Privacy Policy

OVERVIEW

Tevora Solutions ("Tevora", "we", "our") is an AI automation agency based in Ljubljana, Slovenia. This Privacy Policy explains what personal data we collect when you visit https://tevorasolutions.si or contact us, how we use it, and what rights you have under the General Data Protection Regulation (GDPR).

We do not sell your data. Using this website requires accepting cookies: when you first visit, the site asks you to click "Accept cookies", which enables analytics cookies, session recording and the LinkedIn Insight Tag described below. If you do not agree, please do not use the site; this Privacy Policy and our Cookie Policy remain readable without accepting. You can withdraw your consent at any time by emailing info@tevorasolutions.si or by clearing the cookies and site data for this site in your browser, after which the site will ask again before it can be used.

DATA WE COLLECT

Contact form and email

When you fill in our contact or booking form, we collect your name, email address, company name (if provided), and the content of your message. This data is stored in Airtable (our CRM) and processed by n8n (our booking automation).

Cookieless analytics

We use Plausible Analytics and Cloudflare Web Analytics to count page views, referrers, and simple events (for example, that a booking was started or completed). Both are cookieless, do not store anything on your device, and only report aggregate statistics that cannot identify you.

Session recording and product analytics

After you click "Accept cookies", we use PostHog to understand how visitors use the site. PostHog records the pages you view, how long you stay on each page, the buttons and links you click, scrolling and mouse movement, steps in the booking flow, your browser, device type, screen size, referring site, and approximate location (country/city derived from your IP address). It also creates a replay of your session, a reconstruction of what was shown on your screen so we can see how the site was used. All text you type into form fields is masked and never appears in recordings. PostHog stores a random identifier in a cookie and in local storage so that visits from the same browser can be linked together. Data is stored on PostHog's EU servers in Frankfurt, Germany.

Google Analytics and LinkedIn Insight Tag

After you click "Accept cookies", we also use Google Analytics 4 to measure traffic and conversions, and the LinkedIn Insight Tag to measure the effectiveness of our LinkedIn advertising. Both set cookies and receive your IP address, browser details and the pages you visit.

Booking data

If you book a consultation, we collect your name, email, and any notes you provide about your business needs. This data is used solely to prepare for and conduct the meeting.

Server logs

Cloudflare (our hosting provider) may automatically log your IP address, browser type, and pages visited as part of standard infrastructure security. These logs are retained for up to 30 days and are not used for profiling.

HOW WE USE YOUR DATA

We use the data we collect to:

• Respond to your enquiries and proposals
• Deliver the services you have contracted us for
• Schedule and conduct consultations
• Improve the website and our service offering
• Understand how visitors navigate the site and where the booking process can be improved
• Measure the effectiveness of our LinkedIn advertising
• Meet our legal obligations

We do not use your data for automated decision-making, profiling, or marketing without your explicit consent. We never sell your data to third parties.

LEGAL BASIS

We process your personal data on the following legal bases under GDPR Article 6:

• Consent (Art. 6(1)(a)): analytics cookies, session recording (PostHog), Google Analytics and the LinkedIn Insight Tag. Consent is given by clicking "Accept cookies", which is required to use the site. You can withdraw consent at any time by emailing info@tevorasolutions.si or by clearing the cookies and site data for this site in your browser; this does not affect processing carried out before withdrawal.
• Contract performance: processing necessary to deliver a service you requested
• Legitimate interests: responding to enquiries, improving service quality, maintaining security, and cookieless aggregate analytics
• Legal obligation: retaining records as required by Slovenian accounting and tax law

DATA RETENTION

Contact enquiries and consultation notes are retained for 3 years from the date of last interaction, after which they are permanently deleted.

If you become a client, project-related records are retained for the duration of the business relationship and for 3 years after its conclusion to meet legal requirements.

Server logs held by Cloudflare are automatically purged after 30 days.

PostHog session recordings are deleted after 30 days; PostHog event data (page views, clicks) is deleted after 12 months. Google Analytics data is retained for up to 14 months. LinkedIn retains Insight Tag data for up to 180 days.

YOUR RIGHTS

Under GDPR, you have the right to:

• Access: request a copy of the personal data we hold about you
• Rectification: ask us to correct inaccurate data
• Erasure: ask us to delete your data ("right to be forgotten"), subject to legal retention obligations
• Restriction: ask us to pause processing while a dispute is resolved
• Portability: receive your data in a structured, machine-readable format
• Objection: object to processing based on legitimate interests

To exercise any of these rights, email us at info@tevorasolutions.si. We will respond within 30 days.

You also have the right to lodge a complaint with the Slovenian Information Commissioner (Informacijski pooblaščenec, ip-rs.si).

THIRD PARTIES

We share data only with the following sub-processors, each bound by appropriate data protection agreements:

• Airtable: CRM and contact storage. Operated by Formagrid Inc., USA. Transfer basis: EU-US Data Privacy Framework.
• n8n: Booking and workflow automation. Self-hosted on EU infrastructure. Data does not leave the EU.
• Cloudflare: Website hosting, CDN, and cookieless Web Analytics. Operated by Cloudflare Inc., USA. Transfer basis: EU-US Data Privacy Framework and Standard Contractual Clauses.
• Plausible Analytics: Cookieless aggregate analytics. Operated by Plausible Insights OÜ, Estonia. Data stays in the EU.
• PostHog: Session recording and product analytics. Operated by PostHog Inc., USA; data hosted in the EU (Frankfurt, Germany). Transfer basis: Standard Contractual Clauses.
• Google Analytics: Traffic and conversion measurement. Operated by Google Ireland Limited; data may be transferred to Google LLC, USA. Transfer basis: EU-US Data Privacy Framework.
• LinkedIn Insight Tag: Advertising measurement. Operated by LinkedIn Ireland Unlimited Company; data may be transferred to LinkedIn Corporation, USA. Transfer basis: EU-US Data Privacy Framework and Standard Contractual Clauses.

No other third parties receive your personal data.

CONTACT

Data controller:

Tevora Solutions
Ljubljana, Slovenia
info@tevorasolutions.si