Privacy Policy
Last updated: 14 August 2026. This notice is provided in English for international visitors. For questions, contact office@zenboxinfinity.com.
Note: This policy is a practical summary for website visitors and customers. It does not replace legal advice. Where applicable law grants you additional rights, those rights remain available to you.
1. Who we are
The data controller responsible for this website is Bojan Tešić, a natural person, Prvomajska 59, Šabac, Serbia. Contact: office@zenboxinfinity.com, phone +381 69 380 4755.
The website zenboxinfinity.com and the name ZenBoxInfinity are the site name and brand used by the controller. They are not a registered legal entity. If a sole trader or company is registered later, this Privacy Policy will be updated separately.
2. What this policy covers
This policy describes how we handle personal data when you browse our website, download materials, use our web tools and converters hosted on our domain, request demos or product information, or communicate with us by email or contact forms.
3. Data we may collect
- Contact and enquiry data: name, email, company name, phone number, and message content when you submit a contact form or email us.
- Server-log technical data: our web hosting and related server infrastructure may record request metadata that can include IP address, user-agent / browser type, device-related signals, requested URL, referrer, and timestamps, for security, abuse prevention, and operation of the site.
- Analytics technical data (GA4, only after the relevant consent where required): Google Analytics 4 may use the IP address during collection to derive approximate location. According to Google’s documentation for Analytics, the IP address is discarded before the data is stored in Analytics; this policy does not claim that GA4 retains your IP address as a stored Analytics field. Other analytics signals may include device/browser characteristics, pages viewed, and similar measurement events under the property configuration.
- Consent records: your cookie and advertising preference choices and related timestamps recorded through the website’s consent banner / CMP when that mechanism is in use.
- Downloads and product interest: we do not require registration for public downloads; we may log basic technical events for security and abuse prevention.
- Document conversion uploads: when you use our file converters, the file you choose to upload and related technical processing data. Users should not upload passwords, payment-card data, health records, payroll records or other highly sensitive information.
4. Purposes and legal bases
| Purpose | Data | Legal basis |
|---|---|---|
| Pre-contract enquiries (steps you request before entering a contract) | Contact and enquiry data | Steps requested by you prior to entering into a contract |
| Ordinary enquiries and correspondence | Contact and enquiry data | Legitimate interest in responding to communications sent to us |
| Website security and abuse prevention | Server-log technical data; basic security events | Legitimate interest in operating and securing the website |
| Legal, tax, and accounting records where a transaction arises | Business, tax and accounting records arising from a purchase, invoice, contract or other legally relevant transaction | Legal obligation where applicable law requires retention; establishment, exercise or defence of legal claims where applicable |
| Optional analytics (GA4) | Analytics technical data | Consent |
| Optional advertising (AdSense), where required | Ad request / advertising technical signals under the Live ad and consent configuration | Consent where required |
| Requested file conversion | Uploaded file and related conversion technical data | Legitimate interest in providing the conversion explicitly requested by the user, maintaining service security, preventing abuse and troubleshooting failed processing |
If file conversion later becomes a paid or contractual service, that part of the processing may instead rely on contract or steps prior to entering into a contract.
5. Analytics (GA4) and advertising (AdSense)
- Google Analytics 4: When Google Analytics 4 is enabled and the relevant analytics consent is granted, measurement uses property
G-PT21NX36JL. Analytics data retention is controlled through the property’s Google Analytics Admin configuration. - Google AdSense: When Google AdSense is enabled and the relevant advertising consent is granted where required, publisher
ca-pub-2798082081789870may be used. The operator’s policy is to request non-personalized advertising. - Non-personalized ads: non-personalized ads are not based on a user’s prior browsing behaviour across sites and apps used to build an interest profile. They may still use contextual signals (for example page content), approximate location, and technical data needed to deliver ads, measure performance, and prevent fraud or abuse.
- Withdrawing or changing cookie consent through the banner stops or limits future optional tags according to the consent configuration then in use; it does not automatically erase historical analytics or ad logs held by Google under their products.
6. File converters
Our converters process files you upload so we can return a converted download. Processing uses the conversion service at convert.zenboxinfinity.com (a Python application separate from the WordPress site tree). The API may return a temporary download_url and an expires_in_seconds value for the browser download link.
Uploaded and generated files are processed to perform the conversion requested by the user and provide the resulting download. Temporary download links expire automatically. Link expiry and physical file deletion are separate events; temporary files are managed through the conversion service’s host-side storage and cleanup configuration.
Users should not upload passwords, payment-card data, health records, payroll records or other highly sensitive information.
7. How long we keep data
| Category | Retention |
|---|---|
| Enquiry correspondence | 12 months after the last substantive correspondence or closure of the enquiry, then deleted or anonymised, unless the communication becomes part of a contract or purchase, a longer legal retention obligation applies, or the data are needed for a specific legal claim or dispute |
| Server logs | Server and security logs are retained and rotated according to the hosting provider’s operational and security practices and are not kept by the operator longer than necessary for security, abuse prevention, troubleshooting, or applicable legal obligations |
| Consent preference cookie (browser) | The consent preference cookie is retained for the period configured in the active consent-management system and described in the current Cookie Policy |
| Server-side consent records | Server-side consent records are retained only as long as necessary to demonstrate and manage the recorded consent and are then deleted under the configured consent-record cleanup policy |
| GA4 | Controlled through the Google Analytics Admin configuration for property G-PT21NX36JL (see Section 5) |
| Converter files | As described in Section 6 |
| Legal / accounting records | Ordinary website enquiries are not treated as accounting records. If an enquiry results in a purchase, invoice, contract or another legally relevant transaction, the resulting business, tax and accounting records are retained for the period required by applicable Serbian law and for the establishment, exercise or defence of legal claims |
8. Sharing and processors
We do not sell your personal data. We use the following categories of service providers:
- Website hosting / infrastructure for zenboxinfinity.com: Namecheap, Inc., dba Namecheap, 4600 East Washington Street, Suite 300, Phoenix, AZ 85034, USA.
- Email / mailbox for office@zenboxinfinity.com: Namecheap, Inc. — Namecheap Private Email, powered by Open-Xchange.
- Consent management: Consent choices are handled through the consent banner and consent-management mechanism deployed on the Live website.
- Analytics: Google Ireland Limited / Google LLC — Google Analytics 4 (property
G-PT21NX36JL) when enabled with consent. - Advertising: Google Ireland Limited / Google LLC — Google AdSense (publisher
ca-pub-2798082081789870) when enabled with consent. - File conversion: conversion service at
convert.zenboxinfinity.com(Python application separate from the WordPress tree).
International transfers: Namecheap processes hosting and email-related data in the United States under Namecheap’s terms and the transfer mechanisms Namecheap documents for its services (including Standard Contractual Clauses where they apply). Google may process analytics and advertising data in countries outside Serbia and outside the European Economic Area, including the United States, using the transfer tools Google documents for the relevant product—typically the European Commission’s Standard Contractual Clauses and, where Google is certified and the tool applies, the EU-U.S. Data Privacy Framework—together with any supplementary measures Google describes in its product terms and data-processing documentation.
9. Your rights
Depending on your location, you may have rights to access, rectify, erase, restrict, or object to certain processing, and to withdraw consent for consent-based processing. Contact us first at office@zenboxinfinity.com. We will respond without undue delay and normally within one month, subject to any lawful extension or verification requirements.
You may lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection of the Republic of Serbia (https://www.poverenik.rs/). Visitors in other countries may also contact their competent supervisory authority where applicable.
10. How to withdraw or change consent
Use the consent banner controls on the website (including reopen/manage preferences where that control is provided) to withdraw or change optional analytics or advertising consent. You can also contact us at office@zenboxinfinity.com. Clearing site cookies in your browser may reset preference cookies; you may then see the banner again.
11. Security
We apply reasonable technical and organisational measures appropriate to the nature of the data. No online transmission is completely risk-free.
12. Children
Our services are aimed at businesses and adults. We do not knowingly collect data from children.
13. Changes
We may update this policy when our practices or the law change. The “Last updated” date at the top will be revised accordingly.