Privacy Policy

Last updated: 2 June 2025

1. Introduction

This Privacy Policy explains how Nevora LTD (“Nevora”, “we”, “us”, or “our”) processes your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the Bulgarian Personal Data Protection Act. We are committed to protecting your privacy and handling your information transparently and securely.

By using our website or services, you consent to the practices described in this policy.

2. Controller Information

Company: Nevora LTD
Company Number: 207597799
VAT Number: BG207597799
Registered Address: ulitsa Tsar Asen 11, 1000 Sofia, Bulgaria
VAT Registration Date: 27 November 2023
Data Protection Officer: Charles Camp (privacy@nevora.ai)

3. What Personal Data We Collect

We collect and process the following categories of personal data:

Category	Examples	Source
Identification data	Name, company name	Directly from user (e.g., contact form)
Contact data	Email address	Directly from user
Technical data	IP address, browser type, cookies	Google Analytics / website use
Communication data	Content of inquiries, form submissions	Contact forms
Marketing data	Preferences and interactions	Via newsletter or third-party tools

4. Legal Bases for Processing

We process your personal data only when a legal basis under Article 6 of the GDPR applies:

• Consent (Art. 6(1)(a)) – For optional communications such as marketing emails.

• Performance of a contract (Art. 6(1)(b)) – When you contact us for services.

• Legitimate interests (Art. 6(1)(f)) – For analytics, security, and site improvement.

You may withdraw consent at any time by emailing privacy@nevora.ai.

5. How We Use Your Data

We use your data for:

• Responding to inquiries and requests

• Delivering services and communications

• Marketing and outreach (if opted in)

• Security and analytics

• Legal compliance

We do not engage in automated decision-making or profiling.

6. Data Transfers

We use Google Workspace and Google Analytics, which may involve transferring data outside the European Economic Area (EEA). When such transfers occur, we ensure that:

• Data is stored in EU-based datacentres whenever possible

• Standard Contractual Clauses (SCCs) approved by the European Commission are in place

• Additional safeguards (e.g., access restrictions, encryption) are applied

We do not knowingly transfer data to jurisdictions lacking adequate protection unless appropriate legal measures are in place.

7. Data Retention

We retain personal data only as long as necessary for the purposes stated above:

• Contact data: up to 2 years after last interaction

• Analytics data: per cookie expiration (usually <2 years)

• Consent records: up to 6 years for audit purposes

8. Your Data Rights

Under the GDPR, you have the right to:

• Access your personal data (Art. 15)

• Rectify inaccurate data (Art. 16)

• Erase data (“right to be forgotten”) (Art. 17)

• Restrict processing (Art. 18)

• Object to processing (Art. 21)

• Data portability (Art. 20)

• Withdraw consent at any time (Art. 7)

You may exercise these rights by contacting: privacy@nevora.ai

You also have the right to lodge a complaint with your local Data Protection Authority.

9. Cookies

For full details on the cookies we use, including their purpose, type, and retention, please refer to our Cookie Policy. This is automatically updated based on the cookies currently active on our site and your consent preferences.

10. Contact Us

For all questions or requests related to this policy, contact:

Charles Camp
Email: privacy@nevora.ai
Address: ulitsa Tsar Asen 11, 1000 Sofia, Bulgaria

11. Changes

We may update this Privacy Policy from time to time. The latest version will always be available on our website and include the date of last revision.