Legal
Last updated 8 September 2026
This policy explains what happens to personal data when you use this website. It is written to be read, not to be survived. If anything here is unclear, ask us and we will explain it plainly.
Prova Software EOOD is the controller of the personal data described in this policy.
Company
Prova Software EOOD
Company number (UIC / EIK)
208821816
Registered office
Macedonia Blvd. 199, Ent. B, Fl. 3, Ap. 6, Silistra 7500, Bulgaria
Privacy contact
This policy covers this website, provasoftware.com.
It does not cover the Prova platform itself. When we process data inside the platform on behalf of a customer, that customer is the controller and we act as their processor. That processing is governed by the data processing agreement in their contract with us, not by this page.
We collect personal data in four situations, and only these four.
Support requests
When you use the form on our Help Center we collect your name, work email, company, and optionally the building or site concerned, the area and urgency, a record reference, and your description of the problem. We use it to answer you and to keep a record of what was asked and what we did. Our basis is performance of a contract with your organisation, or our legitimate interest in supporting the people who use our software. We keep it for 24 months after the request is closed.
Demo bookings
When you book a demonstration we collect your name, email address, and your answers to the booking questions about your estate. We use it to schedule the meeting and to prepare for it, so the call is about your buildings rather than a generic tour. Our basis is taking steps at your request before entering into a contract. Bookings are held in Google Calendar. We keep them for 24 months.
Analytics, if you accept
If you accept analytics in the cookie banner, Google Analytics records how this site is used: which pages are viewed, how you arrived, your approximate location and your device type. It sets cookies on your device whose names begin with _ga. Our basis is your consent, and you can withdraw it at any time from the banner. If you decline, or ignore the banner, none of this happens and no analytics cookies are set.
Server logs
Our web server records the usual technical information about requests: IP address, browser user agent, the page requested, and the time. We use it to keep the site available and secure and to diagnose faults. Our basis is our legitimate interest in operating the site safely. Logs are kept for a short period by our hosting provider and are never used for analytics, profiling or advertising.
We do not ask for, and have no use for, special category data. Please do not put it into a support request.
We use Google Analytics, and we ask you first. On your first visit a banner asks whether you accept analytics cookies. Until you accept, analytics is switched off: Google's tag is loaded with consent denied by default, so nothing is stored on your device and no visit is measured. If you decline, it stays that way. We run no advertising and no social media trackers, and we do not build profiles of visitors.
Being straight about one detail: Google's tag file is loaded on every page so that it can react to your choice, which means your IP address reaches Google whether you accept or decline. What it does not do, unless you accept, is store anything on your device or record your visit. Fonts and scripts that many sites load from third parties are served from our own server instead, so apart from Google's tag and the two embeds below, an ordinary page discloses your IP address only to us and to our hosting provider.
Two pages also embed content from Google, and Google may set its own cookies when they load:
You can change your mind at any time from the cookie banner, and blocking third-party cookies in your browser also prevents Google setting them. Every part of this site works normally without any cookies at all.
We do not sell personal data, and we never share it for advertising. We share it only with the suppliers who help us run the business:
We may also disclose data where the law requires it, or to establish or defend a legal claim.
Website data is stored in the European Union. Google may process some data outside the European Economic Area. Where that happens, the transfer is covered by Google's own safeguards, including the standard contractual clauses approved by the European Commission. You can ask us for details of those safeguards.
Under the GDPR you have the right to:
Email privacy@provasoftware.com to exercise any of these. We will respond within one month. Exercising your rights is free, and we will not treat you differently for it.
If you think we have handled your data badly, please tell us first so we can put it right. You also have the right to complain to a supervisory authority. Ours is the Bulgarian Commission for Personal Data Protection, 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria, cpdp.bg. You may also complain to the authority in the country where you live or work.
The site is served over HTTPS. Access to support requests and bookings is limited to the people at Prova who need it to do their job, which at present is a small team. We review who has access when somebody joins or leaves.
This site and our software are for business use. We do not knowingly collect data about children.
When what we do changes, we will change this page and update the date at the top. We will not quietly broaden what we collect and hope nobody notices.