data

We use the following service providers, who process data on our instructions or under their own terms:

• Vercel Inc. – hosting and web analytics.
• Supabase Inc. – database for inquiries, chat, quiz results and subscribers.
• Resend – sending of confirmation and notification emails.
• OpenAI – generating the chat assistant's replies; the text of your chat messages is sent to OpenAI.
• Meta Platforms Ireland Ltd. – only with your cookie consent (see above).
• Calendly – if you book a call, scheduling takes place on Calendly under its own privacy policy.

We do not sell personal data. Some providers are based outside Serbia and the EEA (for example in the USA). Where that is the case, transfers rely on an adequacy decision, the EU-US Data Privacy Framework or standard contractual clauses.

5. How long we keep data

Only as long as the purpose requires: inquiries and chats up to 24 months if no cooperation follows, newsletter data until you unsubscribe, invoices and accounting records for the period set by law, and server logs for a short period set by the hosting provider.

6. Your rights

You have the right to:

• access the data we hold about you and receive a copy;
• have inaccurate data corrected and incomplete data completed;
• have your data erased, where there is no reason for us to keep it;
• restrict processing in certain cases;
• receive the data you gave us in a portable format;
• object to processing based on our legitimate interest;
• withdraw consent at any time (newsletter, marketing cookies).

Write to stefan@simicdev.com; we answer within 30 days. You may also complain to a supervisory authority: in Serbia the Commissioner for Information of Public Importance and Personal Data Protection (poverenik.rs), or the authority of your own country or federal state if you are in the EU.

7. Security and automated decisions

Data is transmitted over HTTPS and stored in access-controlled systems; only the provider can open inquiries and chats. No decision with legal or similarly significant effect is made about you by automated means. The AI chat assistant only collects information and answers questions.

This site is not directed at children under 16.

8. Changes

We update this policy when the site or the law changes. The date at the top shows the latest version.