Privacy Policy
This policy explains what personal data SolviLab collects through this website and when you contact us, and how we use it. Data handled inside client operations projects is protected under section 10 of our Terms of Service , mutual non-disclosure agreements (NDAs signed on request), and GDPR/UK-GDPR Data Processing Agreements (DPAs) with Standard Contractual Clauses for EU & UK clients.
1. Who we are
SolviLab is the studio name under which two sole proprietors (FOP) registered in Ukraine provide services. Your contract is signed with one of them — Anton Horbenko or Olha Yevtushenko — and invoices come from the same FOP. That same FOP is the data controller for the personal data in your contract and invoices; Anton Horbenko is the data controller for website inquiries.
Contact: info@solvilab.com
2. What we collect
- Contact forms: your work email, name, company, message, any link you add, and optional project details you choose to share.
- Call booking: when you book a call through Calendly, it collects your name, email and the time slot you choose.
- Calls and emails: whatever you send us. We record a call only if you agree at the start of it.
- Technical data: our hosting provider processes your IP address and browser details to run and protect the site.
Our cost calculator works entirely in your browser. Nothing you enter is sent to us unless you include it in a request.
3. How we use it
To reply to you, schedule calls, prepare proposals and, if we work together, run the project and send invoices. We rely on your request and on our legitimate interest in answering business inquiries; for call recordings and marketing emails, on your consent.
We don't send marketing emails unless you opt in. We don't sell your data or share it for advertising.
5. Where it's processed and how long we keep it
Our engineering team is based in Ukraine. Some infrastructure and service providers (including Vercel, Google, Microsoft, Calendly, and Resend) process data in the European Union and the United States under standard data protection mechanisms (including the EU-U.S. Data Privacy Framework certification and Standard Contractual Clauses approved by the European Commission).
- Requests that don't become a project: deleted 24 months after our last contact.
- Call recordings: deleted within 30 days.
- Contracts, invoices, and accounting records: kept for 3 to 7 years, as required by Ukrainian tax and commercial law.
- Analytics data: retained for up to 14 months (Google Analytics) and up to 13 months (Microsoft Clarity), after which records are automatically deleted or aggregated.
7. Your rights and complaints
Under applicable data protection laws (including the EU GDPR, UK GDPR, and Ukrainian personal data protection legislation), you have specific enforceable rights:
- Access & Portability: Request confirmation of whether we process your data, obtain a copy of it, or request structured transfer to another controller.
- Rectification: Correct inaccurate or incomplete personal records.
- Erasure ("Right to be forgotten"): Request deletion of your contact data when it is no longer necessary for the initial purpose, provided retention is not required by tax or accounting law.
- Restriction of processing & Objection: Object to processing carried out under our legitimate interests, or ask us to restrict the processing of your data while a request is assessed.
- Withdrawal of consent: Where processing is based on consent (such as call recordings or web analytics), you can withdraw consent at any time without affecting the lawfulness of processing before the withdrawal.
To exercise any of these rights, email us at info@solvilab.com. We respond to valid requests within one calendar month.
GDPR & UK DPA Readiness: For clients in the European Economic Area (EEA) and the United Kingdom, we adhere to EU GDPR and UK GDPR data protection principles. When building internal operations software or processing business records on your behalf, we sign a Data Processing Addendum (DPA) incorporating Standard Contractual Clauses (SCCs) upon request.
If you believe your rights have not been respected, you have the right to lodge a complaint with your local data protection supervisory authority (in the UK, the Information Commissioner's Office - ICO; in the EU, your national Data Protection Authority; in Ukraine, the Ukrainian Parliament Commissioner for Human Rights).
8. Links to other sites
Links to LinkedIn and other sites take you to services with their own privacy policies. We're not responsible for how they handle your data.
9. Changes
When this policy changes, we update the date at the top.
Need a mutual NDA before we talk?
We'll sign one before you share anything about your operations. Or email us directly at info@solvilab.com.