Legal

Privacy Policy

Last updated: July 2026

This policy explains what data nilovate.com collects, why, and what your rights are. It is written in plain English on purpose — if anything is unclear, email danilo@nilovate.com and you will get a straight answer.

The short version

  • Analytics are off until you agree. We ask once, up front; decline and nothing is tracked.
  • We use no advertising pixels and never sell or share your data for marketing.
  • We only collect what you type into our forms.
  • Form submissions are stored in a private Google Sheet and used solely to respond to you.
  • Email danilo@nilovate.com at any time to see, correct, or delete your data.

Who we are

Nilovate is an agentic AI implementation consultancy operated from Belgrade, Serbia, working with clients worldwide. For anything related to this policy, the contact is danilo@nilovate.com.

What we collect, and why

The only personal data we collect is what you choose to submit through the forms on this site — the contact form, product waitlists, the agent readiness assessment, and the newsletter signup. Depending on the form, that can include:

  • Contact details: your name, email address, and (optionally) company name.
  • Content you write: your message, assessment answers, or a store URL you share with us.
  • Context: the page you submitted the form from, and a timestamp.

Our forms include simple anti-spam measures (a hidden field and submission timing). These exist only to filter out bots — they do not fingerprint or profile you.

This site has no user accounts and processes no payments, so we never handle passwords or payment details.

Cookies and analytics

We want to know which pages and features are useful, so we can improve the site. To measure that we use Google Analytics 4, loaded through Google Tag Manager — but only if you agree to it first.

On your first visit a banner asks whether you accept analytics. Until you choose, and if you decline, we use Google Consent Mode v2 with every storage type set to denied — so no analytics cookies are set and no measurement data is collected. Only when you press “Accept analytics” do we update your consent to allow it. You can clear the choice any time by clearing this site's data in your browser, and the banner will ask again.

When analytics is enabled with your consent, what Google collects on our behalf is limited to:

  • Which pages you view and how you move between them.
  • General device and browser information (such as screen size and browser type).
  • An approximate, country-level location that Google derives from your IP address.

We use this only in aggregate to understand usage — never to build an advertising profile of you. We do not enable Google Analytics advertising features, ad personalization, or Google Signals, and we run no advertising pixels or cross-site tracking of any kind. Google acts as our data processor for this measurement; its handling of the data is governed by Google's own terms.

Where your data is stored

Form submissions are delivered to a private Google Sheet in our Google Workspace, with access limited to the people who need it to respond to you. The website itself is hosted on Vercel, which — like any hosting provider — keeps standard server logs (such as IP addresses and request metadata) for security and reliability.

How we use your data

We process your submission for exactly one purpose: to respond to the request you made and continue the conversation you started. If you join the newsletter, we email you our insights until you unsubscribe — every email includes a way out. We never sell your data and never share it with third parties for their marketing.

How long we keep it

We keep submissions for as long as the conversation or engagement they relate to is active, plus any period required by law. If you would like your data removed sooner, email us and we will delete it.

Your rights

We operate with the EU General Data Protection Regulation (GDPR) in mind. You can, at any time:

  • Ask what data we hold about you (access).
  • Ask us to correct it (rectification).
  • Ask us to delete it (erasure).
  • Ask us to stop or limit processing it (restriction and objection).
  • Ask for a copy in a portable format (portability).

To exercise any of these, email danilo@nilovate.com. If you are in the EU/EEA, you also have the right to lodge a complaint with your local data protection authority.

International transfers

Our service providers (Google, Vercel) may process data outside the EU/EEA. Where that happens, transfers rely on the safeguards those providers offer, such as standard contractual clauses.

Changes to this policy

If this policy changes, the new version will be published on this page with an updated date at the top. We will not quietly weaken the commitments above.

Contact

Questions, requests, or concerns about your data: danilo@nilovate.com. Nilovate — Belgrade, Serbia, working worldwide.