Vincora

Privacy Notice

Last updated: May 2026

The short version

The only personal data we collect is what you voluntarily submit through our contact form (name, company, email). We use Google Analytics for anonymous visit statistics. We do not sell data, run ad trackers, or profile visitors. That's it.

1. Who we are

Vincora is a B2B SaaS CPQ platform developed and operated by Carsen d.o.o., a software company registered in Belgrade, Serbia. Serbia has its own data protection law (the Law on Personal Data Protection, adopted in 2018) which is closely modelled on the EU General Data Protection Regulation (GDPR) and provides a comparable standard of protection for personal data.

For any questions about this notice or your data, reach us at privacy@vincora.ai.

2. What we collect and why

Contact form data. When you request a demo or send an inquiry, we collect the information you provide: your name, company name, and business email address. If you adjusted the ROI calculator before submitting, your calculator inputs and the resulting estimates are included with your request so we can prepare a relevant response. We use this solely to respond to your request and, if you consent, to follow up about Vincora. We do not add you to marketing lists without your explicit agreement.

Anonymous usage statistics. We use Google Analytics 4 to understand how visitors use our website: which pages are viewed, how long visits last, and which country traffic originates from. When you choose "Essential Only" in our cookie banner, Analytics runs in cookieless mode, which means no cookies are placed on your device and Google receives only anonymous, aggregated data (page view counts, approximate geography from IP, device category). No individual user can be identified from this data. If you choose "Accept All", Analytics may set cookies that allow session-level analysis (e.g. pages visited in a single session), but this data remains anonymous and is never linked to your identity.

Essential cookies. We use a single essential cookie (vincora-cookies) to remember your cookie preference. It contains only the value "essential" or "all" and expires after 365 days.

Local storage. For your convenience on repeat visits, your browser locally stores your ROI calculator settings (kept for 90 days) and a note that you already submitted a demo request (kept for 30 days). This data contains no personal information and never leaves your device.

3. Data sharing

We do not sell, trade, or transfer your personal data to any third party for their own purposes. Demo requests are delivered to our sales inbox by FormSubmit (formsubmit.co), a form-relay service that processes your submission solely to forward it to us. Your contact form submissions are seen only by the Vincora sales team. Anonymous website usage statistics are processed by Google Analytics under their standard data processing terms, but this data does not identify you personally.

4. About us and your data

Carsen d.o.o. is a software company based in Belgrade, Serbia. Serbia has its own data protection law (ZZPL, adopted in 2018) which is modelled on the EU General Data Protection Regulation and provides comparable protections for personal data, including lawful processing, purpose limitation, data minimisation, and individuals' rights to access, correct, and delete their information.

Your contact form submission stays with us and is not transferred to any other party or jurisdiction. The only external service involved is Google Analytics, which processes anonymous, non-identifying usage statistics under Google's own infrastructure and policies.

5. How long we keep it

Contact form data is retained for up to 24 months from submission, or longer if we enter into a business relationship. Analytics data is aggregated and does not identify individuals; Google's default retention is 14 months for event-level data. The cookie preference cookie expires after 365 days.

6. Your rights

You can ask us to access, correct, or delete any personal data we hold about you (in practice, this means your contact form submission). You can also withdraw consent for follow-up communications at any time. Email privacy@vincora.ai and we will respond within 30 days.

If you are located in the EU/EEA, you have the right to lodge a complaint with your local data protection authority.

7. Changes

If we update this notice, we will revise the "Last updated" date above. For material changes, we will add a note on the main website.