Const.
Start your brief

Privacy notice

What Const. collects when you use this site, why, where it is kept, how long, and how to have it deleted.

In effect from 21 September 2026. Version privacy-2026-09.

1. Who is responsible

This site is operated by Ilinskii Ilia PR Novi Sad, a sole trader registered in Serbia, trading as Const. ("we"). We decide what is collected here and why, which makes us the controller of that data.

Data protection contact: ilia@oshn-ai.com. Write to that address for anything on this page, including deletion.

Registration number, tax number and registered address: to be published here.

2. What we collect

When you send the brief

  • Your name, if you fill it in.
  • The contact you give us: a Telegram or WhatsApp handle, or an email address.
  • Your answers: the task in your own words, the examples you pick, the channel, the apps and systems you tick, how much freedom the agent should have, and where it should run.
  • The request ticket as the page showed it to you, including the plan and the monthly estimate it calculated.
  • The language and currency the page was in.
  • Your consent, the version of this notice you agreed to, and the time it was given.

Sent together with the form

  • The address of the page you sent it from, and the referring page if there was one.
  • Your browser's user agent string.
  • The country your request came from, as our hosting provider reports it.
  • A one way, salted hash of your IP address, used to stop the same machine from flooding the form. We do not store your IP address itself.

In your browser

Two values in local storage: const-lang (your language) and const-cur (your currency). They stay on your device, we never receive them, and they exist only so the site opens the way you left it. There are no cookies, no analytics, no tracking pixels and no advertising on this site. Fonts are served from this domain, so simply reading a page here does not contact anyone else.

Server logs

Our hosting provider keeps standard request logs for a short period. Our own code writes one line per submission: whether it worked and the request number. It never writes the contents of your request into the logs.

3. Why we use it

  • To answer you and prepare an offer. This is the whole point of the form. Legal basis: steps taken at your request before a contract, Article 6(1)(b) GDPR, together with the consent you give on the form, Article 6(1)(a).
  • To keep the form usable. The hashed IP and the timing check exist to block automated spam. Legal basis: our legitimate interest in a working site, Article 6(1)(f).

We do not send marketing emails, we do not build profiles, and we do not sell or share your data with anyone for their own purposes.

4. Who else touches it

  • Vercel Inc. hosts this site, serves it through its network and runs the function that receives the form.
  • Neon Inc. provides the managed Postgres database, in a European region, where the request is stored.

Both act only on our instructions, under their data processing terms. If you write to us by email instead, your message sits with our email provider. Payments are handled by Paddle as merchant of record and only once you become a client: no payment details are collected on this site.

5. Where it lives

The database is hosted in the European Union. Our providers are companies established in the United States and may access data from outside the EU under the safeguards in their data processing terms, including the European Commission's standard contractual clauses. We are established in Serbia, which has its own personal data protection law closely modelled on the GDPR.

6. How long we keep it

  • Requests that do not turn into work: 24 months from our last contact about them, then deleted. That window exists because people come back to a brief months later.
  • If you become a client, your agreement with us governs what is kept and for how long.
  • At any point, you can ask us to delete your request and we will.

7. Your rights

You can ask us to give you a copy of your data, correct it, delete it, restrict what we do with it, hand it over in a portable form, or object to our use of it. You can withdraw the consent you gave on the form at any time, which does not affect what we did before you withdrew it.

Write to ilia@oshn-ai.com. We reply within 30 days. There is no fee.

If you are not satisfied, you can complain to the Commissioner for Information of Public Importance and Personal Data Protection in Serbia, or, if you are in the EU or EEA, to the supervisory authority where you live.

8. Automated decisions

The plan and the monthly estimate on the brief page are calculated in your own browser to show you a range. They decide nothing: a person reads every request, and the real price is fixed only in the blueprint after a call. We do no profiling and no automated decision making with legal effect.

9. Security

The site is served over HTTPS. The database is not reachable from the browser: only our server function can write to it, with credentials kept in the hosting provider's environment and never in our code repository. Access is limited to the people who operate the service, under NDA. We do not claim any system is beyond compromise, and if a breach ever affects your data we will tell you and the relevant authority as the law requires.

10. Children

This service is meant for adults. We do not knowingly collect data from anyone under 18.

11. Changes

If this notice changes, we update the date and the version at the top. The version you agreed to is stored with your request, so it is always clear which text applied.

Back to Const.