What we do with your data, in plain words.

Who we are

ipsilon is a sole trader business (obrt) owned by Filip Halapir, registered in Croatia at Krimeja 5, 51000 Rijeka, Croatia. It is the controller of the personal data collected through ipsilon.agency. The full company details are below.

For anything about your data, write to hello@ipsilon.agency. You'll hear back within 24 hours.

What we collect

When you use a contact form, we receive your email address and message, plus anything else you choose to fill in: your name, company, phone number and your answers about the project or team you need.

The talent pool form collects different details, listed in its own section below.

Our hosting provider, Cloudflare, processes standard request data such as IP address, browser type and the time of the request. It exists to deliver the site and protect it from attacks, and we don't use it to identify you.

We don't run analytics, tracking pixels or advertising scripts on this site.

Why we use it

We use what you send through a contact form to reply, to understand your project and to prepare a proposal if you ask for one.

The legal basis is taking steps at your request before entering into a contract, and our legitimate interest in answering the people who contact us (Article 6(1)(b) and (f) GDPR).

If you join the talent pool

The talent pool form asks for your name, email, city and country, role, years of experience, the kind of work and monthly pay you're after, when you could start and a link to your work. Your LinkedIn profile, the tools you work with and a note are optional.

We use these details to get in touch when work comes in that fits you, and for nothing else.

The legal basis is your consent, which you give by ticking the box on the form (Article 6(1)(a) GDPR). You can withdraw it at any time by writing to hello@ipsilon.agency, and we delete your details.

We don't pass your details to anyone outside ipsilon without asking you first.

If we email you first

Sometimes we write to people at companies that look like they could use our help, for example because they're hiring engineers or building something new. For that we use your name, job title and work email address, plus public information about your company: its website, its job posts and news about it.

We find this on your company's website and job boards, in public news and through TheirStack, a job listings database. We find and check work email addresses with Icypeas and Bouncer. Every first email says where your name and address came from.

The legal basis is our legitimate interest in offering our services to businesses they're relevant to (Article 6(1)(f) GDPR). We only write about your work, send at most three emails, and never use anything about your personal life.

You can object at any time and we stop for good. Reply "no" to any of our emails or write to hello@ipsilon.agency. We then delete your details and keep only a scrambled record of your address, so we never contact you again.

If you don't reply, we delete your details 12 months after our last email. If we never end up writing to you, we delete them after 90 days.

Who we share it with

Contact form messages are delivered to our inbox by Resend, an email delivery service that processes them on our behalf.

Talent pool details are stored in a Google Sheets spreadsheet. Google processes them on our behalf and may handle them outside the EU under the European Commission's standard contractual clauses.

The site is hosted and delivered by Cloudflare, which processes request data on our behalf. Cloudflare may handle that data outside the EU under the European Commission's standard contractual clauses.

For the emails we send first, Anthropic helps us research companies and draft messages, Google Workspace sends them, TheirStack, Exa, Icypeas and Bouncer provide company data and check email addresses, and Hetzner hosts the tools we run this on. Providers outside the EU handle data under the European Commission's standard contractual clauses or the EU-US Data Privacy Framework.

We never sell your data, and we never share it for marketing.

Cookies and storage

This site doesn't set cookies of its own. Cloudflare may set a strictly necessary security cookie to tell real visitors apart from bots.

How long we keep it

We keep enquiries for 12 months after the last message, then delete them. If we start working together, project correspondence is kept for as long as the law requires.

Talent pool details stay on file for two years after you send them, unless you ask us to remove them sooner. After that we delete them, or ask you first if you'd like to stay on the list.

Details we use to email you first are kept for the periods in the section above.

Your rights

You can ask to see the data we hold about you, correct it, delete it, restrict or object to how we use it, or receive a copy in a portable format.

Write to hello@ipsilon.agency and we'll handle it within 30 days, usually much sooner.

If you think we got something wrong, you can complain to the Croatian Personal Data Protection Agency (AZOP) or the data protection authority where you live.

Changes to this policy

If we change how we handle data, we update this page and the date at the top.