Privacy Policy

Last updated: 2026-05-03

1. Who we are

Pragma AI ("we", "us") is a 4-person AI consulting firm based in Bulgaria. The data controller for purposes of GDPR is Pragma AI, contactable at hello@pragma-ai.eu.

2. What data we collect

Information you provide — name, company, email address, role, and project details when you contact us via hello@, audit@, or info@ email aliases.
Analytics data (with your consent) — Google Analytics 4 collects anonymised information about your visit: pages viewed, time on page, referring source, approximate location (country level), device type, browser. IP addresses are anonymised.
Marketing pixel data (with your consent) — Meta Pixel records that you visited our site so we can build audiences for potential future advertising and measure ad effectiveness. Data is shared with Meta Platforms Ireland Ltd.
Server logs — our infrastructure (AWS Lightsail, Caddy reverse proxy) records IP addresses and request paths for security and debugging. Retention: 30 days.
Client data (paid clients only) — when you grant us read-only API access for our Marketing Intelligence service, we process your marketing platform data per a separate Data Processing Agreement (DPA).

3. Why we collect it

Performance of contract / pre-contractual steps — when you enquire about our services or sign up.
Legitimate interest — security logs, technical operation of the website.
Consent — analytics and marketing cookies. You can withdraw consent at any time via the Cookie settings link in the footer.

4. Who we share data with

Google LLC (Google Analytics 4) — analytics data. Standard Contractual Clauses apply.
Meta Platforms Ireland Ltd (Meta Pixel) — pixel data. EU data controller for EEA users.
Amazon Web Services EMEA SARL — hosting infrastructure (Lightsail, S3, CloudFront in eu-central-1, Frankfurt).
Cloudflare, Inc. — CDN / DNS for some services.
Anthropic PBC — Claude API for text analysis (paid Marketing Intelligence service only; client data only, per DPA).
Google Workspace — email and document storage (radoslav@pragma-ai.eu, reports@pragma-ai.eu).

5. International transfers

Some of the processors above are US-based. Transfers rely on EU Standard Contractual Clauses and the EU-US Data Privacy Framework where applicable.

6. How long we keep it

Email correspondence: 3 years from last contact (or until you request deletion).
Analytics data: 14 months (GA4 default).
Server logs: 30 days.
Client data (paid services): per the contract DPA, typically deleted within 30 days of contract termination.

7. Your rights

Under GDPR you have the right to:

Access your data
Rectify inaccurate data
Erase your data ("right to be forgotten")
Restrict or object to processing
Data portability
Withdraw consent at any time
Lodge a complaint with the Bulgarian Commission for Personal Data Protection (cpdp.bg)

To exercise any of these, email info@pragma-ai.eu. We respond within 30 days.

8. Cookies

This site uses three categories of cookies:

Strictly necessary — none beyond the consent record itself, stored in localStorage (key pragma-consent).
Analytics (only with consent) — Google Analytics sets _ga, _ga_* cookies (2-year expiry).
Marketing (only with consent) — Meta Pixel sets _fbp cookie (90-day expiry).

You can manage your choices via the Cookie settings link, or by clearing site data in your browser.

9. Changes to this policy

We may update this policy. The "last updated" date at the top reflects the most recent change. Material changes will be communicated via the website.

10. Contact

For any privacy-related questions: info@pragma-ai.eu