Privacy Policy

Last updated: 08.07.2026

Shoikoi LTD ("Shoikoi", "we") is a company registered in Bulgaria, UIC 208352226, with registered seat at 4 Pliska St, 7000 Ruse, BULGARIA. This policy explains what personal data this website collects, why, and what your rights are. We've written it in plain language on purpose.

The short version

We collect only what you type into our forms or the chat assistant, we store form data in our own EU-hosted database, we use it to respond to you and prepare for your call, we don't sell it, we don't run advertising trackers, and this site sets no cookies until you choose to load the scheduler.

What we collect, and why

Enquiry and booking forms. When you use the contact form or the booking form, we collect your name, email address, your message, and — on the booking form — the revenue range you select. We use this to respond to you, to prepare for the call you're booking, and to route your request (the revenue range determines whether we offer a call slot right away). This data is stored in our own database, hosted with Supabase in the EU (Frankfurt, Germany). Legal basis: taking steps at your request before entering a contract, and our legitimate interest in responding to business enquiries.

Chat assistant. The assistant in the corner of this site is automated software. Messages you send it are processed by our automation platform (n8n) and an AI model provider, routed via OpenRouter, to generate replies; our routing is configured to exclude providers that use conversation data for model training. Conversations are stored under a random session identifier — not linked to your identity unless you share it in the chat — for up to 30 days to keep the conversation coherent, then deleted. Use the chat for questions about our services, and don't share sensitive personal information in it. The assistant has usage limits per visitor and per day.

Scheduling. If you book a call, scheduling is handled by Calendly under its own privacy policy. The scheduler only loads after you click to load it — until then, Calendly receives nothing about your visit.

Analytics. Vercel Web Analytics — cookie-free, aggregate, anonymized page statistics. It does not identify you or track you across sites.

Hosting and security logs. Our host (Vercel) processes standard technical logs to serve and secure the site. For our own rate-limiting we store a salted, one-way hash derived from your IP address — not the address itself. Legal basis: legitimate interest in operating a secure website.

We do not collect special-category (sensitive) data, and this site is not directed at children.

Automated routing — said plainly

The booking form's revenue question automatically determines whether you're shown a scheduling calendar or a message that we're not the right fit yet. That's the entire extent of automated decision-making on this site. It has no legal or similarly significant effect on you, and you can always reach us through the contact form regardless of the outcome.

Who we share data with

No one, except the service providers that make the site work: Vercel (hosting and analytics), Supabase (database hosting, EU), n8n and OpenRouter with its underlying AI model providers (chat assistant processing), Calendly (scheduling, if you use it), and our email provider PrivateEmail. Where a provider processes data in the United States, transfers rely on EU-approved safeguards (Standard Contractual Clauses and/or the EU–US Data Privacy Framework). We never sell personal data or share it for advertising.

How long we keep it

Enquiry and booking-form data: up to 24 months after our last contact, then deleted — unless you become a client, in which case data is kept as part of the client relationship and for as long as Bulgarian accounting and tax law requires. Chat conversations are deleted after 30 days as described above. You can ask us to delete your data earlier at any time.

Your rights

Under the GDPR you can ask us for access to your data, correction, deletion, restriction, portability, and you can object to processing based on legitimate interest or withdraw consent at any time. Write to us at contact@shoikoi.com and we'll respond within one month. You also have the right to complain to a supervisory authority — for us that's the Bulgarian Commission for Personal Data Protection (CPDP, cpdp.bg), or the authority in your own EU country.

Contact

Shoikoi LTD, Bulgaria · 4 Pliska St, 7000 Ruse, BULGARIA · contact@shoikoi.com

Changes

If this policy changes, the new version appears here with an updated date. Material changes to how we use data you've already given us won't happen without telling you.