Last updated: 05.11.2026
This Privacy Policy explains how Innologica Ltd collects and uses personal data when you use the Inoreader website (www.inoreader.com), web application, mobile apps and browser extensions (together, the “Service”). It is written to meet the requirements of the EU General Data Protection Regulation (GDPR) and Bulgarian data protection law.
1. Who we are
The controller of your personal data is Innologica Ltd, a company registered in Bulgaria, UIC 202279697, registered address 35 Boris Stefanov Str., 1700 Sofia, Bulgaria.
For any privacy question or request, contact us at [email protected].
2. What data we collect, why, and on what legal basis
| Purpose | Data | Legal basis (GDPR Art. 6) |
|---|---|---|
| Creating and running your account | Email, password (stored hashed), name, profile picture, language and time zone, sign-in provider ID if you use Google, Apple or SSO | Performance of a contract – Art. 6(1)(b) |
| Providing the Service | Your subscriptions, folders, tags, rules, filters, saved and annotated articles, notes, imported OPML files, newsletters you forward to your Inoreader address, connected accounts (e.g. YouTube) | Performance of a contract – Art. 6(1)(b) |
| Inoreader Intelligence (AI features) | Article content, prompts and questions you submit, generated summaries and reports | Performance of a contract – Art. 6(1)(b) |
| Team and Enterprise features | Team members’ names and emails, shared folders, comments and activity in the team | Performance of a contract – Art. 6(1)(b) |
| Payments and invoicing | Name, billing address, VAT number, plan and transaction history. Card data is handled by our payment provider; we only receive the card type, last 4 digits and expiry date | Contract – Art. 6(1)(b); legal obligation (accounting and tax law) – Art. 6(1)(c) |
| Customer support | Messages you send us, contact form data, related account details | Contract – Art. 6(1)(b); legitimate interest in answering enquiries – Art. 6(1)(f) |
| Security and fraud prevention | IP address, device and browser data, login history, reCAPTCHA signals | Legitimate interest in protecting the Service and our users – Art. 6(1)(f) |
| Service performance and error monitoring | Technical logs, error reports, performance data | Legitimate interest in a stable and secure Service – Art. 6(1)(f) |
| Website analytics (Google Analytics) | Pages visited, time on site, referrer, device data, collected through cookies | Your consent – Art. 6(1)(a) |
| Audience measurement without cookies (Matomo, on our own server) | Pages visited, referrer, device and browser type, and the IP address shortened before it is stored. No cookies are set and visits are not linked to your account | Legitimate interest in understanding how the Service is used – Art. 6(1)(f) |
| Service emails (security, billing, important changes) | Email address | Contract – Art. 6(1)(b) |
| Marketing emails and newsletters | Email address, name, marketing preferences | Your consent – Art. 6(1)(a), or for existing customers, legitimate interest in promoting similar services, with an opt-out in every email (Art. 6(1)(f) and Bulgarian e-commerce and electronic communications law) |
| Legal claims and compliance | Any of the above, as needed | Legal obligation – Art. 6(1)(c); legitimate interest in defending legal claims – Art. 6(1)(f) |
Where we rely on legitimate interest, we have balanced our interests against your rights. You can ask us for details of this assessment and you may object at any time (see Section 8).
You do not have to give us your data, but without the data needed for your account we cannot provide the Service. We do not collect special categories of data (for example health, religion or political opinions). Please do not include such data in notes or content you upload.
3. Inoreader Intelligence (AI features)
When you use AI features, the article text and your prompt are sent to our AI provider only to generate the result you asked for. Under our contract with the provider, this data is not used to train AI models. AI-generated output may be inaccurate, so please check important information. AI features are optional and are used only when you start them.
4. Sign-in with Google, Apple or SSO and connected services
If you sign in with Google, Apple or your organisation’s SSO, we receive your name, email address and a unique account ID from that provider. If you connect YouTube or other services, we access only the data needed to show your subscriptions in Inoreader.
Inoreader’s use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. By using YouTube features you also agree to the YouTube Terms of Service; see also the Google Privacy Policy. You can revoke access at any time in your Google account permissions.
5. Who we share your data with
We do not sell your personal data. We share it only with service providers (processors) that help us run the Service. They act on our instructions and under data processing agreements.
| Recipient | Purpose | Location |
|---|---|---|
| Cloudflare, Inc. | Content delivery, security, bot protection | EU / USA |
| Equinix (SO1 data centre, Sofia) | Server hosting and data storage (colocation of our own servers) | EU (Bulgaria) |
| Google LLC / Google Ireland Ltd | reCAPTCHA (security), Google sign-in, YouTube API; Google Analytics only with your consent | EU / USA |
| Apple Inc. | Sign in with Apple, in-app purchases | EU / USA |
| Braintree (a PayPal service), PayPal, Apple Pay, Google Pay | Payment processing | EU / USA |
| Google Play / Apple App Store | In-app subscriptions | EU / USA |
| Anthropic, OpenAI, Google (Gemini), Mistral AI | Inoreader Intelligence | EU / USA |
| Supadata | Transcripts of YouTube videos for Inoreader Intelligence | EU / USA |
| Amazon Web Services, Inc. (Amazon SES) | Service emails and newsletters | USA |
We may also disclose data to our lawyers, auditors and accountants under professional confidentiality, to public authorities when the law requires it, and to a buyer or successor in the event of a merger or sale of our business. If you are part of a Team or Enterprise account, your team administrator can see the data you share in the team.
6. International transfers
Some of the providers above are located in, or may access data from, countries outside the European Economic Area, mainly the USA. In these cases we rely on the EU-US Data Privacy Framework (for certified providers), on an adequacy decision of the European Commission, or on the European Commission’s Standard Contractual Clauses together with additional safeguards. You can ask us for a copy of the relevant safeguards.
7. How long we keep your data
| Data | Retention period |
|---|---|
| Account and content data | While your account is active. Deleted as soon as you delete your account; backups are overwritten within 30 days |
| Inactive free accounts | Kept until you delete the account; we send a reminder after a period of inactivity |
| Invoices and accounting records | 10 years, as required by the Bulgarian Accountancy Act |
| Support communications | Kept until you ask us to delete them |
| Security and server logs | 90 days |
| Marketing consent and preferences | Until you withdraw consent or unsubscribe, plus proof of consent for 3 years |
| Cookies | See our Cookie Policy |
8. Your rights
Under the GDPR you have the right to:
- access your data and get a copy of it;
- rectify inaccurate data (you can also do this in Preferences > Profile);
- erase your data (“right to be forgotten”), including by deleting your account;
- restrict processing in certain cases;
- data portability – export your subscriptions (OPML) and content in a machine-readable format;
- object at any time to processing based on legitimate interest, and to direct marketing;
- withdraw consent at any time, without affecting earlier processing. You can change cookie choices via the “Cookie settings” link in the footer;
- not be subject to automated decisions with legal or similarly significant effects. We do not make such decisions.
To use your rights, email [email protected]. We reply within one month. This can be extended by two more months for complex requests, in which case we will tell you why. The service is free of charge. We may ask you to confirm your identity.
Right to complain. You can lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP), 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, www.cpdp.bg, or with the supervisory authority in the EU country where you live or work.
9. Marketing communications
We send newsletters and promotional emails only if you have agreed to receive them or, for existing customers, about similar Inoreader services. Each email has an unsubscribe link. You can also change your preferences in your account settings. Service emails about security, billing or important changes are part of the Service and are not marketing.
10. Children
The Service is not intended for children. You must be at least 16 years old to create an account, or the minimum age for digital services in your country of residence if lower (in Bulgaria, 14). If we learn that we hold data of a child below that age without parental consent, we will delete it.
11. Security
We protect your data with technical and organisational measures, including encryption in transit (TLS), hashed passwords, access controls and limited staff access on a need-to-know basis. For more detail, see our Security commitment. If a personal data breach occurs, we will notify the CPDP within 72 hours and inform you without undue delay where the law requires it.
12. Cookies
We use cookies and similar technologies. Non-essential cookies are used only with your consent. Details are in our Cookie Policy.
13. Third-party websites and content
Inoreader shows content from websites and feeds that you follow. When you open an original article or a linked website, that website’s own privacy policy applies.
14. Changes to this policy
We may update this policy. The “Last updated” date at the top shows when it last changed. We will notify you of material changes by email or in the Service before they take effect.
15. Contact
Innologica Ltd, 35 Boris Stefanov Str., 1700 Sofia, Bulgaria · [email protected]
In case of any discrepancy between the English and Bulgarian versions, the English version shall prevail.