1. Controller and contact
The controller is Dmitrii Andreev PR Novi Sad, trading as Stratobytes Studio, at Mite Ružića 2, Novi Sad, Serbia. Registration number: 68670667; tax number (PIB): 115829450. Phone: +381 XX XXX XXXX. Contact hello@stratobytes.com for privacy questions and requests.
Serbia’s Law on Personal Data Protection applies, together with other data protection laws where the circumstances bring them into scope, including GDPR where applicable.
2. Information we process
Information comes from you or from a business client naming you as a contact. Do not send unnecessary sensitive data, passwords or information about others without an appropriate lawful basis.
- Enquiries: name, email address, selected plan, message and language submitted through our forms.
- Client work: business/contact details, correspondence, instructions, brand materials, feedback and information needed to create content.
- Payments: invoice details, payment receipts and transaction information needed for records. The website does not collect card numbers or banking passwords; banks and payment services process payments.
- Technical information: IP addresses and request, browser and device information that infrastructure may process for delivering pages/files, security and diagnostics.
- Browser preferences: your chosen language and a session marker recording that initial language detection has taken place.
3. Purposes and lawful bases
Required form fields let us respond to you. Without necessary information we may not be able to reply, issue an invoice or provide the service. Invoices and receipts are sent by email. Promotional emails concern only our own services, not third-party offers. Where consent is required, they are sent only with appropriate prior consent; submitting an enquiry is not that consent. Unsubscribe by replying to the message or emailing hello@stratobytes.com; unsubscribing does not stop necessary communications about an agreed service.
- Responding to enquiries, preparing offers, delivering content and service communications: steps before a contract or performance of a contract with you; for business representatives, our legitimate interest in managing the business relationship.
- Invoices, payment confirmations and accounting/tax records: legal obligations and contractual performance.
- Security, abuse prevention and establishing or defending legal claims: legitimate interests balanced against your rights.
- Optional processing that requires consent: separate consent that may be withdrawn without affecting processing already lawfully carried out.
4. Recipients and service providers
We do not sell client data or share email addresses with third parties for their own marketing. This is different from necessary processing by providers supporting communication, infrastructure, payments and legal obligations.
In addition to the providers below, our email-hosting provider, bank/payment system and authorised accountant or legal adviser may process information needed for their roles. Authorities receive data where legally required. Collaborators’ access is limited to information needed for their work.
- Cloudflare: website hosting, security, and CDN file delivery.
- Resend: delivery of website enquiry emails.
- Google Fonts: remote delivery of website fonts.
5. AI tools and material intended for publication
AI tools are not restricted to a fixed provider list. Client information is sent to such tools only if intended for public inclusion in text or visuals. Private contact details, billing data, payment receipts and confidential materials are not submitted as AI inputs.
Information intended for publication can still be personal data. Using and disclosing it requires an appropriate lawful basis and respect for others’ rights; intended publication is not unlimited permission. Ask us about the planned AI provider and processing before supplying personal or confidential material.
We do not make decisions with legal or similarly significant effects on you solely through automated processing or profiling.
6. Content delivery and portfolios
Files are delivered through Cloudflare CDN. Access requires processing technical request information. Treat delivery links carefully: sharing a link may give other people access. Download your own copies.
Examples of delivered work already made public may be displayed only in our company-website portfolios (https://stratobytes.com, https://smm.stratobytes.com), subject to the agreed terms and individuals’ rights. This does not authorise disclosure of private contacts, invoices or confidential information.
7. Processing outside Serbia
Cloudflare, Resend, Google and any AI or other infrastructure providers operate internationally. Processing can therefore involve countries outside Serbia, including the United States and countries where subprocessors operate. We do not claim that all data stays in Serbia or the EU.
Transfers requiring a specific legal basis or safeguards are subject to the applicable statutory conditions, such as a recognised level of protection or appropriate contractual safeguards. Contact us for information about a specific recipient, destination and relevant safeguards, including how to obtain a copy. Provider links above supplement this information; their policies do not replace our responsibilities.
8. Retention
The normal retention period for enquiries and correspondence is up to 3 years after the last relevant contact; for client materials and delivered files, up to 3 years after the relationship ends. We delete or anonymise earlier where information is no longer needed and no other retention basis applies.
Invoices, receipts, complaint records and other required documentation are kept longer where accounting, tax or other law requires it. A dispute or legal claim may require retention until it ends and relevant limitation periods expire. The normal retention period does not shorten mandatory legal periods.
Technical records and copies held by providers also depend on service settings and their applicable periods; this is not a promise that every provider keeps every technical record for exactly three years. Ask us about the period applicable to a specific record.
9. Browser storage, fonts and external links
The website stores ‘smm-language’ in localStorage to remember your chosen language, and ‘smm-detected’ in sessionStorage until the session ends to avoid repeated automatic detection. Clear the site’s browser data to remove them. These are not advertising identifiers.
This website version contains no embedded advertising or analytics trackers. Hosting/security services may process technical information needed to operate the site. Manrope loads through Google Fonts, which sends Google a network request containing technical information such as an IP address. Demo images and videos are served from our own domain.
If you open WhatsApp, Telegram or another external link, that service’s rules also apply. Simply displaying a link does not send those services the contents of our forms.
10. Your rights
Send requests to hello@stratobytes.com. Subject to the legal conditions, you may request access, correction, deletion, restriction and portability, object to processing or withdraw consent. We respond without undue delay, normally within 30 days, subject to legally permitted extensions and notification.
We may reasonably verify identity without collecting more information than necessary. Deletion is not absolute where retention is legally required or needed for legal claims. You may complain to Serbia’s Commissioner for Information of Public Importance and Personal Data Protection or another competent authority where applicable.
11. Security and policy changes
We use proportionate safeguards, including encrypted transmission, limited access and form-abuse protection. No system guarantees absolute security. We respond to breaches and notify authorities and affected individuals where legally required.
If purposes, recipients or processing change, we update this policy and its date, and provide further notice or seek consent where legally required.