Privacy statement

As of 13 August 2026 · Auf Deutsch

1. Who is responsible

Confianta EOOD, Detelina 49A, 9101 Byala, Varna, Bulgaria
Registration number (ЕИК/UIC) 207288781 · VAT ID BG207288781
Email: support@confianta.com

2. What we do not do

• We run no user accounts and ask for no password.
• We store no payment details. Payment runs entirely at Stripe.
• We do not keep the conversation from your lesson once it ends.
• We use no tracking cookies and no advertising tracking.

3. Visiting the website

When you open the site, technically necessary data is processed — IP address, time, the resource requested, browser type — in order to deliver the page and keep the service secure. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a secure, functioning service). Server logs are kept briefly and then deleted.

To limit abuse (brute-force protection when a credit code is checked) your IP address is counted in memory for at most ten minutes and then discarded.

4. Fonts

This website loads the "Inter" typeface from Google Fonts, which transmits your IP address to Google. The legal basis is Art. 6(1)(f) GDPR.

5. Running a lesson

When you start a lesson, your microphone signal travels over an encrypted connection to our server and from there to our speech provider, where it is turned into text, answered by a language model, and sent back to you as audio. Without that processing the service cannot be delivered; the legal basis is Art. 6(1)(b) GDPR (performance of a contract).

The conversation exists only in memory for the duration of the lesson, so the tutor can follow it and so you can generate a learning report as a PDF at the end if you want one. That report is produced entirely in your own browser. When the lesson ends, the conversation is discarded on the server.

What is stored permanently is only anonymous figures per lesson — the time, the minutes and credit used, word counts — to check billing and quality. Those figures contain no conversation content.

6. Buying a credit code

To sell you a code we process your email address, in order to send you the code, and the payment status. Payment is handled by Stripe Payments Europe Ltd., Ireland; card details never reach our servers. The legal basis is Art. 6(1)(b) GDPR. Retention periods under commercial and tax law remain unaffected.

7. Recipients and transfers outside the EU

We use the following processors and services:

• Deepgram, Inc. (USA) — speech recognition, language model and speech output during the lesson.
• Anthropic PBC (USA) and Groq, Inc. (USA) — analysing the transcript for the optional learning report.
• Stripe Payments Europe Ltd. (Ireland) — payment processing.
• Airtable, Inc. (USA) — administering the credit codes.
• Google Ireland Ltd. — delivering the typeface.
• Our email provider, for sending you the code.

Where data is transferred to the United States, it is safeguarded by the EU standard contractual clauses or by certification under the EU-US Data Privacy Framework.

8. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), and the right to object to processing based on legitimate interests (Art. 21). Write to support@confianta.com. You also have the right to complain to a supervisory authority — in our case the Bulgarian Commission for Personal Data Protection (cpdp.bg), or the authority in the country where you live.

9. Changes

We update this statement whenever the processing changes — for instance if audience measurement or advertising tracking is ever introduced.