Privacy Policy

Version: 1.0 · Date: 9 Jun 2026

1. General information

This Privacy Policy describes how Verge — Digital Studio (hereinafter: "Verge", "we", "us", "our") collects, uses, stores and protects the personal data of users of this website.

This Policy applies to all data that Verge collects through the website madebyverge.com and through other communication with users and clients.

Data controller

NOVA DIGITAL, sole proprietorship, owner Ana Matković (brand: Verge — Digital Studio)
Business owner: Ana Matković
OIB (tax ID): 09241109410
MBO (business reg. no.): 99303647
Registered seat: Ul. Mejaši 51, 21000 Split, Croatia
Email: info@madebyverge.com
Phone: +385 21 770 726

By using the Verge website, you accept the terms of this Privacy Policy.

2. What data we collect

Verge collects the following categories of personal data:

2.1. Data you provide explicitly

Through the contact form, booking a consultation or direct communication (email, phone):

First and last name
Email address
Phone number (optional)
Company or business name (if applicable)
Information about your project and business that you voluntarily provide
The content of the message you send us

2.2. Data collected automatically

When you visit the site, we automatically collect the following technical data:

IP address
Browser type and version
Device operating system
Date and time of visit
Pages you visited
The source you came from (referrer)
Duration of visit

This data is collected via cookies and analytics tools (Google Analytics). For details, see the Cookie Policy.

3. Purpose of data processing

We process your personal data solely for the following purposes:

Purpose	Legal basis (GDPR)
Responding to inquiries and communication	Consent (Art. 6(1)(a))
Preparing a quote and contract for your project	Performance of a contract (Art. 6(1)(b))
Sending newsletters or business notifications	Consent (Art. 6(1)(a)) — only if you opted in
Statistical analysis of site visits	Legitimate interest (Art. 6(1)(f))
Meeting legal obligations (tax regulations, invoices)	Legal obligation (Art. 6(1)(c))
Site security and abuse prevention	Legitimate interest (Art. 6(1)(f))

4. Who has access to your data

We do not sell, share or transfer your personal data to third parties for marketing purposes.

Access to your data is held by:

The business owner (Ana Matković) — as data controller
Technical service providers — strictly to the extent necessary:
- Hosting: Vercel Inc., USA
- Email (form delivery): Resend, Inc., USA
- Email (mailbox): Google Ireland Ltd (Google Workspace)
- Database & chatbot: Supabase, Inc., USA
- Analytics: Google LLC (Google Analytics)
- Calendar (bookings): Cal.com, Inc., USA
Accounting service — for meeting tax and legal obligations
Competent authorities — only on the basis of a legal order

Data transfers outside the EU

Some technical providers (Google, Vercel, Resend, Supabase, Cal.com) are based outside the EU (mostly the USA). Data transfers to the USA are carried out on the basis of the EU-U.S. Data Privacy Framework or Standard Contractual Clauses, which ensure an adequate level of protection.

5. How long we keep data

Type of data	Retention period
Contact form inquiries (no contract)	12 months
Client data (with contract)	10 years (legal requirement for business documents)
Newsletter subscriptions	Until consent is withdrawn
Technical logs (IP, visit)	6 months
Invoicing data	11 years (tax regulations)

After the period expires, the data is permanently deleted or anonymized.

6. Your rights

Under the GDPR and Croatian law, you have the following rights:

6.1. Right of access

You have the right to obtain confirmation as to whether we process your personal data and a copy of that data.

6.2. Right to rectification

You have the right to request the correction of inaccurate data or the completion of incomplete data.

6.3. Right to erasure (“right to be forgotten”)

You have the right to request the deletion of your data when it is no longer needed for the purpose of processing or when you withdraw your consent.

6.4. Right to restriction of processing

You have the right to request restriction of processing under certain conditions.

6.5. Right to data portability

You have the right to receive your data in a structured, machine-readable format.

6.6. Right to object

You have the right to object to processing based on legitimate interest.

6.7. Right to withdraw consent

You can withdraw your consent at any time, without affecting the lawfulness of processing before the withdrawal.

How to exercise your rights

To exercise any of these rights, contact us at:

Email: info@madebyverge.com
Post: Ul. Mejaši 51, 21000 Split, Croatia

We respond within the statutory period of 30 days from receipt of the request.

Right to lodge a complaint with the supervisory authority

If you believe that the processing of your data violates the GDPR, you have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP):

Address: Selska cesta 136, 10 000 Zagreb
Email: azop@azop.hr
Web: www.azop.hr

7. Voice AI assistant

A voice AI assistant of Verge — Digital Studio (the data controller) is available on our website and at the phone number +385 21 770 726. By talking to the assistant, you accept the following data processing:

What is processed: your voice is processed in real time for speech recognition; a written transcript of the conversation is stored (the audio recording is not stored). If you choose to leave your name, phone number or email during the conversation, we store that data as well.
Purpose: answering questions about our services and contacting you back when you request it.
Legal basis: legitimate interest (answering inquiries) and your consent (when you leave contact details so we can reach you).
Processors: speech is processed by Soniox (speech recognition and synthesis, EU region) and OpenAI (text processing); data is stored on our server in the EU. The data is not used to train AI models and is not sold to third parties.
Retention: transcripts and contact details are kept for a maximum of 12 months, or until the purpose is fulfilled or you request deletion.
Your rights: you can request access, correction or deletion of your data at any time at info@madebyverge.com. You also have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP).

8. Data security

Verge applies appropriate technical and organizational measures to protect your personal data, including:

SSL encryption (HTTPS) on all pages
Secure data storage with vetted providers
Restricted access to data (authorized persons only)
Regular security updates of systems
Data backups

Although we take all reasonable protective measures, we cannot guarantee the absolute security of data transmission over the internet.

9. Cookies

Our site uses cookies. For details on the types of cookies, purposes and management options, see the Cookie Policy.

10. Minors

Our services are not intended for persons under 16 years of age. We do not knowingly collect personal data of minors without the consent of a parent or guardian.

11. Changes to this Policy

Verge reserves the right to amend this Privacy Policy. We will notify you of significant changes via the website or by email (if you are a subscriber).

The current version is always available on this page. The date of the last change is stated at the top of the document.

12. Contact

For any questions regarding this Privacy Policy:

Verge — Digital Studio
Email: info@madebyverge.com
Phone: +385 21 770 726
Address: Ul. Mejaši 51, 21000 Split, Croatia

This Privacy Policy takes effect on the day it is published on the website.