Privacy Policy

1. Who is responsible for your data

The controller of personal data on solve.rs is Solvers Hub DOO Kruševac, a company registered in Serbia (“we”, “us”).

• Registered office: Despota Uglješe 8, 37000 Kruševac, Serbia
• Company registration number (MB): 22191853
• Tax ID (PIB): 115676792
• Privacy email: privacy@solve.rs

We process personal data in line with the Serbian Law on Personal Data Protection (Official Gazette of the Republic of Serbia, No. 87/2018).

This policy covers the solve.rs website: its pages, the inquiry form and the AI assistant. The invoice.solve.rs app has its own privacy policy, published at invoice.solve.rs/privatnost.

2. What data we collect

When you send us an inquiry through the form on the site:

• your email address – the only required field
• in a project inquiry: your project or company name and website, if you provide them, and your answers in the form – project type, stage, approximate monthly visits, what is holding you back, when you want to start and budget range
• in a trial account request for the app: your company name, phone number and message, if you provide them, the app modules you selected and how your business is set up (e.g. flat-rate sole trader, VAT-registered business or accounting firm)
• with every inquiry: the site language, the address of the page you sent it from and a label for the place on the site (button) where you opened the form
• if you chatted with the AI assistant before sending the form, that conversation is sent with your inquiry (at most the last 20 messages)

When you email us: your email address, the content of your message and our follow-up correspondence.

When you write to the AI assistant on the site:

• the messages you write and the assistant’s replies
• we keep the conversation only if you leave your email at the end so we can follow up, or send the form after chatting – it is then stored with your inquiry

When you browse the site:

• pages you open, where you came from (e.g. a search engine), device and browser type, approximate location (city or country) and on-page events such as scroll depth, time on page and clicks on inquiry buttons
• our database also records some events: opening and sending the form, sending an inquiry after an AI assistant chat, and visits to pages that do not exist. With each event we store the page address and language and, depending on the event, the button location, the number of chat messages, the inquiry score, the selected modules and business type, or the address you came from to the missing page. We do not record your name, email or a device identifier with these events.
• your IP address and the technical logs the server creates on every request

We do not ask for special categories of data (e.g. health data) or payment card details. Please do not enter them in the form or in the AI assistant chat.

Providing data is voluntary. Without an email address we cannot reply to you; all other fields are optional.

3. Why we process data and on what legal basis

• Answering your inquiry and discussing a project: to reply, call you if you left a phone number, ask follow-up questions and prepare a proposal or a trial account for the app. Basis: steps taken at your request before entering into a contract and, once we work together, performance of the contract.
• AI assistant: to give you an immediate answer about our services and products. Basis: our legitimate interest in giving visitors accurate information quickly and, when you ask about working with us, steps taken at your request before entering into a contract.
• Measuring traffic and how the form performs: to see which pages are read, where people abandon the form and what needs improving. Basis: our legitimate interest. You can object to it and switch it off (sections 4 and 8).
• Security: protecting the site, the form and the AI assistant from abuse, e.g. limiting the number of inquiries and messages per IP address. Basis: legitimate interest.
• Legal obligations: e.g. keeping invoices and business records once you become a client. Basis: legal obligation.

Based on your answers in the project form we automatically calculate an indicative inquiry score that helps us decide the order of replies. The score has no legal effect on you – a person always decides about working together.

We do not sell your data or share it with others for their marketing.

4. Cookies and analytics

We use Google Analytics 4 to measure traffic. When you open the site, your browser loads Google’s script (from googletagmanager.com), which sets two cookies:

• _ga – distinguishes visitors; expires after at most 2 years
• _ga_<container-id> – keeps the session state; expires after at most 2 years

The inquiry form and the AI assistant do not set cookies of their own, and the site has no social media advertising pixels. The site’s admin area, used only by our team, uses strictly necessary login cookies.

Icons of some websites in our case study list are loaded from Google’s favicon service, so your browser sends a request to Google when they are shown.

You can switch analytics off:

• in your browser settings, by blocking or deleting cookies – the site works without them
• with Google’s Analytics opt-out browser add-on (tools.google.com/dlpage/gaoptout)
• with a script blocker or private browsing mode

5. Who we share data with

We do not share data with third parties, except service providers that process it on our behalf (processors), and only as far as needed to run the site:

• Vercel Inc. (USA) – website hosting; processes IP addresses and technical logs on every request
• Supabase Inc. (USA) – the database that stores inquiries and event records; the database server is in the EU (Ireland). Your browser sends event records directly to the database, so Supabase also sees your IP address
• Resend (USA) – the service that delivers our email about each new inquiry; the email contains the inquiry data, including any attached AI assistant conversation
• Anthropic PBC (USA) – the Claude AI model that writes the AI assistant’s replies and therefore receives the chat messages; under its commercial terms, Anthropic does not use these messages to train its models
• Google – Google Analytics, for traffic measurement

We may also disclose data to public authorities when the law requires it, or when needed to protect our rights.

6. Transfers outside Serbia

The inquiry database is in the European Union (Ireland), which Serbian law considers to provide an adequate level of data protection.

Vercel, Supabase, Resend, Anthropic and Google are US companies, so some data (technical logs, inquiry notifications, AI assistant messages and analytics data) is also processed in the USA. For these transfers we rely on the data processing agreements these providers apply, with standard contractual clauses and other safeguards. When you send us an inquiry or a message to the AI assistant yourself, the transfer is also necessary to answer your request.

7. How long we keep data

• Inquiries, correspondence and chats attached to an inquiry: while we discuss a project and, if we do not start working together, for at most two years after our last contact. We delete them earlier if you ask.
• Client data: for as long as we work together; contracts, invoices and other business records for as long as accounting and tax laws require.
• AI assistant chats: if you neither leave your email nor send the form, we do not keep them – the chat disappears when you close the assistant or reload the page. Anthropic processes the messages to write a reply and keeps them for a limited time under its own rules.
• Analytics: Google Analytics keeps detailed visit data for at most 14 months, and its cookies expire after at most 2 years.
• Event records described in section 2: kept as statistics on how the site and the form perform, without your name or email.
• IP addresses used to rate-limit inquiries and AI assistant messages: only in the server’s memory, never in the database or in email. We only use entries from the last hour, and they are cleared at the latest when the server restarts. Vercel keeps hosting logs briefly, under its own rules.

8. Your rights

Under the Serbian Law on Personal Data Protection you have the right to:

• find out whether we process your data and get a copy of it
• have inaccurate data corrected or incomplete data completed
• have your data erased
• restrict processing
• receive the data you gave us in a structured, machine-readable format and transfer it to another controller
• object to processing based on legitimate interest, including traffic measurement
• withdraw consent at any time, where processing is based on consent
• not be subject to a decision based solely on automated processing – we do not make such decisions

Send your request to privacy@solve.rs. We reply without undue delay and within 30 days of receiving it at the latest. If a request is complex or we receive many, we may extend this by another 60 days and will tell you so within the first 30 days. If we cannot confirm that a request concerns you, we will ask for additional confirmation, for example that you write from the email address you used for your inquiry.

9. Complaints to the Commissioner

If you believe we process your data unlawfully, you can lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection of the Republic of Serbia:

• Address: Bulevar kralja Aleksandra 15, 11120 Belgrade, Serbia
• Website: www.poverenik.rs

Feel free to write to privacy@solve.rs first – we try to resolve issues right away. A complaint to the Commissioner does not affect your right to judicial protection.

10. Data security

The site is served only over an encrypted connection (HTTPS). Inquiries in the database can be read only by members of our team, which is enforced by access rules in the database itself. Keys for external services are kept on the server only.

No system is perfectly secure. If a personal data breach is likely to put your rights at risk, we will notify the Commissioner, and we will notify you where the breach is likely to result in a high risk to your rights and freedoms, as the law requires.

11. Changes to this policy

We update this policy when we change how the site works, add a new service or when regulations change. The current version is always on this page, with the date of the last change at the top.

12. Privacy contact

For privacy questions and the requests described in section 8, write to privacy@solve.rs. For project inquiries: hello@solve.rs.