Privacy Policy
Last updated 6 July 2026
This policy explains how EVA DAVA EOOD ("we", "us", "EVADAVA") collects and uses personal data across our website and services. We are the data controller. Contact: hello@evadava.com.
1. What we collect
- Free AI Visibility Snapshot: the website domain you enter, the market, niche and language you select, and (if you provide it) your work email.
- Booking a call: when you book via our scheduling tool (Cal.com) — your name, email and the meeting details you provide.
- Purchases: billing details and VAT ID, handled by our payment processor (Stripe). We never see or store full card data.
- Analytics (only with your consent): usage data via Google Analytics 4 — pages viewed, device and browser type, approximate (IP-based, anonymised) location, and a pseudonymous identifier stored in cookies.
- Technical: minimal server and request logs needed to operate and secure the site.
2. Why we use it — legal bases (GDPR / UK GDPR)
- To prepare and deliver the Snapshot, report or booking you requested — performance of a contract / your request (Art. 6(1)(b)).
- To contact you about that request and our services — legitimate interest (Art. 6(1)(f)).
- To process payments, issue invoices and keep accounting records — contract and legal obligation (Art. 6(1)(b), (c)).
- To run analytics cookies — your consent (Art. 6(1)(a)), which you can withdraw at any time.
3. Who processes your data (recipients & processors)
We use a small set of vetted processors, each acting only on our instructions under a data-processing agreement:
- Supabase — database / lead and report storage.
- Stripe — payments and invoicing.
- Vercel — website hosting and content delivery.
- Cal.com — call scheduling.
- Google (Google Analytics 4) — website analytics, only after you consent.
- Email provider — delivery of reports and correspondence.
4. International data transfers
Some of these providers are located in, or transfer data to, the United States (Google, Stripe, Vercel, Cal.com). Where they do, transfers are covered by appropriate safeguards — the EU–US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses — so your data keeps an equivalent level of protection. A copy of the relevant safeguards is available on request.
5. Cookies & analytics
The site uses essential cookies needed to function (no consent required) and, only if you accept in our cookie banner, Google Analytics 4 cookies to understand traffic. We use Google Consent Mode v2 with IP anonymisation; if you decline, no analytics cookies are set and the site works fully. You can change or withdraw consent at any time by clearing the stored choice in your browser. We run no advertising trackers and do not use your data for cross-context behavioural advertising.
6. What we do NOT do
We do not sell or "share" your personal data, we do not train AI models on your content, and we do not disclose it to advertisers.
7. Retention
Lead data is kept until you ask us to delete it, or for up to 24 months of inactivity. Invoicing and accounting records are kept for the period required by Bulgarian law.
8. Your rights
Under the GDPR / UK GDPR you may request access, rectification, erasure, portability, restriction, or object to processing, and withdraw consent to analytics at any time. Email hello@evadava.com and we will respond within 30 days. You may also complain to the Bulgarian Commission for Personal Data Protection (CPDP), or (UK) the Information Commissioner's Office (ICO), or your local supervisory authority.
9. Regional rights (US · Canada · Australia)
California (CCPA / CPRA). California residents may request to know, access, delete and correct their personal information, and to opt out of its "sale" or "sharing." We do not sell or share personal information and do not use it for cross-context behavioural advertising. We will not discriminate against you for exercising these rights. Requests: hello@evadava.com.
Canada (PIPEDA). You may request access to and correction of your personal information, and may complain to the Office of the Privacy Commissioner of Canada (OPC).
Australia (Privacy Act 1988 / APPs). You may request access to and correction of your personal information, and may complain to the Office of the Australian Information Commissioner (OAIC).
10. Contact
Data controller: EVA DAVA EOOD · 9 Gen. Gurko str., Fl. 1, 8000 Burgas, Bulgaria · hello@evadava.com. We have not appointed a Data Protection Officer, as we are not required to.
EVADAVA is a brand of EVA DAVA EOOD — a single-member limited company registered in Bulgaria. UIC 207945177 · VAT BG207945177 · Burgas 8000, Bulgaria · Managing director: Alexander Kuguk · © 2026 EVA DAVA EOOD.