Privacy policy.

Who is responsible

Grepfox is the business name used by Roman Guertsvolf, an individual entrepreneur registered in Georgia. Roman Guertsvolf is responsible for the personal data described in this policy and acts as its controller.

For privacy questions and requests, use our contact form and address your message to Roman Guertsvolf.

This policy covers the Grepfox website, enquiries, subscriptions and call bookings. Data handled for a client project is addressed separately in the agreement for that project.

Information you provide

• Enquiries: your name, email address, optional company name and the message you submit. The message is delivered to our email inbox.
• Subscriptions: your email address, the date the subscription record was created and the fact that it came from the blog form.
• Call bookings: the contact details, appointment information and answers you provide when you follow our Cal.com booking link.

Providing these details is voluntary. The contact form needs a name, valid email address and message to submit an enquiry; the company field is optional. The subscription form needs an email address. You can browse the site without using either form or booking a call.

Why we use this information

• Enquiries and bookings: to respond, discuss your requirements and take steps towards an agreement when you request them. Other business correspondence is handled on the basis of our legitimate interest in responding to people who contact us.
• Subscriptions: to keep the email list you choose to join and use it for Grepfox updates about AI, automation and marketing operations, on the basis of your consent.
• Website operation: to deliver pages, maintain security, understand page usage and assess performance, for our legitimate interest in operating and improving the site, subject to applicable consent requirements.
• Legal obligations: to keep records or respond to requests where the law requires it.

Sending an enquiry does not add you to the subscriber list. The website forms do not send your message to an AI model or use it to make an automated decision about you.

Website measurement and technical data

The site includes Vercel Web Analytics for page usage and Vercel Speed Insights for page performance. These services report information such as page URLs, referring pages, browser and device information, approximate location and loading metrics.

Vercel describes Web Analytics as using request-derived visitor hashes instead of third-party cookies, and Speed Insights as collecting performance measurements without identifying an individual visitor. These descriptions apply to those features; hosting and other services also receive technical request information, such as an IP address, to deliver the site.

The website does not include advertising pixels or a tool for replaying your browsing session. External websites you choose to visit, including Cal.com and social networks, have their own cookie and privacy practices.

Service providers

Vercel hosts the website and provides its usage and performance measurement services.

Resend delivers contact-form messages. It receives the sender details and message content needed for that delivery.

Google provides the Gmail inbox used to receive enquiries. The website also loads fonts from Google Fonts, so your browser connects to Google when requesting those files.

Cal.com handles scheduling when you open the booking link. Booking takes place on Cal.com rather than in an embedded form on this website.

Subscription records are stored in the website’s content management system. Provider involvement depends on what you do: simply browsing does not send a contact-form message or make a booking.

Processing outside Georgia

The providers above operate internationally, so information may be processed outside Georgia, including in the United States. Their published privacy and data processing terms describe their processing locations, subprocessors and protections.

Provider terms include the Vercel data processing addendum and the Resend data processing addendum. You can contact us for information about the arrangements relevant to your data.

How long information is kept

Retention depends on the purpose of the record: handling an enquiry and any resulting work, maintaining a requested subscription, or meeting an applicable record-keeping or legal requirement. Relevant factors include whether a discussion or project is still active and whether the record is needed to resolve a dispute.

You can ask us to remove your subscription or delete enquiry information. Records that must be retained under applicable law may be kept for that purpose. Copies held in provider systems, such as delivery records, logs or backups, are also subject to those providers’ retention arrangements.

Your rights and requests

Depending on the applicable law and the basis for processing, you can request information about your data, access and copies, correction, deletion, restriction or blocking, and a portable copy where that right applies. You can also withdraw consent.

To withdraw your subscription, use the contact form, enter the subscribed email address and ask to unsubscribe. There is no charge. Under Georgian law, processing for direct marketing must stop no later than seven working days after the request.

Other privacy requests are handled within the time limits required by applicable law. We may need information to verify that a request concerns your data. If a legal exception prevents us from fulfilling a request, we will explain the reason where the law requires it.

You can raise a complaint with the State Audit Office of Georgia or seek a judicial remedy under Georgian law. Rights available under other applicable laws are unaffected.

Changes and contact

We will update the date above when this policy changes. For questions about a specific record or this policy, contact Roman Guertsvolf at Grepfox.