Data & privacy

Where Prezentér data is processed — and what we don't claim

Prezentér is built by Sales Robots s.r.o., a Czech company based in Prague. The primary database is in Frankfurt (Supabase, eu-central-1) and a data processing agreement (DPA) is available. Some suppliers also process data outside the EU, so this is not an EU-only processing guarantee: the table below shows every data flow, who handles it and under which legal instrument.

Facts last verified: 24 October 2026. This page is not legal advice; check the details with your data protection officer.

Data flows: what, who, where, under which instrument

Retention periods and the full list of sub-processors are in the DPA (Appendix 1 and Annex 3). We do not repeat numbers here that could drift out of date.

WhatWhoWhereLegal instrument
Database: conversation transcripts, topics, optional contact details, consent records, technical dataSupabasePrimary project database in Frankfurt (eu-central-1). Supplier access is governed by Supabase's DPA.Supabase DPA, listed in the Sales Robots DPA (Annex 3)
Prezentér application (app.salesrobots.cz): serving the demo to visitorsVercelGlobal infrastructure. Processing outside the EEA is possible; we do not promise an EU-only region.Vercel DPA, listed in the Sales Robots DPA (Annex 3)
AI answers, live voice and text-to-speech: what the visitor types or saysGoogle (Gemini API)Google's published API terms say data may be stored transiently or cached in any country where Google or its agents maintain facilities. Not EU-only.Google API terms and Google's data processing terms, listed in the Sales Robots DPA (Annex 3)
Protection against automated abuse when a presentation startsGoogle (reCAPTCHA Enterprise)Processed by Google; processing outside the EEA is possible under Google's terms.Google Cloud DPA, listed in the Sales Robots DPA (Annex 3)
Email summaries and notifications: addresses and the content of the summaryResendResend's DPA states that its primary processing takes place in the United States. An EU sending region does not guarantee EU storage.Resend DPA with EU Standard Contractual Clauses; Resend states it is certified under the EU-U.S. Data Privacy Framework
Marketing website salesrobots.cz (pages and content, not the Prezentér database)CloudflareServed through Cloudflare's global network.Cloudflare terms; not part of the Prezentér processing in the DPA

Who is controller and who is processor

  • For your presentation, you (the customer) are the data controller. Sales Robots acts as the processor and processes data only on your documented instructions under the DPA.
  • For its own contract, accounting and customer-account data, Sales Robots is a separate controller; see the privacy policy.
  • The DPA lists the sub-processors above in Annex 3 and explains how changes are announced.

Documents: Data processing agreement · Privacy policy · Terms

What visitors are told

  • Visitors are told they are talking to an AI, not a person, and that the presentation is informational.
  • Acknowledging that information is not consent to marketing follow-up. Contact details are collected only with the visitor's consent.
  • A visitor can start the demo without registering.

What you get

  • Transcripts of each session in your admin panel.
  • Leads delivered by email or by webhook into your own CRM.
  • The DPA, the privacy policy and the terms as versioned documents on this website.

What we don't have

Sales Robots does not hold SOC 2 or ISO 27001 certification. That matters when your procurement or customer contracts require an independent audit report from every vendor. It matters less for a limited pilot where the demo shows only content you already publish, contact data is optional and a documented questionnaire is acceptable to your DPO. Our guide to GDPR-compliant product demo software explains how to weigh the two cases.

Read the full buyer checklist: GDPR-compliant product demo software.

Frequently asked questions

Is Prezentér GDPR-aware?

It is designed with GDPR in mind: visitors are informed before the demo starts, contact details are collected only with consent, and a DPA defines our role as processor. We do not claim a certification, and using a tool does not by itself make your own processing compliant, because you remain the controller. This is not legal advice; check with your DPO.

Where is the data stored?

The primary database is in Frankfurt (Supabase, eu-central-1). Other suppliers handle parts of the processing in other places; the data-flow table on this page lists each one.

Is the AI processing EU-only?

No. Answers are generated with the Google Gemini API, and Google's published API terms say data may be stored transiently or cached in any country where Google or its agents maintain facilities. We do not describe AI processing as EU-only.

Do you have a DPA?

Yes. The data processing agreement is published on this website in English and Czech, with a PDF download. If your process needs something different, write to info@salesrobots.cz.

Does the buyer need to register?

No. A visitor can start the demo without registering. Contact details are optional and are collected only with the visitor's consent.

Do you hold SOC 2 or ISO 27001?

No. We do not hold either certification. If your procurement requires one, we are probably not the right fit yet; if a documented questionnaire is acceptable for a pilot, we will answer it in writing.

Questions about data handling: info@salesrobots.cz · Facts last verified 24 October 2026.

Questions about data and your procurement process? Tell us what your DPO needs.

We will answer in writing and point you to the exact section of the DPA.

Working hours

Mon–Fri: 8:00–17:00 (Prague time)

Responses outside working hours are sent the next business day.

Meeting

Schedule an online meeting

Send us a message

All fields marked * are required.