Encorp Bulgaria Ltd
Effective from 28 August 2026
Version 2.0 — replaces the version dated June 2023
Енкорп България ООД (Encorp Bulgaria Ltd) (“Encorp”, “we”, “us”) is the controller of the personal data described in this policy.
| Company | Енкорп България ООД (Encorp Bulgaria Ltd), trading as Encorp.AI |
| UIC | 207883658 |
| Registered address | 33 Simeonovsko shose, Sofia 1700, Bulgaria |
| hi@encorp.io | |
| Telephone | +359 887 458 634 |
We have not designated a data protection officer. We are not a public authority, our core activities do not consist of processing operations requiring regular and systematic monitoring of data subjects on a large scale, and they do not consist of large-scale processing of special categories of data, so the requirement in Article 37(1) GDPR does not apply to us. Data protection enquiries should be sent to hi@encorp.io.
This policy explains how we handle personal data when you visit encorp.ai, use the free tools and assessments published on it, subscribe to our newsletter, register for our events and webinars, contact us, or engage us as a client or supplier.
It does not cover personal data that we process on behalf of our clients when delivering services to them. In those cases we act as a processor, the client is the controller, and the client’s own privacy notice applies. Our handling of that data is governed by the data processing agreement we have with the client.
You give us directly: your name, business e-mail address, telephone number, company name and role, the content of your enquiry or message, your answers to an assessment or calculator, and your marketing preferences.
You submit to our free AI tools: the text you type into a tool and the files you upload to it — a CV, an employment contract, a pitch deck, a PDF, or a link to a page you want analysed — together with the name, e-mail address and company you give to unlock the tool. We pass that material to our AI model provider to produce your result and return it to you. We do not store the material you submit, and we do not store the result. What we keep is a usage record: which tool was run, the e-mail address associated with the run, whether it succeeded, how long it took and how much model capacity it used.
We collect automatically when you use the website: IP address, approximate location derived from it, device and browser type, operating system, language, referring page, the pages you view and the actions you take on them, and the identifiers stored in cookies and similar technologies. Where you have consented to product-analytics cookies, this includes a recording of your interactions with the page (mouse movement, clicks, scrolling). Form fields are excluded from those recordings.
We receive from others: business contact details from professional and commercial sources where we carry out business-development activity, and information from our clients about the individuals we deal with on their side.
We do not ask for and do not want special categories of personal data (Article 9 GDPR). Please do not include them in enquiries, or in a document you upload to one of our tools.
| Purpose | Legal basis |
|---|---|
| Responding to your enquiry or contact request, and taking steps prior to entering into a contract | Article 6(1)(b) — steps at your request prior to contract; Article 6(1)(f) — our legitimate interest in responding to enquiries |
| Providing the free tools, assessments and calculators on the website, running the material you submit through an AI model, and returning your result | Article 6(1)(b) — performance of the arrangement you have asked us to carry out |
| Registering you for an event or webinar and sending you the joining details and follow-up materials | Article 6(1)(b) — performance of your registration |
| Delivering our services, managing the client or supplier relationship, invoicing and collections | Article 6(1)(b) — performance of the contract; Article 6(1)(f) where you are a contact person at a corporate counterparty rather than the counterparty yourself |
| Accounting, tax and statutory record-keeping | Article 6(1)(c) — compliance with a legal obligation under Bulgarian accounting and tax law |
| Non-essential cookies and similar technologies, and the analytics and advertising processing carried out on the data they collect | Article 6(1)(a) — your consent, given through our consent banner. See section 5 |
| Sending you our newsletter and invitations to our events and webinars | Article 6(1)(a) — your consent, given when you subscribe. See section 6 |
| Business development and direct outreach to business contacts | Article 6(1)(f) — our legitimate interest in promoting our services to businesses that may need them. You may object at any time |
| Securing our systems, preventing fraud and abuse, and keeping records of our compliance | Article 6(1)(f) — our legitimate interest in the security and integrity of our systems |
| Establishing, exercising or defending legal claims | Article 6(1)(f) — our legitimate interest in protecting our legal position |
Where we rely on legitimate interests, we have assessed those interests against your rights and freedoms and concluded that our processing does not override them. You can ask us for the reasoning behind any of these assessments.
We send our newsletter and invitations to our events and webinars only to people who have asked to receive them. When you subscribe, you tick a consent box that is not pre-ticked, and subscribing is not a condition of using anything else on the site.
Every message we send contains an unsubscribe link. You can also write to hi@encorp.io. We act on unsubscribe requests on receipt.
We keep a record of your subscription — your e-mail address and the date, time and source of it — so that we can show that you consented, as Article 7(1) GDPR requires.
Separately, we may contact business contacts directly about our services on the basis of our legitimate interests. You can object to this at any time and we will stop.
Our servers are located in the European Union.
Some of the providers in sections 5 and 7 are established in, or transfer data to, the United States or other countries outside the EEA. Where that happens we rely on one of the following: an adequacy decision of the European Commission, including the EU–US Data Privacy Framework where the provider is certified under it; or the European Commission’s standard contractual clauses, together with any additional measures the transfer requires. You can ask us for a copy of the safeguards in place for a particular transfer.
| Data | Retention |
|---|---|
| Enquiries and contact-form messages | 24 months from the last contact |
| Assessment and calculator submissions | 24 months from submission |
| Material you submit to one of our AI tools | Not retained. It is processed to produce your result and then discarded |
| AI tool usage records (tool, e-mail address, outcome, timing) | 24 months from the run |
| Event and webinar registrations | 24 months from the event |
| Newsletter subscription records | For as long as you remain subscribed, and 36 months after you unsubscribe, so that we can show we honoured your withdrawal |
| Client and supplier contract records | For the term of the contract and 5 years afterwards, being the general limitation period under Bulgarian law |
| Accounting and tax records | For the periods required by the Accountancy Act and the Tax and Social Security Procedure Code |
| Your cookie choice | Stored in your own browser, not on our servers, until you change it or clear your browser data |
| Cookie and analytics data | For the lifetime of the relevant cookie, and thereafter in aggregated form that does not identify you |
Where the GDPR applies to our processing, you have the right to:
To exercise any of these, write to hi@encorp.io. We will respond within one month. If your request is complex or you have made several, we may extend that by up to two further months and will tell you if we do. We do not charge for this, unless a request is manifestly unfounded or excessive.
If you are not satisfied with how we have handled your data, you may complain to the Bulgarian supervisory authority:
Комисия за защита на личните данни (Commission for Personal Data Protection), 2 Prof. Tsvetan Lazarov Blvd, Sofia 1592, Bulgaria — cpdp.bg
You may also complain to the supervisory authority where you live or work.
We do not make decisions producing legal effects concerning you, or similarly significantly affecting you, based solely on automated processing.
The assessments, calculators and AI tools on our website generate an indicative result from the material you give them. Those results are informational, are not decisions about you, and do not affect any right or obligation you have. An AI-generated result can be incomplete or wrong, and is not legal, financial or employment advice.
Our website and services are directed at businesses and are not intended for children. We do not knowingly collect personal data from anyone under 16. If you believe a child has given us personal data, write to hi@encorp.io and we will delete it.
We apply technical and organisational measures appropriate to the risk. They include encryption in transit across the whole site, enforced by HTTP Strict Transport Security; a content security policy and related browser security headers; access controls on a need-to-know basis; IP restriction and two-factor authentication on our administrative systems; one-way hashing of API credentials at rest; logging; and contractual confidentiality obligations on our staff and providers.
No system can be guaranteed completely secure, and we cannot warrant absolute security of data transmitted to us over the internet.
We may update this policy. The version and effective date at the top tell you when it last changed. Where a change materially affects how we use your personal data, we will bring it to your attention. The previous version, dated June 2023, governed the period before this one took effect and remains available on request.
Questions about this policy or about your personal data: hi@encorp.io, or write to us at 33 Simeonovsko shose, Sofia 1700, Bulgaria.