This page covers visitors of konfi.ai and organizer accounts in the Konfi app. If you’re an event attendee chatting with Konfi, the relevant document is the Konfi privacy notice — that notice, not this page, describes what happens to your messages.

Controller: Konfi Labs d.o.o., Braće Radića 30B, 10410 Velika Gorica, Croatia. Contact: privacy@konfi.ai.

Visiting konfi.ai

We don’t use cookies on the marketing site, so there is no cookie banner.

The marketing site itself processes no personal data. We measure site usage with our own first-party analytics: your browser sends coarse, anonymous events (page viewed, section reached) to our own server, and we store only aggregate visit counts. The session identifier is a random value that lives only in your browser tab and disappears when the tab closes — no cookies, no local storage, no third-party analytics service, no cross-site tracking.

Contacting us

If you email us or use a contact form, we process what you send us to reply. Legal basis: legitimate interest / steps prior to entering a contract. We keep correspondence as long as the conversation is live plus a reasonable business record period.

Organizer accounts

If you have an organizer account, we process:

Account data — name, email, organization, and (if you sign in with Google) your Google account email. Legal basis: performance of contract.
Session cookies — the organizer app sets strictly necessary authentication cookies to keep you signed in. These are exempt from consent requirements.
Access and audit logs — sign-ins and administrative actions, kept for security. Legal basis: legitimate interest.
Billing contact data — when we invoice, per our contract. Kept as long as bookkeeping law requires (11 years in Croatia).

Account data is retained for the life of the account and deleted or anonymized within 90 days of account closure, except what bookkeeping or tax law requires us to keep.

Account data is hosted on EU infrastructure (Hetzner); error monitoring uses Sentry, and transactional email uses Mailgun (EU region). The full subprocessor list, including transfer safeguards for non-EU providers, is at konfi.ai/legal/subprocessors.

Your rights

Access, correction, deletion, restriction, portability, objection — email privacy@konfi.ai. Complaints: AZOP (azop.hr) or your own EU country’s authority.

Version 1.1, 6 August 2026.