Privacy Policy

1. Data Controller

Подвиг ЕООД (Podvig EOOD), UIC 208839928, registered in Varna, Bulgaria. Contact: support@podvik.com. National Revenue Agency registration: RF0006757.

2. Scope

This policy covers personal data processed through the AIGeoDC platform (aigeodc.com), an environmental intelligence service for data centres worldwide. AIGeoDC aggregates exclusively public data sources to provide environmental scores, comparisons, and alerts. No proprietary or confidential client data is ingested.

3. Data We Collect

• Account data — name, email address, hashed password (bcrypt). Authentication may also occur via OAuth providers through Supabase Auth.
• Organisation data — organisation name, subscription plan, Stripe customer and subscription identifiers.
• Portfolio data — which public data centre records you choose to track.
• Payment data — handled entirely by Stripe. We store only the last 4 digits of the card, country, and invoice references.
• Technical data — IP address (for rate-limiting), user agent, browser type, timestamps.
• Alert preferences — user-configured environmental thresholds for notifications.
• We do not collect biometric data, user-generated content, or process personal data with AI models.

4. Purposes and Legal Bases

• Account management — contract performance (Art. 6(1)(b) GDPR)
• Payment processing — contract performance + legal obligation to retain invoices for 10 years (Art. 6(1)(b), (c))
• Portfolio and alert management — contract performance (Art. 6(1)(b))
• Platform security and rate-limiting — legitimate interest, retained for 12 months (Art. 6(1)(f))
• Transactional emails (confirmations, alerts) — contract performance (Art. 6(1)(b))
• Marketing emails — consent, withdraw any time (Art. 6(1)(a))
• Aggregated analytics — legitimate interest, retained for 24 months (Art. 6(1)(f))

5. Sub-processors

6. International Transfers

Some sub-processors are based in the United States. Transfers rely on Standard Contractual Clauses (SCCs) approved by the European Commission and, where applicable, the EU-U.S. Data Privacy Framework. A copy of the relevant SCCs is available on request.

7. Automated Decision-Making

AIGeoDC does not make automated decisions that produce legal or similarly significant effects. Environmental scores are informational only, derived from public data, and are not binding assessments.

8. Your Rights (GDPR)

Under the GDPR you have the right to:

• Access your personal data (Art. 15)
• Rectify inaccurate data (Art. 16)
• Erase your data (Art. 17)
• Restrict processing (Art. 18)
• Data portability (Art. 20)
• Object to processing based on legitimate interest (Art. 21)
• Withdraw consent at any time (Art. 7(3))

To exercise any right, email support@podvik.com. We respond within 30 days.

9. Supervisory Authority

You may lodge a complaint with the Commission for Personal Data Protection (КЗЛД): 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, Bulgaria, kzld@cpdp.bg, +359 2 915 3518.

10. Children

AIGeoDC is a business-focused platform not directed at persons under 14 years of age, in line with the Bulgarian Personal Data Protection Act (ЗЗЛД). We do not knowingly collect data from children.

11. Security Measures

We implement TLS 1.2+ for all connections, bcrypt password hashing, least-privilege database access, tenant isolation between organisations, and strict separation of production and development environments. Access to production systems is limited to authorised personnel.

12. Breach Notification

In the event of a personal data breach, we notify the supervisory authority within 72 hours as required by GDPR Art. 33. Affected individuals are notified without undue delay when the breach is likely to result in a high risk to their rights (Art. 34).

13. Cookies

AIGeoDC uses only essential cookies: a Supabase authentication session cookie and a locale preference cookie. We do not use tracking, analytics, or advertising cookies. Because these cookies are strictly necessary for the service to function, no cookie consent banner is required under the ePrivacy Directive.

14. Changes to This Policy

Material changes are communicated by email at least 14 days before they take effect. The "Last updated" date at the top of this page reflects the most recent revision.

15. Contact

Подвиг ЕООД (Podvig EOOD), UIC 208839928, NRA: RF0006757, Varna, Bulgaria. Email: support@podvik.com. Phone / Viber / WhatsApp: +359 89 435 6251.