Privacy policy

The controller is Appnestiq, s.r.o., Company ID (IČO) 23629738, Příčná 1892/4, Nové Město, 110 00 Praha 1, Czech Republic, registered in the Commercial Register with the Municipal Court in Prague, Section C, File 430430.

For anything related to your data (questions, objections, access, rectification, erasure), write to us at contact@appnestiq.com. You can file a complaint with the Czech Office for Personal Data Protection (www.uoou.cz).

When you fill out the form, we process your name, company and email, plus your phone number, industry and message if you provide them. We use this data only to reply to you and to arrange a demo.

The form is not stored on the website. It is sent by email to our mailbox contact@appnestiq.com, where we keep it for 12 months after our last communication with you. After that we delete it, unless the inquiry led to a contract.

Before the form is submitted, it goes through a Cloudflare Turnstile spam check. The check loads only once you start filling out the form. During the check, Cloudflare processes information about your browser and your IP address.

Legal basis: taking steps at your request prior to entering into a contract, and our legitimate interest in replying to inquiries and protecting the form from abuse.

We measure the website with our own tool. We do not use cookies or third-party tools (Google Analytics and the like).

Without your consent, we only count daily totals: how many visits, where they came from, what was read. Nothing in these totals describes a single visit.

If you give consent in the bar at the bottom of the page, we also store a record of your visit (pages, time spent in each section, clicks in order) under a random visit identifier and keep it for 90 days. If, during that visit, you open the Security page, read the pricing or submit the form, we email our team a short summary of the visit: when it started and where it came from, the country, the device type, which pages and sections were viewed and for how long, how far they were scrolled, and what kind of link was clicked. No name, no IP address and no form content.

• the page viewed;
• which sections of the page were on screen and for how many active seconds;
• how far you scrolled the page;
• the kind of link or button you clicked (a link within the website, to another website, an email or phone link, named buttons and toggles);
• clicks outside links (on areas that do not respond to clicks);
• whether you copied text (only whether it was an email address and how long the selection was, never the text itself);
• whether you printed the page;
• that the inquiry form was submitted, never what you wrote in it;
• the website you came from (its address only) and the campaign label (linkedin, email or phone). For a submitted inquiry, we count only the type of source (search engine, AI assistant, social network, direct visit);
• whether the consent bar was shown and whether you accepted, declined or withdrew consent. We count this by day, never linked to a visit, and not at all when Global Privacy Control or Do Not Track is on;
• the browser language;
• errors in this website's scripts: the error message (stripped of quoted text, numbers, addresses and codes), the file name, line and page. By day, never linked to a visit; we keep one example of each error for 90 days;
• how fast the page loaded and responded (Core Web Vitals in ranges, for example “2.5 to 3 seconds”) and which part of the page was slowest. By day and device type, never linked to a visit.

On the server, we add the country (as determined by Cloudflare) and the device type (phone, tablet, computer).

We do not store the IP address (it stays only in the server's memory, for abuse protection, until the server instance is recycled, usually within minutes), the full browser identifier (user agent), or anything from the page after the form is submitted. We measure nothing on the thank-you page.

We treat Global Privacy Control and Do Not Track as declining consent. This is our own commitment, not a legal obligation.

Visit record and email summary: your consent. You can withdraw it at any time with the Privacy settings button at the bottom of every page.

Cloudflare and Resend are U.S. companies. Transfers to the U.S. rely on the EU-U.S. Data Privacy Framework or on standard contractual clauses. We will send you a copy on request.

• analytics totals: 25 months, then deleted by a daily automatic cleanup;
• visit records with consent: 90 days, then deleted by a daily automatic cleanup;
• script error examples: 90 days;
• website deployment markers (version and time, nothing about visitors): as long as the totals;
• visit summary emails in the mailbox: 30 days, then removed by a mailbox rule;
• inquiries from the form: 12 months after the last communication;
• IP address: only in the server's memory, usually for minutes;
• your answer in the consent bar: 12 months in your browser.

You have the right to access, rectification, erasure, restriction of processing and data portability, and the right to object. Write to us at contact@appnestiq.com.

After you give consent, Privacy settings include a Delete data about my visit button. It deletes the record of the current visit (this page load) and withdraws your consent. Earlier visits had a different random identifier, which we do not keep anywhere, so they cannot be traced. They are deleted automatically after 90 days. The totals carry no identifier and stay as they are.

The button does not delete a visit summary email that has already been sent. If you write to us, we will delete it from our mailbox.

If we change this policy, we will update the date at the top of the page.