Privacy
On a first visit, Subverza estimates your country locally from the connection IP to choose a language. The language resolver does not store your IP or send it to a geolocation provider. IP location is approximate, especially with VPNs. Your manual choice overrides this estimate and is saved in this browser for one year in an HTTP-only cookie, across the public site and account workspace. Country lookup includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com under CC BY-SA 4.0.
Public company searches can place submitted names, selected public registry identifiers and VAT numbers in URLs and hosting access logs; do not put private project information in those fields. Submitted company names are sent server-side to podatki.gov.si (AJPES open data via OPSI) and api.gleif.org (GLEIF). VAT-only checks are format-only and are not sent to those registries or an AI provider.
Authenticated account, company-profile, application, support and uploaded-evidence content is encrypted at rest by Subverza with server-managed keys. This is not end-to-end encryption: authorized server operations decrypt data, and explicitly consented AI drafting sends the selected facts and evidence to the configured AI provider. If enabled, Google processes sign-in requests and returns verified email/profile claims; Subverza encrypts the Google subject identifier, keeps only keyed HMAC subject indexes, and discards provider access and refresh tokens. Resend receives an email address and verification code during registration; users who explicitly opt in to deadline reminders may also receive reminder email containing public call details. Stripe receives billing contact and subscription details when checkout is configured. Hosting/database providers may process operational metadata. Passwords and authentication tokens are stored as one-way hashes. The language preference uses an HTTP-only cookie; no analytics or marketing cookies are installed.
To count daily active accounts, Subverza records your account ID, Ljubljana calendar date and first/last authenticated use timestamps. This operational record is available only to authorized administrators and in your account export; it contains no IP address, visited URL or additional tracking cookie. The confirmed registered-seat municipality stays encrypted in your company profile and is used to select relevant public local and regional funding sources; no company profile is sent to those websites.
Security and operational audit records contain account IDs, action names, target IDs and timestamps for sign-in attempts and selected company/application changes. Unidentified sign-in subjects use keyed HMAC identifiers, not plaintext email addresses. Authorized administrators can review these events; no keystrokes, IP addresses or browsing history are recorded by this audit feature.
To enforce Free limits, Subverza retains per-account application usage and the first AI job identifier even if drafts or jobs are deleted or the plan changes. Manual access grants record the plan, expiry, granting administrator and revocation. These access records are included in account exports and removed with the account; no payment is implied by a manual grant.
A complete operator-specific privacy notice, retention schedule, data-subject contact and service terms must be reviewed and published before public launch. Do not use this summary as a substitute for that legal notice.