Legal

Privacy Policy

Last updated: 20 October 2026

This policy explains how ONTOP collects, uses and protects the personal data you provide when using ontop.bg. We comply with the General Data Protection Regulation (GDPR / Regulation (EU) 2016/679) and the Bulgarian Personal Data Protection Act.

1. Who processes your data

2. What data we collect

We collect only the data you provide yourself, through the inquiry form or when you contact us:

• Company name or contact person
• Phone number
• Email address (if you give one or write to us)
• Information about your business that you share in the inquiry

With the form we also receive where you came to the site from (for example Google, or a link we sent you), the first page you opened, and the IP address it was sent from. Your browser keeps where you came from only while the tab is open, and sends it to us only if you send the form.

We also count, anonymously, page views, taps on the call, Viber, WhatsApp, SMS and email buttons, and form submissions: which page, when, where you came from (for example Google), whether you are on a phone or a computer, and which country. We do not keep your IP address, use cookies or store anything on your device, so these counts do not tell us who you are. The exception is the links to drafts and demos we send to a specific business: when you open one, we can see that it was opened, and when. We run the same anonymous counting on the sites we build and maintain for our clients.

If you write to us in the chat on the page we made for your company (ontop.bg/f/...), we keep your messages and your email address if you leave one. An AI assistant answers first, and Yavor reads every conversation and replies himself. To produce the assistant's answer, the messages are sent to Anthropic and are not used to train models.

The site does not use tracking cookies, nor any third-party advertising or analytics scripts. Fonts are served locally from our server, not from external providers.

3. Why, and on what legal basis

We use your data solely to respond to your inquiry, prepare a quote and contact you about the requested service. The legal basis is taking steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR), and for follow-up communication, our legitimate interest in responding to an inquiry you initiated (Art. 6(1)(f)). The anonymous counts, including seeing that a draft we sent you was opened, rest on our legitimate interest in knowing which pages and sources bring inquiries and when to follow up (Art. 6(1)(f)).

4. Who we share data with

We do not sell or rent your data. We share it only with the providers necessary to run our business:

• Cloudflare, Inc. - website hosting and security, and storage of the anonymous counts in the EU
• Zoho Corporation - email communication
• Anthropic PBC - the AI assistant that answers in the chat on the page made for your company

These providers process data under their own data protection agreements and applicable international transfer mechanisms.

5. How long we keep it

We keep inquiries for up to 12 months after the last contact, unless we enter into a contract - in which case data is kept for the duration of our contractual and legal obligations. After that, we delete it. Detailed anonymous counts are deleted automatically after 24 months.

6. Your rights

Under the GDPR you have the right to: access your data, rectification, erasure, restriction of processing, data portability and objection. To exercise any of these rights, email us at hello@ontop.bg.

You also have the right to lodge a complaint with the supervisory authority - the Commission for Personal Data Protection (CPDP), 2 Prof. Tsvetan Lazarov Blvd., Sofia, www.cpdp.bg.

7. Changes to this policy

We may update this policy when needed. The current version is always available at this address with the date of last update shown.