1. Controller
Infera M (business name of the sole proprietor), Varaždin, Croatia, EU, is the data controller responsible for your personal data. Contact: info@infera-m.com
2. Data We Collect
We collect personal data only when you voluntarily provide it through our website, specifically via the "Scope Your Solution" contact form. The data may include:
- Name and company name
- Email address and phone number
- Industry and areas of interest
- Description of your business needs
- Documents you voluntarily upload (invoices, contracts, tenders)
We do not use cookies for tracking. We do not use analytics tools. We do not collect data automatically beyond standard server logs (IP address, browser type, access time) necessary for security and technical operation.
3. Purpose of Processing
We process your personal data exclusively for the following purposes:
- Responding to your inquiry — to prepare a proposal based on the information you provide
- Demonstrating platform capabilities — if you upload a sample document, we process it to show you what our AI extracts
- Communication — to follow up on your request via email or phone
The legal basis for processing is legitimate interest (Art. 6(1)(f) GDPR) for responding to inquiries, and consent (Art. 6(1)(a) GDPR) for processing uploaded documents.
4. Document Processing
If you upload a document through our form or during a consultation, please note:
- Uploaded documents are processed solely to demonstrate platform capabilities
- Documents are not stored beyond the duration needed for analysis (maximum 30 days)
- Documents are not shared with third parties
- You can request immediate deletion of any uploaded document at any time
- AI processing may involve third-party API services (OpenAI, Anthropic) — data sent to these services is subject to their data processing agreements and is not used for model training
5. Data Storage & Security
Your data is stored on servers located within the European Union. We implement appropriate technical and organizational measures to protect personal data, including encrypted transmission (TLS/SSL), access controls, and regular security reviews.
Form submissions are processed through FormSubmit.co, which transmits your data via email to our designated inbox. FormSubmit.co does not store your form data beyond transmission.
6. Data Retention
We retain personal data only as long as necessary for the purposes described above:
- Inquiry data: up to 12 months after last contact, or until you request deletion
- Uploaded documents: maximum 30 days, then permanently deleted
- Server logs: maximum 90 days
7. Your Rights
Under the General Data Protection Regulation (GDPR), you have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — request correction of inaccurate data
- Erasure — request deletion of your personal data ("right to be forgotten")
- Restriction — request that we limit how we process your data
- Portability — request your data in a machine-readable format
- Objection — object to processing based on legitimate interest
- Withdraw consent — at any time, without affecting the lawfulness of prior processing
To exercise any of these rights, contact us at info@infera-m.com. We will respond within 30 days.
You also have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP): azop.hr.
8. Third-Party Services
Our website uses the following third-party services:
- Google Fonts — for typography (DM Sans, Space Mono). Google may collect anonymized usage data. Google Privacy Policy
- FormSubmit.co — for form processing. Data is transmitted via email and not stored by FormSubmit. formsubmit.co
We do not use social media tracking pixels, advertising cookies, or third-party analytics.
9. Changes to This Policy
We may update this privacy policy to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page indicates when the policy was most recently revised. We encourage you to review this page periodically.