Skip to content

Privacy Policy

Last updated: July 15, 2026

1. Who we are

The controller of the personal data collected through this website (niro.hr) is:

Upheave Technologies d.o.o.
Petračićeva ulica 6, 10000 Zagreb, Croatia
OIB (Croatian company ID): 61900348525
Email: info@upheave.tech
Web: https://upheave.tech

Niro is an AI assistant developed and maintained by Upheave Technologies.

2. What this policy covers

This policy describes the processing of data we collect through this marketing website (niro.hr), primarily through the demo request form.

This policy does not cover data processing that takes place inside the Niro AI assistant when it is deployed on our clients’ websites. In that case the client is the controller and Upheave acts as the processor; that processing is governed by a separate data processing agreement (DPA). Details: https://app.niro.hr/legal.

3. What data we collect

Through this site we collect only the data you enter into the demo request form yourself:

  • email address
  • your website URL

We do not collect other personal data through this site. To measure traffic we use Vercel Web Analytics — a cookieless analytics tool that records aggregated, anonymized data (page views, referrer, device type, approximate location) without persistently storing your IP address and without profiling or identifying individuals. The only cookie we use is a strictly necessary functional cookie that remembers your selected language (see section 7).

Our hosting provider (Vercel) may, at the infrastructure level, process standard server logs (e.g., the request IP address) to deliver the site and for security. We do not access or store this data within the application.

4. Purpose and legal basis

We use the data from the form solely to:

  • respond to your request and prepare a demo
  • contact you regarding that request

The legal basis is taking steps at your request prior to entering into a possible contract, and our legitimate interest in responding to your inquiry (Article 6(1)(b) and (f) GDPR).

5. Data recipients

We do not sell the form data or share it for marketing purposes. The following sub-processors assist us:

  • Mailgun (Sinch): delivery of the email notification containing your request.
  • Vercel: website hosting, running the form on the server, and cookieless traffic analytics (Vercel Web Analytics).

6. International data transfer

The email notification with your data is currently delivered via Mailgun’s US infrastructure, which involves a transfer to the USA. Such transfer is based on the Standard Contractual Clauses (SCC) and the provider’s additional safeguards.

7. Cookies

This website uses only one strictly necessary (functional) cookie — NEXT_LOCALE — which remembers your selected language. We do not use cookies for tracking or advertising; our traffic analytics is cookieless (see sections 3 and 5), so no cookie consent is required to use this site. Fonts are served locally and involve no external calls.

8. Data retention

Form data is not stored in a separate database. It exists as an email notification in our business inbox and in the email provider’s (Mailgun) logs. We keep it for as long as necessary to handle the inquiry and any follow-up communication, after which we delete it.

9. Your rights

Under the GDPR you have the right to:

  • access your data
  • rectify inaccurate data
  • erasure (the “right to be forgotten”)
  • restrict processing
  • object to processing
  • data portability

To exercise your rights, contact us at info@upheave.tech.

If you believe we are processing your data unlawfully, you have the right to lodge a complaint with the supervisory authority: the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb (azop.hr).

10. Changes to this policy

We may update this policy from time to time. We publish changes on this page with the date of the update.

11. Contact

Email: info@upheave.tech
Web: https://upheave.tech