Who is responsible
Petr Drábek, Czech Republic, operates the ApiNote website and is the controller of the personal data described here. For questions or privacy requests, email pedrosmobileapps@gmail.com.
This notice covers this marketing website and its forms. It does not describe data stored in the ApiNote mobile app. App stores, the separate Wix website and other external services have their own privacy information.
When you contact us
We use your name, email address, subject and message to answer your enquiry. The message also includes the submission time, website language, page path and any campaign labels carried in the page URL. Please do not send passwords, payment details or sensitive personal information.
Brevo delivers the message to our support inbox in Gmail. Replying to the message addresses our response to you. A contact request does not subscribe you to a newsletter. Our legal basis is our legitimate interest in providing support and responding to enquiries (Article 6(1)(f) GDPR).
Security and website operation
Cloudflare Turnstile checks form submissions for automated abuse. It processes technical signals such as IP address, browser and device information. The form sends a verification token to our server; Cloudflare checks it before the message or subscription request reaches Brevo. Our basis is our legitimate interest in protecting the website from spam and abuse.
The website is hosted through OpenAI Sites on Cloudflare infrastructure. Hosting and security providers receive technical request data needed to serve and protect the site. Private previews also require owner sign-in. Cloudflare separately processes certain Turnstile signals to improve bot detection, as explained in its Turnstile Privacy Addendum.
Campaign information and cookies
When present, the forms include the page path, language and these campaign labels: utm_source, utm_medium, utm_campaign, utm_content and utm_term. We use them to understand which pages and campaigns lead to enquiries or subscriptions. The form integration does not send arbitrary URL parameters, the full referring URL or your IP address to Brevo.
The website carries these labels in links, without storing them in cookies or browser storage. We have not installed advertising pixels or an audience analytics service. Hosting, sign-in and security services may use technical storage necessary for their functions. External links open services governed by their own policies.
How long information is kept
Support correspondence is kept while it is needed to answer and follow up on your enquiry. Relevant records may be kept longer where necessary to resolve a dispute or meet a legal obligation; they are not kept for unrelated marketing.
Newsletter information is used for the duration of your subscription. After withdrawal, limited consent and suppression records may be retained to demonstrate your choice and prevent further unwanted messages. Unsubscribing is not the same as deleting every provider record. You can ask us to erase data that is no longer needed.
Technical logs, pending confirmations and delivery records are subject to the relevant providers’ retention controls and operational requirements. Contact us for details or a deletion request; we do not promise an automatic deletion period that has not been configured.
Who processes the information
The services involved are Brevo for email and newsletter management, Google Gmail for support correspondence, and OpenAI Sites and Cloudflare for hosting and security. We do not sell your personal data. We share it only for these purposes or where required by law.
These providers may process data outside the European Economic Area. Where applicable, transfers require safeguards under data protection law, such as an adequacy decision or standard contractual clauses. Provider privacy information is linked below; you can contact us about the safeguards applicable to your data.
Your choices and rights
Subject to applicable law, you can request access, correction, erasure, restriction or portability of your personal data. You can object to processing based on legitimate interests and withdraw newsletter consent at any time. Email pedrosmobileapps@gmail.com; we may need enough information to verify the request.
You can complain to your local data protection authority, including the Czech Office for Personal Data Protection (ÚOOÚ). We do not use these forms for automated decisions that produce legal or similarly significant effects. We will update this notice when the website’s data practices change.