Questions about this policy or your data? Email us at office@aifortis.com.
1. Who we are (Data Controller)
This website (aifortis.com) is operated by AI Fortis Ltd. („ЕЙ АЙ Фортис“ ООД), a company registered in Bulgaria, EIK 208238799, VAT BG208238799, with registered address at 1 Gen. Stefan Toshev St, 1618 Sofia, Bulgaria ("AI Fortis", "we"). For the personal data described in this policy, AI Fortis is the data controller. You can reach us at office@aifortis.com. For client projects we typically act as a data processor under a separate Data Processing Agreement.
2. What personal data we collect
We collect: (a) information you provide through our contact form and the live agent demo form - your first and last name, work email, phone number, company, which service you are interested in, and the contents of your message; (b) if you try our voice agents in the browser: an email verification code exchange, the AUDIO RECORDING and transcript of each demo conversation, its duration, and any meeting you book during it; (c) if you book a meeting: your name, email, company and chosen time; (d) limited technical data - such as IP address and browser type - used for security and rate limiting, and aggregate usage measured through privacy-respecting analytics (consent-gated); and (e) information stored via cookies and similar technologies (see our Cookie Policy). We do not knowingly collect special categories of data or data from children.
3. Why we use your data and our legal basis
We process personal data to: respond to your enquiries, run the live agent demo and book meetings you request (steps at your request before entering a contract); record demo conversations so our team can review your enquiry and follow up - you are informed before starting a call and starting it constitutes your consent; prevent abuse of the demo (rate limits, verification, identity checks - our legitimate interest); deliver and improve our services and website (legitimate interest); and, where required, send you communications you have consented to (consent). You may withdraw consent at any time.
4. Cookies and analytics
We use only essential cookies and privacy-respecting analytics to understand aggregate usage. We avoid intrusive third-party advertising trackers. See our Cookie Policy for details and your choices.
5. Who we share data with
We share personal data only with service providers (processors) that help us operate, each bound by data-processing terms and permitted to use the data only on our instructions: Vercel (website and platform hosting), Supabase (database), LiveKit (real-time voice for the agent demo), Cloudflare (storage of demo call recordings), Google Workspace (email and calendar - verification codes, notifications and meeting invitations are sent from our own office@aifortis.com mailbox), Upstash (rate limiting), and Vercel Analytics (consent-gated, aggregate usage). We do not sell your personal data. We may disclose data where required by law.
6. ScanSystems and other client products
ScanSystems - our document automation and invoice processing suite - is provided to business clients under a separate written agreement. Documents processed through a client's ScanSystems deployment (for example invoices, which may contain names, addresses, bank and tax details) are processed on that client's instructions: the client is the data controller and AI Fortis acts as data processor under a Data Processing Agreement. Depending on the deployment, ScanSystems runs in the cloud, entirely on the client's own infrastructure (on-premise), or as a hybrid. This website does not collect or process documents from ScanSystems deployments. If your data appears in a client's documents, please contact that client (the controller); we will assist them in responding. The same controller/processor model applies to the AI Fortis Voice AI Platform, which has its own policies at app.aifortis.com/legal.
7. International transfers
Where a service provider processes data outside the European Economic Area, we rely on appropriate safeguards - such as the European Commission’s Standard Contractual Clauses - to ensure your data receives an equivalent level of protection.
8. How long we keep data
We keep personal data only for as long as necessary for the purposes described above or to meet legal obligations. Demo enquiry data - including call recordings and transcripts - is automatically deleted 12 months after submission unless our engagement with you continues. Meetings you book remain in our business calendar. You can ask us to delete your data earlier at any time by emailing office@aifortis.com.
9. Your rights
Under the GDPR you have the right to access, rectify, erase, restrict and port your personal data, to object to processing based on legitimate interests, and to withdraw consent. To exercise any of these rights, email office@aifortis.com. We will respond within the timeframes required by law and free of charge in most cases.
10. Complaints
If you believe we have not handled your data properly, you have the right to lodge a complaint with a data-protection supervisory authority. In Bulgaria this is the Commission for Personal Data Protection (CPDP / КЗЛД), cpdp.bg. We would, however, appreciate the chance to address your concerns first.
11. Changes to this policy
We may update this policy from time to time. The date at the top reflects the latest revision; significant changes will be highlighted on this page.