Privacy Policy

1. Who We Are

Pentabeam d.o.o. ("Pentabeam", "we", "us") is a limited liability company incorporated in Slovenia (registration number: pending), with its registered office at Ljubljana, Slovenia. We operate the Pentabeam AI cost control platform for the construction industry.

For questions about this policy, contact us at: tej.huc@pentabeam.com

2. Data We Collect

We collect the following categories of personal data:

• Account data — name, company name, work email address, role.
• Project data — Bills of Quantities, subcontractor invoices, contract documents, email threads you connect to the platform. This data may contain personal data about your employees, subcontractors, and clients.
• Usage data — log files, page views, feature interactions, browser type, IP address.
• Communication data — emails and messages you send to us directly.

3. How We Use Your Data

We use personal data to:

• Provide and operate the Pentabeam platform.
• Train and improve your dedicated AI model — which is trained exclusively on your own project data and never shared with other customers.
• Send service notifications and product updates (with your consent where required).
• Comply with legal obligations under EU law.
• Protect against fraud, abuse, and security threats.

4. Legal Basis for Processing

We process personal data on the following legal bases under the GDPR:

• Contract performance (Art. 6(1)(b)) — to deliver the services you have contracted with us.
• Legitimate interests (Art. 6(1)(f)) — for security, fraud prevention, and service improvement.
• Legal obligation (Art. 6(1)(c)) — where required by EU or Slovenian law.
• Consent (Art. 6(1)(a)) — for marketing communications, where applicable.

5. Data Isolation and AI Models

Your project data is strictly isolated. It is used solely to train and operate your own dedicated AI model. We do not use your data to train models for other customers. This commitment is contractually binding and auditable.

6. Data Retention

We retain personal data for as long as your account is active or as necessary to provide services. Project data is retained for the duration of your subscription plus 90 days after termination, after which it is securely deleted. We retain records required by law for the applicable statutory period.

7. Data Sharing

We do not sell your data. We share data only with:

• Subprocessors — cloud infrastructure providers operating within the EU (listed in our Data Processing Addendum).
• Legal authorities — where required by law or court order.

8. International Transfers

Pentabeam is built and hosted within the European Union. We do not transfer personal data outside the EEA unless covered by an adequacy decision or Standard Contractual Clauses (SCCs) as required by GDPR Chapter V.

9. Your Rights

Under GDPR, you have the right to:

• Access the personal data we hold about you (Art. 15).
• Rectify inaccurate data (Art. 16).
• Erase your data in certain circumstances (Art. 17).
• Restrict or object to processing (Art. 18, 21).
• Data portability (Art. 20).
• Lodge a complaint with the Slovenian Information Commissioner (ip-rs.si).

To exercise your rights, email tej.huc@pentabeam.com. We will respond within 30 days.

10. Security

We implement appropriate technical and organisational measures to protect your data, including encryption in transit (TLS 1.2+), encryption at rest, access controls, and regular security reviews. We are compliant with the EU AI Act requirements applicable to our platform.

11. Cookies

Our marketing website uses minimal cookies for analytics (with consent). The Pentabeam platform does not rely on third-party advertising cookies. You may manage cookie preferences through your browser settings.

12. Changes to This Policy

We may update this policy from time to time. Material changes will be notified by email or in-app notification at least 14 days before taking effect. The current version is always available at pentabeam.com/privacy.