Privacy Policy

1. Who We Are

The Detailing Boardroom is operated by [LEGAL COMPANY NAME — to be filled in], a sole proprietorship (preduzetnik) registered in the Republic of Serbia ("KGEN", "we", "us", "our"), with registered office at [REGISTERED ADDRESS — to be filled in]. KGEN is the data controller for personal data processed in connection with the membership programme.

Contact for privacy matters: kgenagency@gmail.com.

Payments are processed by Whop Inc. acting as the Merchant of Record. Whop is an independent data controller for the payment, billing and tax data it collects directly from you; please review Whop's Privacy Policy at whop.com/legal for details of that processing.

2. Data We Collect

• Application data: name, email, phone, business name, location, website, monthly revenue range and any free-text answers you submit.
• Account data: login email, hashed password, membership status and a record of your subscription provided to us by Whop.
• Payment data: processed by Whop as Merchant of Record. We do not store full card numbers; we receive only limited billing metadata (e.g. country, last 4 digits, plan, status) needed to deliver the membership.
• Communications: emails, calls, support tickets, community messages and any content you post in our member spaces.
• Technical data: IP address, browser, device type, pages visited, referral source and basic analytics events.
• Cookies: essential cookies for authentication and session, and analytics/advertising cookies (Meta Pixel, etc.) where consented.

3. How We Use Your Data

• Process applications and deliver the membership programme.
• Manage access, renewals and refund requests in coordination with Whop.
• Provide 1-on-1 calls, support and community access.
• Send service announcements, programme updates and (with consent) marketing emails.
• Improve our website, content and ads through aggregated analytics.
• Detect fraud, enforce our Terms and meet legal obligations.

4. Lawful Basis

Where the GDPR or UK GDPR applies, we process personal data on the basis of (a) contract — to deliver the membership you purchased; (b) legitimate interests — to operate, secure and improve our business; (c) consent — for marketing emails and non-essential cookies; and (d) legal obligation — for tax, accounting and fraud-prevention duties under Serbian law.

5. Sharing Your Data

We share data only with trusted processors that help us run the business. Typical categories include:

• Hosting & database providers (e.g. Supabase, Cloudflare).
• Whop Inc. — Merchant of Record for billing, invoicing and tax compliance.
• Email & CRM providers (e.g. GoHighLevel, Zapier, transactional email vendors).
• Communication tools (e.g. Twilio, Calendly, Zoom/Google Meet).
• Analytics & advertising platforms (e.g. Meta, Google) where you consent to non-essential cookies.

We never sell your personal data. We disclose data to authorities only when required by law.

6. International Transfers

KGEN is established in the Republic of Serbia and several of our processors are based in the EEA, the UK or the United States. Where data is transferred across borders we rely on appropriate safeguards such as Standard Contractual Clauses, the UK International Data Transfer Addendum, or equivalent mechanisms recognised under Serbian and EU data-protection law.

7. Data Retention

We retain account records for as long as you are a member and for the period required by Serbian accounting and tax legislation after cancellation. Billing records held by Whop are retained under Whop's own retention rules. Application data from declined applicants is deleted within 12 months. Marketing contact data is kept until you unsubscribe.

8. Your Rights

Subject to applicable law, you have the right to access, correct, delete, restrict or port your personal data, and to object to processing or withdraw consent at any time. To exercise any right, email kgenagency@gmail.com. You may also lodge a complaint with the Serbian Commissioner for Information of Public Importance and Personal Data Protection (poverenik.rs), or — where the GDPR/UK GDPR applies to you — with your local supervisory authority.

9. Security

We use industry-standard measures including TLS encryption, hashed passwords, role-based access controls and Row-Level Security on our database. No system is perfectly secure — please use a strong, unique password for your account.

10. Children

Our services are intended for business owners aged 18 and over. We do not knowingly collect data from anyone under 18.

11. Changes

We may update this Policy from time to time. Material changes will be announced by email or in the member area. The "last updated" date above always reflects the current version.

12. Contact

Privacy questions or data requests: kgenagency@gmail.com.