Privacy Policy

Who we are

This website and the Implenova service ("Implenova", "we", "us", "our") are operated by Bc. Bektur Aibekov, a sole trader (OSVČ) registered in the Czech Republic, IČO 29522471, with a place of business at Příčná 1892/4, 110 00 Praha. You can contact us at 312labscz@gmail.com.

We are the data controller for personal data collected through this website. For personal data you (as a customer) put into the Implenova product about your own clients and projects, we act as a data processor on your behalf — see "Data we process on behalf of customers" below.

This policy explains what personal data we collect, why, on what legal basis, how long we keep it, and the rights you have under the EU General Data Protection Regulation (GDPR) and Czech data-protection law.

What we collect and why

Information you give us directly. When you request access, join a waitlist, contact us, or sign up, we collect the information you submit — typically your name, email address, company name, and anything you write in a message. We use this to respond to you, manage early access, provide the service, and communicate with you about it.

Legal basis: performance of a contract or steps taken at your request before entering a contract (Art. 6(1)(b) GDPR); and our legitimate interest in responding to enquiries (Art. 6(1)(f)).

Marketing communications. If you separately opt in, we may send you product updates or marketing emails. You can withdraw consent at any time via the unsubscribe link.

Legal basis: your consent (Art. 6(1)(a) GDPR).

Technical and usage data. When you visit the site we may collect limited technical data such as IP address, browser type, device information, and pages viewed, through cookies and similar technologies. See our Cookie Policy.

Legal basis: your consent for non-essential cookies (Art. 6(1)(a)); our legitimate interest in a secure, functioning website for strictly necessary cookies (Art. 6(1)(f)).

Account and billing data (for customers). If you become a paying customer, we process account details and billing information needed to provide and bill the service.

Legal basis: performance of a contract (Art. 6(1)(b)); compliance with legal/accounting obligations (Art. 6(1)(c)).

Data we process on behalf of customers (product data)

When you use Implenova to run implementation projects, you may input data about your projects, your organisation, and your own clients — which can include personal data of individuals (for example names and contact details of client staff). For this data, you are the controller and we are the processor. We process it only to provide the service to you and on your documented instructions, under a data processing agreement (DPA) that governs this relationship. If you require a DPA, contact us at 312labscz@gmail.com.

Use of AI providers

To deliver the service, Implenova sends certain content you provide to third-party artificial-intelligence providers — Anthropic (which provides the Claude models used to generate responses) and Voyage AI, a MongoDB company (which provides the embedding models used for search and retrieval) — which process it to provide the service. This processing may take place in the United States. Where this involves a transfer of personal data outside the European Economic Area, we rely on appropriate safeguards (such as the European Commission's Standard Contractual Clauses). These providers act as our sub-processors. Under their applicable commercial/API terms, your inputs and outputs are not used to train their AI models by default; we do not permit your data to be used to train third-party AI models except as described in your agreement with us, and where such use would occur it is subject to your consent.

Who we share data with

We do not sell your personal data. We share it only with:

• Service providers (sub-processors) who help us operate — for example hosting, email delivery, and our AI providers (Anthropic and Voyage AI). Requests submitted through our website forms are processed by Formspree, Inc. (formspree.io, United States), which receives the form contents in order to deliver them to us. Each provider processes data on our behalf under a contract, and transfers outside the EEA are covered by the safeguards described below.
• Third-party website components. Our website loads a visual background component provided by aidesigner (cdn.aidesigner.ai). When your browser loads it, your IP address is transmitted to that provider, and it may set cookies. See our Cookie Policy.
• Authorities, where required by law.

A current list of sub-processors is available on request at 312labscz@gmail.com.

International transfers

Some of our providers may process data outside the EEA. Where they do, we ensure an adequate level of protection through mechanisms recognised under GDPR, such as an adequacy decision or Standard Contractual Clauses.

How long we keep data

We keep personal data only as long as necessary for the purposes above: enquiry and waitlist data for as long as needed to handle your request and a reasonable period after; customer account and billing data for the life of the contract and as required by Czech accounting and tax law; marketing data until you withdraw consent. When no longer needed, we delete or anonymise it.

Your rights

Under GDPR you have the right to: access your data; rectify inaccurate data; erase data; restrict or object to processing; data portability; and withdraw consent at any time (without affecting prior processing). To exercise any of these, contact 312labscz@gmail.com.

You also have the right to lodge a complaint with the Czech supervisory authority, the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, www.uoou.cz).

Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

Changes

We may update this policy from time to time. The "Last updated" date shows the latest version, and material changes will be communicated where appropriate.

Contact

Questions about this policy or your data: 312labscz@gmail.com.