This Privacy Policy explains how we process your personal data on the website expertconsilium.com and in the application app.expertconsilium.com. Date of amendment and effective date: 17 October 2026. Version 1.1.
Last updated: 1 November 2026.
Personal data is any data relating to a natural person whose identity is determined or can be determined, directly or indirectly, in particular by reference to an identifier such as a name and identification number, location data, an identifier in electronic communication networks, or one or more features of that person's physical, physiological, genetic, mental, economic, cultural and social identity.
We collect only the personal data you entered in your account in the application and the number of the account from which the Service was paid. This is the following data, which is necessary to provide the service and charge the price: • The User's first and last name • E-mail address • The number of the account from which payment was made, shown when the payment is recorded. We process this data to the extent necessary to maintain the account, provide the Service and record payments. If you request a guide on the website, we also process your e-mail address, language and the name of the selected guide. If you separately sign up for occasional materials, we record that with the date of sign-up and, if you unsubscribe, the date of unsubscribing. Through the contact form you send us the name, e-mail address and message you enter yourself; it reaches only our e-mail. Answers in the short survey on the website are anonymous and contain no e-mail address. At registration and login we also technically process your IP address and browser and device information, for account security, limiting the number of attempts and detecting suspicious login attempts.
The controller is Goran Granić, Serbia, e-mail support@expertconsilium.com (Expert Consilium, we), who provides the service on the website expertconsilium.com and in the application app.expertconsilium.com.
A recipient and processor of your personal data is Hetzner (Germany), whose server stores your account in the account database. Hetzner keeps server backups for up to 60 days (a server image for up to 7 days, a daily copy for up to 60 days and an encrypted copy on separate storage of the same provider). A recipient and processor of your personal data is Zoho, which stores the data of the e-mail through which confirmations, pro forma invoices and guides you request are sent, and Hetzner also stores the record of e-mail addresses of those who requested a guide. To prepare the report, your question is processed by OpenRouter and the providers of AI models, with a Zero Data Retention requirement and data collection prohibited (the provider is not to retain the content of questions and answers), with documented exceptions described on the Confidentiality page. These include models that run at Google, where the provider may, under its own rules, retain requests for safety monitoring and abuse prevention, for a period the provider sets. The perspective that searches public sources on the internet works under its provider's own data retention rules (see the Confidentiality page). Cloudflare (USA) provides website hosting, DNS and spam protection (Cloudflare Turnstile) and does not store your account. For checking inappropriate content, masked text is processed by the OpenAI Moderation API. If you sign in with a Google, Microsoft or GitHub account, those providers process the sign-in data. Google Analytics is used to measure website traffic, subject to your cookie choice. These internet service providers apply their own Privacy Policies, and your data is processed by them automatically, without the involvement of natural persons. The payment service provider processes your personal data when you pay, under its own Privacy Policy, and you enter the payment card number directly with it. Your personal data is processed by the accountant when payments are recorded in the business books. Transfer of data outside Serbia. Part of the processing takes place outside the Republic of Serbia: the application server and backups are in Germany (Hetzner), while OpenRouter, the AI model providers (the model makers we currently use are Anthropic, Google, OpenAI, xAI, Meta and Perplexity), OpenAI Moderation and Cloudflare are headquartered in the United States. The transfer is made only to provide the service you ordered, with masking of identifying data and the Zero Data Retention requirement described on the Confidentiality page. We determine the basis for the transfer per provider (a data processing agreement with standard contractual clauses or another basis the law allows), and we provide the list with the basis per provider on request. We invite users to leave a rating through a public link to our Trustpilot profile; we do not pass any data about you to Trustpilot.
The purpose of processing your personal data is to maintain the user account, record orders for Services and payments, deliver the report you ordered, structured by several AI perspectives according to the level you ordered and paid for, and communicate with the User. For visitors who request a guide, the purpose is to send the requested guide and keep a record of the request. Only for those who separately sign up, the purpose also includes sending occasional useful materials. You can unsubscribe at any time, by clicking the unsubscribe link in a message or by writing to support@expertconsilium.com.
The legal basis for processing personal data is the contract you concluded with us by accepting the Expert Consilium Terms of Use. For sending the requested guide, the legal basis is your consent, given by ticking the box before sending. For occasional materials, the legal basis is your separate consent, given by clicking "Yes, sign me up" in the message and confirming, which you can withdraw at any time. We keep the record of unsubscriptions on the basis of our legitimate interest, so that we do not send you messages again.
The data contained in your account is kept while the account is active, that is, until it is deleted, except for data we are obliged to keep by law. Orders, pro forma invoices, invoices and proof of acceptance of the Terms are kept for the periods prescribed by applicable regulations. The e-mail address from a guide request is kept until you unsubscribe or until your request for deletion. The unsubscribe record is kept so that we respect your choice. You can send a request to delete your account to support@expertconsilium.com. The account will be deleted after 30 days from receipt of the request. Deleting the account does not remove the obligation to keep data that we are obliged to retain by law.
You can send requests and objections regarding the processing of personal data to support@expertconsilium.com. To protect your personal data we may ask you to confirm your identity. You will receive a response within 30 days. Complaints about the processing of your personal data can also be sent to support@expertconsilium.com.
In accordance with the Law on Personal Data Protection, you have the right to request access to your data, its rectification and erasure, as well as restriction of processing, when the legal conditions for that are met. In cases provided by law you also have the right to data portability and the right to object to processing. You have the right to withdraw your consent to the processing of personal data at any time, without affecting the lawfulness of processing carried out before the withdrawal. You can unsubscribe from occasional materials by clicking the unsubscribe link in a message or by writing to support@expertconsilium.com.
Data is transmitted between your browser and our servers over an encrypted HTTPS/TLS connection. If you use a password, we store it only as a hash; if you sign in with a passkey or with a Google, Microsoft or GitHub account, we do not store a password. Access to data is limited to authorized persons.
SR
EN