Privacy Policy
How we collect, use, and protect your personal data — under Serbian ZZPL and EU GDPR.
1. Who we are
Vhirty is a software development studio offering custom software solutions and SaaS products for businesses. We are based in Serbia and operate under Serbian data protection law (ZZPL), which is aligned with the EU General Data Protection Regulation (GDPR).
Contact: hello@vhirty.com
2. What data we collect
We may collect the following types of personal data:
- Contact information (name, email address, phone number) when you fill out our contact form or subscribe to updates
- Usage data (IP address, browser type, pages visited, timestamps) collected automatically via analytics
- Payment information — processed securely through Paddle (our payment provider); we do not store card details
- Account data if you register for one of our SaaS products (Loop, Pulse, Bill, Play)
- Communication data from emails, messages, or support requests you send us
3. How we use your data
We use collected data to:
- Respond to your inquiries and provide requested services
- Process payments and manage subscriptions
- Send service-related notifications and updates (not marketing, unless you opt in)
- Improve our website and products through aggregated analytics
- Comply with legal obligations
We do not sell your personal data to third parties. Ever.
4. Third-party services
We use the following third-party services that may process your data:
- Supabase — database and authentication infrastructure (servers in EU/US)
- Paddle — payment processing and subscription management
- Anthropic Claude API — AI features within our products (anonymized where possible)
- Twilio — SMS/WhatsApp communication features (ReviewPing product)
- Cloudflare — hosting, DNS, and security (data may pass through global edge nodes)
Each of these providers operates under their own privacy policy and data processing agreements.
5. Data retention
We retain your data only as long as necessary:
- Contact form submissions: 12 months
- Account data: for the duration of your active subscription + 30 days after cancellation
- Analytics data: aggregated and anonymized, retained indefinitely
- Payment records: 5 years (legal requirement)
6. Your rights
Under ZZPL and GDPR, you have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request deletion of your data ("right to be forgotten")
- Withdraw consent at any time
- Lodge a complaint with the Serbian Commissioner for Information of Public Importance and Personal Data Protection
To exercise any of these rights, email us at: hello@vhirty.com
7. Cookies
Our website uses minimal cookies:
- Strictly necessary cookies (session management, security)
- Analytics cookies (anonymous, aggregated — no personal identifiers)
We do not use advertising or tracking cookies.
8. Security
We implement industry-standard security measures including HTTPS encryption, secure cloud infrastructure, and access controls. However, no system is 100% secure — please use strong passwords and protect your credentials.
9. Changes to this policy
We may update this policy occasionally. Significant changes will be communicated via email or a notice on our website. Continued use of our services after changes constitutes acceptance.
10. Contact
For any privacy-related questions: hello@vhirty.com