Personal Data Protection Policy
1. General Information
This Policy aims to inform users of the “Consultants” platform about the manner in which personal data is collected, used, stored, and protected.
The Data Controller is:
- Name: “AI Logic Solutions” Ltd
- UIC: 207233308
- Registered address: Bulgaria, Sofia, PC 1592, Druzhba 1 Residential Area, Bl. 195, Entrance D, Apt. 63
- Email: ailogicsolutions@gmail.com
- Phone: +359877701044, +359876449942
2. Categories of Personal Data We Process
- For consultants: first name, last name, contact details (phone, e-mail), professional profile, qualification documents, billing data, and bank account details.
- For clients: first name, last name, contact details, information about requested services (video meetings, consultations, business meetings), payment data.
- For marketing campaigns: e-mail address, preferences for receiving notifications and advertisements.
- Technical data: IP address, cookies, security logs, records of used video connections (if necessary and with consent).
3. Purposes of Processing
- Management of consultant and client profiles;
- Provision of services through the platform (video connections, business meetings, consultations);
- Marketing campaigns (only with given consent);
- Issuing invoices and fulfilling accounting/tax obligations;
- Improving the service and the platform’s security.
4. Legal Basis for Processing
- Contractual basis – provision of services;
- Legal obligation – accounting, taxes;
- Legitimate interest – protection of the platform;
- Consent – marketing and recording of video consultations.
5. Retention Period
- Contract and invoice data – 10 years;
- Profile data – until the profile is closed or 5 years after the last activity;
- Video recordings – up to 30 days after the consultation (unless longer consent is given);
- Logs – up to 1 year.
6. Sharing of Personal Data
Personal data may be shared with:
- State authorities (where required by law);
- External processors that help us provide the platform services (see the list below).
We do not sell personal data. Processors handle personal data only on our instructions, to the extent needed for their service, under confidentiality and data-protection contractual terms.
Main processors / service providers
- Stripe – payment processing, subscriptions, and payouts to consultants/companies (payment and billing data).
- Calendly – meeting scheduling when a consultant connects their Calendly account (name, email, and booking details).
- Google (Google Calendar / Google Meet) – calendar integration and video meetings when a consultant connects their Google account.
- Email / SMTP service provider – sending transactional emails (confirmations, appointment notices, password reset).
- Hosting / infrastructure provider – hosting of the website, database, and related technical services.
This list may be updated when we change providers. On request, we can provide additional information about a specific processor.
7. Rights of Data Subjects
You have the right to:
- access your personal data;
- request rectification, erasure, or restriction;
- data portability;
- object to processing based on legitimate interest;
- withdraw consent (for marketing and recordings) at any time.
8. Data Security
- Encrypted connections (SSL);
- Two-factor authentication;
- Backup and monitoring;
- Restricted access for employees on a need-to-know basis.
9. Cookies
The platform uses cookies for basic functionality, usage analysis, and marketing (only with consent). Manage preferences anytime via Cookie Settings in the footer or Privacy Center. Logged-in users can also opt out of promotional emails in the Privacy Center without affecting transactional messages.
10. Supervisory Authority
Commission for Personal Data Protection (CPDP), Address: Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd., Website: www.cpdp.bg.