Privacy Policy
Last Updated: January 15, 2025
At Energetic Connect AI, we take your privacy seriously. This policy explains how we collect, use, and protect your personal information when you use our event budget planning services. We're committed to transparency and giving you control over your data.
Our approach follows both EU General Data Protection Regulation (GDPR) requirements and Bulgarian data protection laws. We believe that understanding how your information is handled shouldn't require a law degree, so we've written this in plain language.
Data Controller: Energetic Connect AI
Address: пл. Преображение 1, 2760 Tsentar, Razlog, Bulgaria
Email: contact@energeticconnectai.com
Phone: +35974780501
Information We Collect
Personal Information You Provide
When you register for our learning programs or use our event budget planning tools, we collect information that you voluntarily provide. This helps us deliver our services effectively and personalize your experience.
- Contact details including your name, email address, and phone number
- Account credentials such as username and encrypted password
- Professional information like job title, company name, and industry sector
- Payment information processed securely through third-party payment processors
- Event planning data including budget figures, vendor preferences, and project timelines
- Communication preferences and language settings
Information We Collect Automatically
Like most online services, we automatically collect certain technical information when you interact with our platform. This helps us improve functionality and security.
- Device information including IP address, browser type, and operating system
- Usage patterns such as pages visited, features used, and time spent on platform
- Location data based on IP address (country and city level only)
- Session information and authentication logs for security purposes
How We Use Your Information
We don't sell your data to third parties. That's a promise. We only use your information for legitimate business purposes that directly benefit you or help us operate our service.
Service Delivery
Providing access to our event budget planning tools, learning programs, and customer support services.
Account Management
Creating and maintaining your account, processing payments, and managing subscriptions.
Communication
Sending important updates about your account, program schedules, and service changes.
Improvement
Analyzing usage patterns to enhance features, fix bugs, and develop new functionalities.
Security
Protecting against unauthorized access, fraud detection, and maintaining platform integrity.
Legal Compliance
Meeting obligations under Bulgarian and EU law, including tax and financial regulations.
We base our data processing on several legal grounds under GDPR: contractual necessity (to deliver services you signed up for), legitimate interests (platform security and improvement), legal obligations (tax compliance), and your explicit consent where required.
Data Sharing and Third Parties
We work with carefully selected service providers who help us operate our platform. These companies only access your data when necessary and are contractually bound to protect it.
Service Providers We Use
- Payment processors for secure transaction handling (your payment card details never touch our servers)
- Cloud hosting providers for data storage and platform infrastructure
- Email service providers for sending account notifications and program updates
- Analytics tools that help us understand how people use our platform (with anonymized data)
- Customer support software to manage and respond to your inquiries efficiently
International Data Transfers: Some of our service providers are based outside the European Economic Area. When we transfer data internationally, we ensure appropriate safeguards are in place through Standard Contractual Clauses approved by the European Commission or equivalent mechanisms.
Legal Disclosure
We may disclose your information if required by Bulgarian law, court order, or government request. We'll notify you when legally permitted before sharing information in response to legal demands, unless prohibited by law or the request involves imminent harm.
Your Privacy Rights
Under GDPR and Bulgarian data protection laws, you have significant control over your personal information. These aren't just theoretical rights – we've built practical ways for you to exercise them.
What You Can Do With Your Data
- Access: Request a copy of all personal data we hold about you in a portable format
- Correction: Update inaccurate or incomplete information in your account settings
- Deletion: Request removal of your account and associated data (with some legal exceptions)
- Restriction: Limit how we process your data while disputes are resolved
- Portability: Receive your data in machine-readable format to transfer elsewhere
- Objection: Opt out of processing based on legitimate interests or direct marketing
- Withdraw Consent: Revoke previously given consent for specific processing activities
How to Exercise Your Rights
Send requests to contact@energeticconnectai.com with "Privacy Rights Request" in the subject line. We'll verify your identity and respond within 30 days (as required by GDPR). There's no fee unless your request is clearly unfounded or excessive.
You also have the right to lodge a complaint with the Commission for Personal Data Protection (CPDP) in Bulgaria if you believe we've mishandled your information. We'd prefer to resolve concerns directly, but this option is always available.
Data Security
We implement multiple layers of security to protect your information from unauthorized access, alteration, or destruction. While no system is completely bulletproof, we take reasonable precautions appropriate to the sensitivity of the data.
- Industry-standard encryption for data transmission (TLS 1.3) and storage (AES-256)
- Regular security audits and vulnerability assessments by external experts
- Access controls limiting employee access to personal data on need-to-know basis
- Multi-factor authentication options for user accounts
- Automated backup systems with secure off-site storage
- Incident response procedures for potential data breaches
Data Breach Notification: If we discover a breach that poses risk to your rights and freedoms, we'll notify you and the Bulgarian CPDP within 72 hours as required by GDPR. Notifications will include information about the breach nature, likely consequences, and measures we're taking.
Data Retention
We don't keep your data forever. Retention periods depend on the type of information and why we collected it, balanced against legal requirements and legitimate business needs.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account Information | Duration of account plus 30 days | Service provision |
| Financial Records | 7 years after transaction | Bulgarian tax law requirements |
| Usage Analytics | 24 months in identifiable form | Platform improvement |
| Support Communications | 3 years after last contact | Quality assurance and legal defense |
| Marketing Preferences | Until consent withdrawn | Compliance with opt-out requests |
After retention periods expire, we securely delete or anonymize your data so it can no longer identify you. Some aggregated, anonymized data may be retained indefinitely for statistical purposes.
Cookies and Tracking
We use cookies and similar technologies to make our platform work properly and understand how people use it. You have control over non-essential cookies through your browser settings or our cookie preference center.
Essential Cookies
These are necessary for basic functionality like keeping you logged in and remembering your session. You can't disable these through our cookie tool since they're required for the platform to function, but you can block them through browser settings (though this will break core features).
Analytics Cookies
We use analytics to understand which features are most useful and where people encounter problems. This data is anonymized and helps us make informed decisions about platform improvements. You can opt out of analytics cookies while still using our service.
Preference Cookies
These remember your settings like language preference and display options, making your experience more personalized. They're helpful but not strictly necessary.
Children's Privacy
Our services are designed for professional event planners and business users. We don't knowingly collect information from children under 16 years of age. If you're under 16, please don't register for an account or provide personal information.
If we learn we've collected data from a child under 16, we'll delete it promptly. Parents or guardians who believe we may have inadvertently collected information from a child should contact us immediately at contact@energeticconnectai.com.
Changes to This Policy
We update this policy occasionally to reflect changes in our practices, technology, or legal requirements. When we make material changes, we'll notify you through email or a prominent notice on our platform at least 30 days before changes take effect.
The "Last Updated" date at the top shows when this policy was most recently revised. We encourage you to review it periodically. Continued use of our services after changes become effective indicates acceptance of the updated policy.
Questions About Privacy?
We're here to help with any concerns about how your data is handled. Our team typically responds to privacy inquiries within 2 business days.