Privacy Policy

1. Who we are

The controller responsible for the processing described in this policy (except section 7, where we act for our customers) is:

For anything related to personal data, including questions for our data protection officer, write to privacy@it-forge.org.

2. In short

• This website uses no tracking or advertising cookies, so there is no cookie banner.
• We count visits with Vercel Web Analytics, which works without cookies and does not tell us who you are.
• If you request a demo or write to us, we use your details to answer you and to arrange the demo.
• Conversations that our customers have with their own clients through Dialong are the customer's data; the customer's privacy policy applies to them.
• We do not sell personal data, and this website contains no advertising trackers.

3. Visiting this website

Our hosting provider, Vercel Inc., delivers this website. When you open a page, your browser sends technical data that our hosting provider needs to deliver the page and to protect the website against misuse and attacks.

Data

IP address, date and time of the request, requested address, referring page, browser type and version, operating system.

Purpose

Delivering the website securely and reliably.

Legal basis

Our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR).

Retention

Request logs that we can see are deleted after one day. Vercel may keep technical data longer where this is necessary to operate and secure its platform — see Vercel's privacy notice (opens in a new tab).

The website does not load content from other companies: fonts, images and scripts are served from this website's own address.

4. Website statistics

To understand how the website is used — which pages are visited, where visitors come from and which buttons and links they use — we use Vercel Web Analytics. It does not use cookies and does not store anything in your browser. Visits on the same day are grouped by a hash (a one-way code) calculated from the request; the hash is discarded after 24 hours, so you are not recognized on later days or tracked across other websites. In Web Analytics, your IP address is used only to calculate this hash and an approximate location; it is not stored with the statistics.

Data

Page address (without query parameters other than campaign tags such as utm_source, and without the part after #), referring website, approximate location (country, region, city), browser, operating system and device type, and the time of the visit. On top of that: which buttons and links you use (for example "Book a demo" or the email link), which FAQ questions you open, whether you switch between monthly and annual prices, and that the demo form was sent — never what you type into it.

Purpose

Aggregated statistics to understand and improve the website.

Legal basis

Our legitimate interest in understanding how our website is used (Art. 6(1)(f) GDPR).

Retention

Aggregated reports are available to us for 12 months.

If your browser sends a Global Privacy Control or Do Not Track signal, your visits are not counted. You can also object at any time — see "Your right to object" in section 10.

5. Demo requests and other inquiries

When you use the "Book a demo" form, email us or call us, we process the details you give us.

Data

Name and email address (required in the form), phone number and message (optional), and the content of our further communication.

Purpose

Answering your request, arranging and holding the demo, and discussing a possible contract with you or your organization.

Legal basis

Our legitimate interest in answering business inquiries and preparing a possible contract with your organization (Art. 6(1)(f) GDPR). If you contact us on your own behalf, for example as a sole trader: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).

Retention

Up to 24 months after our last contact, unless a contract follows (then section 6 applies).

Giving us these details is voluntary, but without a name and a valid email address we cannot answer your request.

6. Customers, trials and contracts

When your organization starts a Dialong trial or becomes our customer, we process data about the people who act for it. We receive this data from you or from your organization.

Data

Company name, and name, email address and phone number of contact persons (for example to issue a trial or license key); contract, license and billing details; support requests and other communication.

Purpose

Issuing trial and license keys, performing the contract, support, invoicing and keeping accounting records.

Legal basis

Our legitimate interest in performing the contract with your organization and in communicating with its representatives (Art. 6(1)(f) GDPR); performance of a contract where you are our customer yourself (Art. 6(1)(b) GDPR); our legal obligations under accounting and tax law (Art. 6(1)(c) GDPR).

Retention

For the duration of the contract and until the limitation periods for claims from it expire; accounting documents for 10 years after the end of the year they relate to, as required by Slovak accounting law.

Contact details are necessary to conclude and perform the contract: without them we cannot issue keys, provide support or invoice.

7. Data processed in Dialong for our customers

Dialong connects messaging channels such as Telegram, WhatsApp, Viber, Instagram, Facebook and Web Chat to our customer's Creatio. Messages, contact details, attachments and conversation history that a customer exchanges with its own clients through Dialong — including conversations handled by the AI bot — are the customer's data, and the customer is their controller.

Where IT Forge, s. r. o. processes this data, for example when providing support, we act as a processor: we process it only on the customer's documented instructions and under a data processing agreement (Art. 28 GDPR), and we do not use it for our own purposes.

If you wrote to a company that uses Dialong and want to access, correct or delete that conversation, please contact that company — its privacy policy applies. If you contact us instead, we will pass your request on to it.

Messaging platforms (for example Meta, Telegram and Viber) process the messages sent through them under their own terms and privacy policies.

8. Who receives personal data

We share personal data only where the purposes above require it, with:

• Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA — hosting and statistics of this website;
• providers of email, customer relationship management and accounting services that we use;
• professional advisers such as lawyers, auditors and tax advisers, who are bound to confidentiality;
• the Dialong customer concerned, when we pass on a request about its conversations (section 7);
• public authorities and courts, where the law requires it.

Service providers that process personal data for us do so only on our instructions and under data processing agreements.

Transfers outside the EU

Vercel Inc. is based in the United States. It participates in the EU–U.S. Data Privacy Framework, for which the European Commission has decided that it ensures an adequate level of protection (Art. 45 GDPR), and its data processing agreement (opens in a new tab) also includes the EU Standard Contractual Clauses (Art. 46 GDPR).

9. Cookies and similar technologies

This website does not use cookies or similar technologies for statistics, advertising or any other purpose that would require your consent, so there is no cookie banner. The statistics code writes nothing to your device: it only reads your browser's local storage to check for an opt-out flag and for a Vercel setting that this website never creates.

If our hosting provider's firewall has to check whether a visitor is a person rather than a bot, for example during an attack, it may set a short-lived security cookie. This is strictly necessary to protect the website.

When you send the "Book a demo" form, our hosting provider's bot protection runs a short check in your browser to tell people from automated programs. It looks at technical characteristics of the browser and stores nothing on your device.

Links to other websites, such as Creatio Marketplace or the Dialong documentation, lead to pages with their own cookie and privacy policies.

If we ever add cookies or similar technologies that are not strictly necessary, we will ask for your consent first and update this section.

10. Your rights

Under the GDPR, where its conditions are met, you have the right to:

• access your personal data and receive a copy of it (Art. 15);
• have inaccurate data corrected (Art. 16);
• have your data erased (Art. 17);
• restrict the processing (Art. 18);
• receive data you gave us in a machine-readable format or have it transmitted to someone else (Art. 20);
• withdraw your consent at any time where we process data based on it (Art. 7(3)).

To exercise your rights, write to privacy@it-forge.org. As a rule this is free of charge. We answer within one month; for complex requests this period can be extended by two further months, and we will tell you if so. We may ask you to confirm your identity first. We do not make decisions about you based solely on automated processing.

You can also lodge a complaint with a supervisory authority, in particular in the EU country where you live or work. Our supervisory authority is the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov Slovenskej republiky), Galvaniho Business Centrum II, Galvaniho 7/B, 821 04 Bratislava, Slovakia, dataprotection.gov.sk (opens in a new tab).

11. Security

We protect personal data with technical and organizational measures appropriate to the risk: this website is served over encrypted HTTPS connections (plain HTTP requests are redirected), and access to personal data is limited to the people who need it for their work. Our website and services are intended for businesses and are not directed at children.

12. Changes to this policy

We update this policy when our services or the law change. The date at the top shows the current version. If you have questions, write to privacy@it-forge.org or to IT Forge, s. r. o., Doležalova 3424/15C, 821 04 Bratislava-Ružinov, Slovakia.