Privacy policy

Last updated: 21 October 2026

1. Who we are

Actomyx is the trade name of ACTOMYX EOOD (АКТОМИКС ЕООД), UIC 208902875, registered office: Sofia, Izgrev district, 11 Gen. Shteryu Atanasov St. It provides Actomyx Supervision (“the system”), software that construction supervision firms in Bulgaria use to sort the documents of their sites and to prepare acts, protocols and reports. Contact: philip.minev@actomyx.com, +359 877 553 753.

2. Our role

Each firm that uses the system decides which documents and data go into it. For that content the firm is the controller, and Actomyx processes it on the firm’s behalf, only to provide the system to that firm. For the user accounts themselves (name, email address, role, firm) Actomyx is the controller.

3. What we process

• Accounts: name, email address, role and firm of each user. Accounts are created by Actomyx at the firm’s request; there is no self-registration. Passwords are set by the users themselves and are stored only in hashed form by our authentication provider.
• The firm’s work: the firm’s details, its sites, the participants in them, and the acts, protocols and reports prepared in the system.
• Documents: files the firm places in the Google Drive folders it designates for the system, or sends to its mailbox for the system, and the text read from them.
• Technical records: logs of errors and of the automated tasks, kept to run and fix the system.

Each firm sees only its own data. Personal identification numbers (ЕГН) are stored encrypted.

4. Google user data

A firm’s manager can connect the firm’s Google account to the system. The system then receives:

• access to the account’s Google Drive (the drive permission), and
• the account’s email address, to show the firm which account is connected.

The Drive access is used only to provide the system’s features to that firm:

• to find new files in the folders the firm designates and download them so they can be read and classified;
• to create a folder for each of the firm’s sites and move received files into it;
• to save the documents the system prepares into the firm’s folders.

We do not sell Google user data, do not use it for advertising, and do not use it to train artificial-intelligence models. People at Actomyx do not read it, except with the firm’s agreement to resolve a support request, for security reasons, or where the law requires it. The access key is stored encrypted and is used only by our servers, only for the firm that connected it. The firm can disconnect at any time in the system (Администрация → Google Drive) or at myaccount.google.com/permissions.

Actomyx’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5. Automated reading and drafting

To read scanned documents and to prepare drafts, the text of a firm’s documents is processed by automated services, including an artificial-intelligence service (Anthropic) whose terms do not allow it to use this content to train its models. A draft is only a proposal: the firm’s engineer reviews and signs every document.

6. Where data is kept and who helps us

• Supabase — database, stored files and logins; data stored in the European Union (Ireland).
• Vercel — hosting of the web application.
• Google Cloud — text recognition of scanned documents, in the European Union (Belgium).
• n8n — the automation that runs the background tasks.
• Anthropic — the artificial-intelligence service for reading and drafting.
• Google Drive and Gmail of the firm itself — where the firm keeps its files and mail.

Some of these providers may process data outside the European Union; where they do, they rely on the safeguards the GDPR provides for such transfers.

7. How long we keep data

We keep a firm’s data while the firm uses the system. When a firm stops using it, we delete its data at its request, except what the law requires us to keep. Documents in the firm’s own Google Drive remain the firm’s and are not deleted by us.

8. Your rights

Under the GDPR you may ask for access to, correction or deletion of your personal data, restriction of or objection to its processing, and data portability. For data a firm has put into the system, the firm is the first point of contact; we help it respond. Write to philip.minev@actomyx.com. You may also complain to the Commission for Personal Data Protection (www.cpdp.bg).

9. Changes

If this policy changes, we will publish the new version here with a new date and tell the firms that use the system.