Privacy Policy
About this translation
This is a courtesy translation. If the two versions differ, the Bulgarian version prevails.
1. Introduction
This policy explains how MetisFactory (Paradisus EOOD) collects, uses, discloses and protects your information when you visit metisfactory.io.
2. What information we collect
Personal data. We collect the data you send us voluntarily — when you email us or contact us in some other way. That is usually a name, an email address and a phone number.
Technical data. Our servers automatically record information when you visit the site: IP address, browser type, operating system, time of access and the pages you looked at before and after the site.
3. What we use the information for
We use the information we collect to:
- maintain and run the site
- improve its content
- understand how the site is used
- answer your messages
- send emails related to our work
- detect and prevent abuse
4. Cookies and measurement
Before you answer the cookie banner, we count visits anonymously with PostHog (servers in the EU) — with no cookies and no data that would let us recognise you on a later visit.
If you accept the cookies from the banner, we also switch on: the full PostHog measurement with session recording, Google Analytics and Google Tag Manager, and the Meta pixel (the _fbp and _fbc cookies), which measures whether our ads on Facebook and Instagram lead to enquiries. When an enquiry is sent, we also send Meta a server-side event with the email address and the phone number hashed — Meta does not receive your data in readable form.
If you decline, none of the above is switched on. You can also delete the cookies later from your browser settings.
5. Third-party services
The measurement under section 4 runs through PostHog (EU), Google and Meta — their own privacy policies apply to the processing on their side. Beyond that, this policy covers metisfactory.io only: links to other sites fall under those sites’ own policies, and we recommend you read them.
6. Your rights under the GDPR
As a user you have the following rights over your personal data:
- the right of access — you can ask for a copy of your personal data
- the right to rectification — you can ask us to correct inaccurate information
- the right to erasure — you can ask us to delete your data, under certain conditions
- the right to restriction — you can ask us to restrict the processing, under certain conditions
- the right to object — you can object to the processing, under certain conditions
- the right to portability — you can ask for your data to be transferred to you or to another organisation
7. Contact
If you have questions about this policy, write to us at hello@metisfactory.io.
8. Offers to companies without a website
We look for local companies that are active on Google Maps but have no website, and we offer them an example website. For that we process company contact data: company name, legal form, company registration number (ЕИК), address, phone number and the publicly published company email address. We take them from the Commercial Register, from company directories and from the company’s own website, and from Google Maps we keep only the identifier of the place and its coordinates, for up to 30 days.
The basis is legitimate interest (Article 6(1)(f) of the GDPR): to offer a service to a company that has itself published a channel for contact. We call once, and we send an email only if you asked for one on the phone. The data is not sold and is not used for anything else.
Processors: Anthropic (reading public pages and extracting facts, USA, under a data processing agreement), Supabase (database), Vercel (hosting), Google (Places API), Resend (email upon consent).
Retention periods:
- coordinates from Google — 30 days
- data on companies we have not contacted — 30 days
- after our last message — 90 days
- the list of those who declined to be contacted — kept with no time limit, so that we do not write to you again
Rights: access, rectification, erasure and restriction, at hello@metisfactory.io. You have the right to object to this processing at any time (Article 21 of the GDPR) — replying “no” or “stop” is enough, and we stop. You have the right to complain to the Commission for Personal Data Protection (cpdp.bg).
Section as of 2026-09-02, version 1.