Privacy Policy

Last updated: November 5, 2026. Български

This policy explains what personal data we process when you use auwo партиди (“auwo lots”) at partidi.auwo.ai (the “Service”), why, for how long, and your rights under Regulation (EU) 2016/679 (GDPR) and the Bulgarian Personal Data Protection Act.

1. Controller

The controller is Vaklin Stoynovski (natural person), Burgas, Bulgaria, trading under the auwo brand. Contact: audit@auwo.ai. We have not appointed a data protection officer, as one is not required for our type and scale of processing (Art. 37 GDPR).

2. Data we process

Owner account: email and name (via Clerk).
Workers: name, login name and PIN. The PIN is stored only as a one-way hash (scrypt).
Production data you enter: items, suppliers, customers (name, company ID, contact), lots, quantities, expiry dates, document numbers, who recorded them. This is your company’s data; personal data in it is minimal (contact names, if you enter them).
Technical data: IP address, browser, technical logs and error reports.

3. Purposes and legal bases

Providing the Service (traceability, stock, expiry, export): performance of a contract (Art. 6(1)(b) GDPR).
Security, abuse protection and fixing errors: legitimate interest (Art. 6(1)(f)).
Expiry alerts by email or Telegram (paid plan), if you turn them on: performance of a contract.

We do not sell your data, do not use it for advertising and make no automated decisions with legal effects on you. The Service uses no tracking cookies; the workers’ session is one strictly necessary cookie.

4. Retention

Production data: while you have an account. Traceability needs it to stay available; you decide the retention period under your own food safety system.
Account: until you delete it. After a deletion request to audit@auwo.ai we delete the data within 30 days.
Technical logs: typically up to 30 days.

5. Processors and recipients

These providers process data on our behalf, under contract and only on our instructions:

Vercel Inc.: hosting the Service.
Railway Corp.: database (Amsterdam, EU region).
Clerk Inc.: owner accounts and sign-in.
Functional Software Inc. (Sentry): technical error reports.
Optional, if you turn on alerts: Telegram and Resend.

Some of them may process data in the United States. Transfers are protected by GDPR safeguards: certification under the EU–US Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses.

6. Security

Encryption in transit (HTTPS/TLS).
PINs stored as hashes only; lock-out after 5 wrong attempts.
Each customer sees only their own company’s data.
Downloaded Excel files are protected against injected formulas.

7. Your rights

You have the right to access, rectification, erasure, restriction, portability, and to object to processing based on legitimate interest. Your data can be exported at any time (Excel and CSV). For anything else write to audit@auwo.ai; we reply within one month.

You may lodge a complaint with the Bulgarian Commission for Personal Data Protection: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, www.cpdp.bg, or with the supervisory authority where you live.

8. Changes

We may update this policy. The current version and its date are always on this page.