Privacy Policy

1. Data Controller

The data controller for personal data processed through this website is:

BondMesh DOO
Vidska 7/23 Voždovac
11000 Belgrade, Republic of Serbia
Email: [email protected]

2. What Personal Data We Collect

2.1 Data you provide directly

• Email address — when you submit the Early Access request form on our website.
• Name and organisation details — if you contact us directly by email.

2.2 Data collected automatically

• Log data — IP address, browser type and version, operating system, referrer URL, pages visited, and timestamps. Collected automatically by our web server.
• Usage data — general interaction patterns with the website (page views, scroll depth). This is collected in an aggregated, anonymised form and does not identify individuals.

2.3 Data from third-party services

Our website loads resources from the following third-party services, which may process your IP address and browser data:

• Google Fonts (fonts.googleapis.com, fonts.gstatic.com) — used to serve the Inter typeface. See Google Privacy Policy.
• cdnjs.cloudflare.com — used to serve the Lottie Web animation library. See Cloudflare Privacy Policy.
• cdn.simpleicons.org — used to serve integration partner logo icons. See SimpleIcons project documentation for applicable policies.
• LinkedIn media CDN (media.licdn.com) — used to serve the Moonstruck partner logo image. See LinkedIn Privacy Policy.

We do not use cookies, tracking pixels, or analytics scripts. No personal data is shared with advertising networks.

3. Legal Basis for Processing

We process personal data on the following legal bases under GDPR Article 6:

• Consent (Art. 6(1)(a)) — where you have given explicit consent, e.g. by submitting the Early Access form.
• Legitimate interests (Art. 6(1)(f)) — for server log data necessary to maintain the security and stability of our website, where our interests are not overridden by your rights.
• Performance of a contract / pre-contractual steps (Art. 6(1)(b)) — where processing is necessary to respond to your enquiry or process your access request.

4. How We Use Your Data

• To respond to your Early Access or enquiry requests.
• To notify you about product updates, launch announcements, and information relevant to your access request — only with your prior consent.
• To maintain and improve the security and performance of our website.
• To comply with legal obligations.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

5. Data Retention

We retain personal data only for as long as necessary for the purposes described in this policy:

• Early Access email addresses — retained until the product reaches general commercial availability, or until you request deletion, whichever is sooner.
• Email correspondence — retained for up to 3 years from the date of last contact.
• Server logs — retained for up to 90 days for security purposes, then deleted.

6. Data Transfers

BondMesh is based in Serbia. The Republic of Serbia has been granted an adequacy decision by the European Commission, meaning that transfers of personal data from the EU/EEA to Serbia are treated as equivalent to intra-EU transfers under GDPR.

Where third-party service providers (listed in Section 2.3) are located outside the EU/EEA, transfers are conducted under appropriate safeguards including Standard Contractual Clauses or the provider's adequacy decision.

7. Your Rights

Under GDPR and the Serbian ZZPL, you have the following rights regarding your personal data:

• Right of access — to obtain a copy of the personal data we hold about you.
• Right to rectification — to request correction of inaccurate or incomplete data.
• Right to erasure ("right to be forgotten") — to request deletion of your personal data where there is no longer a legitimate basis for processing.
• Right to restriction of processing — to request that we limit how we use your data.
• Right to data portability — to receive your data in a structured, machine-readable format.
• Right to object — to object to processing based on legitimate interests.
• Right to withdraw consent — at any time where processing is based on consent, without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days. There is no charge for exercising these rights.

8. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our website is served over HTTPS. Access to personal data is restricted to authorised personnel only.

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the competent supervisory authority within 72 hours and will notify you directly where required by law.

9. Supervisory Authority

You have the right to lodge a complaint with the competent data protection supervisory authority. In Serbia, this is:

Commissioner for Information of Public Importance and Personal Data Protection
Bulevar kralja Aleksandra 15, 11000 Belgrade, Serbia
Website: www.poverenik.rs

If you are located in the EU/EEA, you may also contact the supervisory authority in your country of residence or place of work.

10. Children

Our website and services are directed at business professionals and enterprises. We do not knowingly collect personal data from individuals under the age of 16. If you believe a minor has provided us with personal data, please contact us immediately and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically. Your continued use of the website following changes constitutes acceptance of the updated policy.

12. Contact

For any questions, requests, or complaints regarding this Privacy Policy or our data processing practices, please contact us:

BondMesh DOO
Email: [email protected]
Address: Vidska 7/23 Voždovac, 11000 Belgrade, Serbia