Privacy Policy

Last updated: October 2026

This Privacy Policy explains how HadesFlow processes personal data when you visit hadesflow.com (the “Website”), use the contact form or chat with the AI assistant on the Website. It covers the Website only. Personal data we process for our clients under a signed agreement is governed by that agreement.

1. Who We Are

The controller of your personal data is HadesFlow Ltd. (ХадесФлоу ЕООД), UIC 208438230, with its headquarters in Sofia, Bulgaria. For any privacy question or request: contact@hadesflow.com.

We process personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, “GDPR”) and the legislation of the Republic of Bulgaria in the field of personal data protection.

2. What We Collect on the Website

2.1 Visiting the Website. When you open the Website, our server automatically records technical data: IP address, date and time of access, the requested page and your browser type. We use it only to keep the Website secure and stable and to analyse errors. Legal basis: our legitimate interest (Art. 6(1)(f) GDPR). Data that identifies you, such as your IP address, is deleted after a short period (normally no longer than 30 days) or anonymised.

2.2 Contact form. To send an inquiry, you enter your first and last name, email address, phone number, position, company name, company website, company size, budget range and a description of your needs. We use this data only to answer you, arrange a consultation and prepare a proposal. Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in responding to business inquiries (Art. 6(1)(f) GDPR). If no cooperation follows, we delete the inquiry within twelve (12) months of our last communication.

2.3 Email. If you email us, we process your email address and the content of your message to respond to you, on the same legal bases and for the same period as in section 2.2.

2.4 AI chat assistant. The chat widget on the Website is an AI-powered assistant, not a human agent. In line with Article 50 of the EU AI Act (Regulation (EU) 2024/1689), we inform you that you are interacting with an automated system. Your messages are processed by an automated workflow that uses a third-party large language model (LLM) provider to generate replies; processing takes place within the EU/EEA. Conversations are stored only to operate the service, respond to you and keep the service secure, and are automatically deleted after ninety (90) days. We do not use chat conversations to train AI models. Legal basis: our legitimate interest in answering visitors’ questions (Art. 6(1)(f) GDPR).

Please do not share sensitive personal data, passwords or payment details in the chat. The assistant does not make decisions that produce legal or similarly significant effects on you within the meaning of Article 22 GDPR. You can always reach a person at contact@hadesflow.com or through our contact form.

2.5 Cookies. The Website does not use cookies. It only remembers your light/dark theme choice in your browser’s local storage, which contains no personal data.

3. Who Receives Your Data

We do not sell personal data. We share it only with service providers that process it on our behalf under written agreements pursuant to Art. 28 GDPR:

hosting, IT and email service providers;
the AI (LLM) provider that powers the chat assistant.

All personal data is hosted and processed within the European Union / European Economic Area. We do not transfer personal data outside the EU/EEA.

4. How We Protect Your Data

The Website uses SSL/TLS encryption (https), so the data you send us cannot be read by third parties in transit. We apply strong encryption, secure credentials storage and access controls.

5. Your Rights

Under the GDPR you have the right to:

access your personal data and receive a copy;
rectification of inaccurate or incomplete data;
erasure (“right to be forgotten”);
restriction of processing;
data portability;
object at any time to processing based on our legitimate interest;
withdraw consent at any time, where processing is based on consent.

To exercise your rights, write to contact@hadesflow.com or use our contact form. We respond within one month.

6. Right to Lodge a Complaint

If you believe that we process your data unlawfully, you can lodge a complaint with the Bulgarian supervisory authority, the Commission for Personal Data Protection: Sofia 1592, Blvd. “Prof. Tsvetan Lazarov” № 2; phone +359 2 915 3 518; email kzld@cpdp.bg; website www.cpdp.bg.

8. Changes to This Policy

We may update this Policy to reflect changes to the Website or the law. The current version is always published on this page with its date of last update.