Privacy Policy

This Privacy Policy describes how Bot/TrollChecker (the “Application”) processes personal data, in accordance with Regulation (EU) 2016/679 (GDPR) and the Bulgarian Personal Data Protection Act.

The controller of the personal data is the Operator of the Application. You can contact them via the contact form in the Application for any requests regarding your rights.

We collect only the minimum data necessary for the Application to work:

• Profile data: email address, profile identifier and roles when you register; when signing in via Google we automatically also receive the name provided by Google (full name), but it is not required and is used only for display in your profile;
• Usage data: history of performed analyses (platform, searched username, result), last login date - for the “History” feature and to prevent abuse;
• Analysis data: information about the analysed public profiles (username, platform, public statistics) that you enter or that is publicly available;
• Payments: subscription status and an identifier from the payment provider Stripe. Card details are not stored by the Application;
• Technical data: IP address and device information in security logs and when troubleshooting is needed.

• Providing the Service (registration, analyses, history): Art. 6(1)(b) GDPR - performance of a contract;
• Payment and subscription processing: Art. 6(1)(b) and (f) GDPR;
• Maintaining security and preventing abuse: Art. 6(1)(f) and Art. 32 GDPR;
• Anonymous usage statistics: Art. 6(1)(a) GDPR - only if you have given consent; you may withdraw it at any time.

The analyses are performed by an artificial intelligence model that processes the submitted data and publicly available information from the internet. These processes are automated within the meaning of Art. 22 GDPR, but do not by themselves lead to legal consequences for you - the results are informative and subject to human judgement.

We do not process special categories of data (Art. 9 GDPR) and do not carry out profiling for automated decision-making with legal effect.

We keep your data while you have an active profile or subscription, and for up to 12 months after its deletion - for accounting and evidentiary purposes. The results of analyses you entered are kept until your profile is deleted. Security logs are kept for up to 12 months.

We do not sell or provide your personal data to third parties for marketing. Data is processed only by:

• processors: the platform's hosting and infrastructure (EU-based cloud), the payment provider Stripe Payments Europe Ltd. for payments, and an AI services provider for generating the analyses;
• competent public authorities - only upon a lawful request.

Processors act under a contract pursuant to Art. 28 GDPR and technical protection measures.

Where processing in third countries is technically unavoidable, it takes place only with the safeguards of Chapter V GDPR - an adequacy decision of the European Commission, Standard Contractual Clauses (2021/914) and additional technical measures.

Under the GDPR you have the right to:

• access your data (Art. 15) and rectification (Art. 16);
• erasure (“right to be forgotten”, Art. 17) - it can be exercised directly from your profile settings in the Application;
• restriction of processing (Art. 18) and data portability (Art. 20);
• object to processing under Art. 6(1)(e) GDPR (Art. 21);
• withdraw consent at any time (Art. 7);
• lodge a complaint with the Commission for Personal Data Protection (CPDP), 2 Prof. Tsvetan Lazarov Blvd., Sofia - kzld.government.bg.

We respond to your requests within one month, in accordance with Art. 12 GDPR. Before exercising your rights we may ask you for identification to prevent abuse.

We use only strictly necessary cookies and local storage - to maintain the session, the language setting and protection against abuse. They do not require consent under Art. 5a of the Electronic Communications Act and Art. 4a(5) GDPR.

We do not use tracking or third-party advertising cookies.

We apply appropriate technical and organisational measures to protect data in accordance with Art. 32 GDPR: transport encryption (HTTPS), restricted access to data, access logging and regular security reviews. If a breach that may pose a risk to your rights is established, we will notify you, and in the case of high risk - also the CPDP, in accordance with Art. 33 and 34 GDPR.

The Application is not intended for persons under 18 and we do not knowingly collect their data. If we find that we have collected data of a minor without the necessary parental consent, we delete it.

In the event of material changes in data processing we will update this page and notify registered users by email. The date of the last update is indicated at the top of the page.

By registering, signing in to your profile and using the Application you expressly consent to provide and to allow us to process the personal data listed in section 2 (email address, the name provided by Google when signing in with Google, analysis history, subscription data and technical logs) for the following purposes:

• creating and maintaining your profile and providing the AI profile analysis service;
• managing the Premium subscription, processing payments and preventing unauthorised access to paid features;
• maintaining the security of the service, detecting and preventing abuse;
• notifying you about the status of your profile and subscription (e.g. activation, cancellation, important changes).

Consent is given by your actual use of the Application and is voluntary - you may withdraw it at any time by cancelling your subscription, deleting your profile or contacting us. Withdrawal does not affect the lawfulness of processing carried out before it. Refusing the processing of data for the necessary purposes makes it impossible to provide the service.