Privacy Policy

1. Operator and scope

INELVEX is operated by Kolinichenko Sergei, an individual in Blagoevgrad, Bulgaria. INELVEX is a service name; no company under that name has been registered. Contact: info@inelvex.com, phone +359 87 750 6537. For our own website and enquiries, this individual is the controller of personal data.

This notice covers the INELVEX website and its free informational AI channels on the web, Telegram, Messenger and email, including the Meta application named Forgebit Messenger Bot. If you contact another business using the platform, its notice and the actual processing arrangements determine the respective roles. Contact us to identify the responsible controller and route a request.

2. Data we process

We process your messages, relevant conversation history and information you provide; channel, account and conversation identifiers; language, timestamps, delivery status and human review records. Where you use optional reviewed email replies, we also process your address, verification and consent records.

Network services process connection information, including IP addresses. IP-derived identifiers support abuse prevention. Diagnostic, delivery and AI usage/cost records may also relate to your enquiry.

The website uses local storage for your language choice, conversation identifier and browser chat history. The assistant sends the page address and selected language with your message. Clearing site data removes the browser copy, not server, mailbox or provider copies. The site does not use analytics or advertising cookies.

Providing a message or contact details is voluntary. Without information needed for an enquiry or address verification, we may be unable to provide that response. Do not send passwords, recovery keys, payment-card details or sensitive personal data through the assistant.

3. Purposes and legal grounds

General enquiries, conversation continuity and delivery or review of replies: legitimate interests in responding to people who contact us and providing a reliable informational service, subject to their rights and reasonable expectations (GDPR Article 6(1)(f)).

Steps towards a service contract you specifically request: Article 6(1)(b), only where processing is necessary for those requested steps. A general AI question does not automatically fall under this ground.

Optional delivery of a human-reviewed reply by email: your specific consent (Article 6(1)(a)) when requested and given, with address verification. You can withdraw consent through the contact above without affecting prior lawful processing. Minimal consent evidence supports GDPR accountability obligations (Article 6(1)(c)); necessary address-verification and delivery evidence supports legitimate interests in service security and reliable delivery (Article 6(1)(f)).

Abuse prevention, AI usage and cost control, fault diagnosis and recovery copies: legitimate interests in protecting the service and its users (Article 6(1)(f)), limited to what is necessary and proportionate.

Data-protection requests: compliance with GDPR obligations (Article 6(1)(c)). Other legal retention requires an obligation that actually applies; necessary legal-claim records may be retained under Article 6(1)(f).

Opening a page or sending a message is not blanket consent to unrelated processing. These channels provide information; AI replies do not determine legal or similarly significant outcomes about you.

4. AI and human review

Messages and relevant conversation context are processed using the OpenAI API to generate replies and are stored in our operational records. When review is needed, a human reviewer may see the enquiry, AI draft and relevant context. Not every reply is checked by a person; AI output can be inaccurate.

OpenAI states that API data is not used for model training by default unless the customer opts in. This provider default does not confirm this account’s sharing settings. Retention depends on API features and account controls; no zero-retention guarantee is made. See OpenAI’s API data controls.

5. Recipients and providers

Data needed for an enquiry may be handled by authorised human reviewers and suppliers supporting the service: OpenAI for AI responses; Cloudflare for website delivery and network protection; email services, including Spacemail for INELVEX domain mail; hosting and operational monitoring suppliers, including Better Stack; and Microsoft OneDrive for encrypted recovery archives. Meta and Telegram process messages in their channels and also data for their own platform purposes. Senders, recipients and their email providers may retain separate copies.

Provider roles depend on the particular processing and applicable arrangements. Software running on our own server is not, by itself, evidence that its vendor receives your messages. Depending on service and account arrangements, processing may take place outside the European Economic Area. For information about destinations and applicable transfer safeguards, including how to obtain a copy where applicable, contact info@inelvex.com. No EU-only processing guarantee is made.

6. Storage and deletion limits

Messages, conversation/review records, contact and verification information and technical evidence can remain stored after a conversation or verification link expires. Automatic erasure of operational personal data is currently not enabled; these categories have no fixed automatic deletion deadline. Expiry of access is not deletion.

Local offsite and OneDrive recovery copies are configured for 30 UTC daily cycles. Processing can be delayed, and the newest verified recovery point is protected even when older. Historical server backups are not automatically pruned. Mailbox and provider copies have separate retention arrangements. This does not guarantee destruction of every copy within 30 days.

A valid erasure request must be assessed without undue delay. Disabled automation and backup convenience do not, by themselves, justify retention. Necessary legal retention and remaining backup/provider copies must be considered separately. See Data deletion.

7. Your rights

Where GDPR conditions apply, you can request access, correction, erasure, restriction and portability, and object to processing based on legitimate interests. Portability concerns data you provided that is processed automatically on the basis of consent or a contract. You can withdraw consent at any time without affecting prior lawful processing.

Write to info@inelvex.com. Only proportionate identity verification may be requested. Requests must be answered without undue delay and within one month of receipt. Where necessary because of complexity or the number of requests, this may be extended by up to two further months, with reasons given within the first month. Requests are normally free. For manifestly unfounded or excessive requests, the GDPR permits a reasonable administrative fee or refusal; the controller must demonstrate that condition.

Any refusal or partial refusal must explain the reasons and available complaint and judicial remedies. You may complain directly to a competent supervisory authority, including the Bulgarian Commission for Personal Data Protection, and seek a judicial remedy. Contacting us first is not a condition.