Privacy

This site is run by Inctasoft OOD (ЕИК 206353354), registered at Rashov Dol 19, Bulgaria. We decide what's collected here and why, under the EU's GDPR — and we're glad to explain any of it directly rather than hide behind boilerplate.

No tracking

We run no analytics on this site — no Google Analytics, no ad pixels, no tracking cookies. Nothing watches you browse. If you don't fill in a form or buy something, we have no record you were here.

The contact form

Write to us through the site and we collect your name, email, message, and — if you draw one — a diagram. It's sent straight to our inbox by Resend, the mail service we use to deliver it. There's no database behind the form: it's an email, not a record we query later.

No database, just an inbox — we keep messages only as long as we need to handle your inquiry and any resulting work, and delete them on request. We process this because you asked us to, and because it's a direct step toward a possible engagement (GDPR Art. 6(1)(a) and (b)).

Buying direct from us

Checkout for our engineering services runs on a Stripe-hosted page. Your card details go straight to Stripe — they never touch our servers, and we never see or store them. We do process an order number, and, for business buyers, an optional EU VAT ID, to issue the compliance document Bulgarian law requires for the sale. That order data is kept for as long as Bulgarian tax and accounting law requires us to keep it — longer than an inquiry, because it's a legal record, not a preference.

The Solid Pod demo

Our Solid Pod demo lets you log into your own personal data pod — a concept from the Solid project, where you hold your own data instead of a company holding it for you. That login and any read or write happen directly between your browser and whichever pod provider you choose. Our servers are never part of it — we don't receive, see, or store anything from that exchange.

Who else sees it

Beyond Resend (mail) and Stripe (payment), the site itself is served through Cloudflare, our hosting and network provider. They carry the traffic that reaches us; they don't see what you write in the contact form. All three are established international providers, so some processing may happen outside the EU/EEA — where it does, it's covered by Standard Contractual Clauses or an equivalent safeguard. We don't sell your data to anyone, full stop.

Your rights

Under GDPR you can ask us to show you what we hold about you, correct it, delete it, hand it over in a portable format, or stop using it — and if you ever gave consent, you can withdraw it at any time. Email office@inctasoft.com and we'll answer directly, not through a ticket queue.

If you'd rather raise something with someone outside Inctasoft, Bulgaria's regulator is the Commission for Personal Data Protection (CPDP), гр. София 1592, бул. „Проф. Цветан Лазаров" № 2, cpdp.bg — or the equivalent authority wherever you live.

Changes

If how we handle data changes, we'll update this page rather than bury it in a separate document — this is always the current version.

Questions about any of this go to office@inctasoft.com.