ServusHostPrivacy policy
Last updated: 21 October 2026
This policy explains what personal data ServusHost collects through this website, why, and what rights you have. We keep it short and plain.
Who is responsible for your data
The controller of your personal data is:
Bc. Vladislav Khvorov (trading as ServusHost)
Fialová 4072/7, 851 07 Bratislava-Petržalka, Slovakia
IČO: 54617057
Registered in the Trade Register of the District Office Bratislava, No. 110-313957
Email: info@servushost.com
Phone: +421 919 208 426
We have not appointed a data protection officer. For any question about your data, write to info@servushost.com.
What we collect and why
When you send us the contact form
What we collect:
- name
- company (optional)
- email or phone number
- number of flats
- your message (optional)
Why: to reply to your request, discuss whether ServusHost fits your flats, and prepare an offer.
Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR). If you are contacting us on behalf of a company, also our legitimate interest in communicating with business contacts (Art. 6(1)(f) GDPR).
Where it goes: your request is stored in our database (Supabase, Frankfurt) and reaches us as a Telegram message, or by email through Resend if Telegram is unavailable.
How long we keep it:
- The stored request in our database: deleted 12 months after it arrives.
- The copy in our Telegram or email, and our further correspondence with you by email or Telegram: 12 months after our last contact if no contract follows. If you become a customer, we keep it for the duration of the contract and afterwards for as long as Slovak tax and accounting law requires.
IP address: to stop misuse, the form counts requests per IP address, in the same way as the demo chat: we store only a keyed hash of your IP address and delete these counters after 24 hours.
When you email, call or message us on WhatsApp
What we collect: your contact details and the content of your messages.
Why, legal basis and how long: the same as for our correspondence about a contact form request.
If you contact us on WhatsApp, WhatsApp's privacy policy also applies. WhatsApp Ireland provides the service in the EEA and may process information outside the EEA, including in the United States, under the transfer mechanisms described in that policy.
When you visit the website
What we collect: our hosting provider automatically records technical data such as IP address, browser type and time of access in server logs.
Why: to keep the site secure and working.
Legal basis: our legitimate interest (Art. 6(1)(f) GDPR).
How long we keep it: our hosting provider, Vercel, keeps these logs for 1 hour.
When you try the demo chat
The demo apartment on this website is run by ServusHost, so ServusHost is the controller for what you enter there.
What we collect:
- your messages and the replies
- the time, the chat's language, and how you opened it (link, QR code or NFC tag)
- a short summary, if the assistant raises an alert
- your phone number or email, if you fill in the contact card
Where it goes: your messages go to Anthropic, whose AI model writes the replies. Alerts and contact details reach us on Telegram, or by email through Resend.
Why: to show how ServusHost works, and to keep the demo available and free of misuse.
Legal basis: our legitimate interest in showing how ServusHost works and keeping the demo free of misuse (Art. 6(1)(f) GDPR). For the contact card, the same as for the contact form.
How long we keep it:
- Message text and alert summaries: 60 days after your last message.
- The time, the chat's language and how you opened it: 12 months, for statistics.
- If you fill in the contact card, your details reach us on Telegram or by email. We keep that copy like a contact form request, up to 12 months after our last contact. The copy in the chat database is deleted after 30 days.
- Your browser keeps the demo conversation for 30 minutes after your last message, so it survives a reload. "Start over" clears it sooner.
IP address: to stop misuse, we count requests per IP address. For this count we store only a keyed hash of your IP address, which can't be turned back into the address without our secret key, and we delete these counters after 24 hours.
Hosting: Vercel hosts this website, and Supabase runs the chat in Frankfurt, with Cloudflare in front of it. They see your IP address when they deliver each request. Vercel keeps its request logs for 1 hour, Supabase for 1 day.
Cookies
The public pages do not set advertising or tracking cookies, and the contact form does not save its fields in cookies, localStorage or sessionStorage.
The demo chat sets no cookies. It keeps the conversation in your browser's local storage, as described under "When you try the demo chat".
Our host, Vercel, sets no cookies on these pages.
The website serves its font files from its own host. Loading these fonts does not contact Google Fonts.
Who we share data with
We do not sell your data. We share it only with service providers that help us run the website and the demo chat, and reply to you. They process it on our behalf and under our instructions:
- Hosting: Vercel Inc. (United States). The pages are rendered in Frankfurt and delivered through Vercel's worldwide network, so technical data may be processed outside the EEA. Vercel is certified under the EU-U.S. Data Privacy Framework (privacy notice).
- Database for the demo chat and the contact form: Supabase, in a project in Frankfurt (EU). Data is stored there, not made publicly readable. Supabase also processes some support and operational data outside the EEA, including in Singapore and the United States, under the Standard Contractual Clauses described in its data residency and transfers information.
- AI replies in the demo chat: Anthropic. Customers in the EEA contract with Anthropic Ireland, Limited, and processing takes place in the United States. Transfers are covered by the EU Standard Contractual Clauses (Module Two, controller to processor) in Anthropic's Data Processing Addendum (effective 24 February 2025), which is part of its Commercial Terms.
- Demo alerts and contact requests by email: Resend (Plus Five Five, Inc., United States). Emails are sent from Ireland, and Resend stores its data in the United States. Its Data Processing Addendum, which applies to every Resend account, includes the EU Standard Contractual Clauses (Module Two, controller to processor), and Resend is certified under the EU-U.S. Data Privacy Framework.
- Demo alerts, demo contact details and contact requests on Telegram: these reach us as messages from our Telegram bot. Telegram Messenger Inc. is the controller for data in its own service; for accounts registered in the EEA it stores data in the Netherlands (privacy policy, sections 1.4 and 4.1).
- Email: our mailbox, info@servushost.com, is hosted by Hostinger.
We may also disclose data where the law requires it, for example to public authorities.
Guests using ServusHost in a rental flat
When a guest uses the ServusHost assistant in a flat, the flat's owner or manager is the controller of that guest's data, and ServusHost processes it on their behalf under a data processing agreement. Guests can find details in the information shown in the chat and from their host.
Automated decisions
We do not make decisions about you based solely on automated processing, and we do not profile you.
Do you have to give us your data?
No. But we need your contact details to reply to you.
Your rights
Under the GDPR you have the right to:
- access the data we hold about you
- have it corrected
- have it deleted
- restrict how we use it
- receive it in a portable format
- object to processing based on our legitimate interest
To use any of these rights, write to info@servushost.com. We will reply within one month.
You also have the right to lodge a complaint with the Slovak supervisory authority:
Úrad na ochranu osobných údajov Slovenskej republiky
Hraničná 12, 820 07 Bratislava 27
dataprotection.gov.sk
Changes to this policy
We may update this policy when our services or the law change. The date at the top shows the latest version.