Privacy Policy

The website www.nautiluscreator.com (the "website") and the Nautilus program are operated by Marko Milosavljević ("we", "us"). We are the controller of your personal data under the Law on Personal Data Protection of the Republic of Serbia (Official Gazette of RS, No. 87/2018) and, where applicable, the EU General Data Protection Regulation (GDPR).

This policy explains what data we collect when you visit the website, book a free consultation, contact us or become a Nautilus client, why we use it, who we share it with, how long we keep it and what rights you have.

For any privacy question, email nautiluscreator@gmail.com.

In plain terms: This page tells you exactly what we know about you, why we need it and what you can ask us to do with it. We only collect what we actually need for the call and the work.

Data you give us. When you book a consultation through the booking form (Cal.com), we collect your name, email address, the selected time slot and time zone, and your answers to the form questions, for example a link to your social media profile, your field of work, your follower count and what you want to achieve. When you write to us, we collect your contact details and the content of your message. During consultations and the program, we process the information about your business, offer, content and results that you choose to share, including screenshots of your account analytics.

Publicly available data. Before the consultation, we review the public profile you entered in the form (posts, bio and publicly visible metrics) so we can prepare the call specifically for you. We never ask for passwords or access to your accounts.

Technical data. On every visit, our hosting provider automatically logs basic technical data needed to run and protect the website: IP address, browser and device type, the page visited and the time of access.

What we don't collect. We do not collect payment card data through the website. We do not ask for special categories of personal data, such as health data or religious or political beliefs, and we ask you not to enter them in the form.

In plain terms: We know what you write in the form or a message, what you share on the call and what is public on your profile, plus basic technical data about your visit. We don't need your card or your passwords.

We do not record consultations or calls without your prior consent. We do not add your email address to any marketing list without your explicit consent. We do not make decisions about you based solely on automated processing, including profiling, that produce legal effects for you or similarly significantly affect you.

In plain terms: We use your data to book and prepare the call, reply to you and, if you become a client, work with you. We don't record calls without asking and we don't send you promotional emails unless you ask for them.

We do not sell or rent your data. We share it only in the following cases.

Service providers. We use trusted providers that process data on our behalf and on our instructions (processors):

Program team members. If you become a client, team members involved in research, strategy, scriptwriting and editing have access only to the data they need for their part of the work and are bound by confidentiality.

Public authorities. When required by law or by a decision of a competent authority.

Business changes. If the Nautilus business is transferred to another entity (for example, a newly founded company), your data may be transferred to that entity with the same level of protection. We will inform you if this happens.

We never publish your name, profile, results or screenshots as a case study or testimonial without your explicit consent.

In plain terms: Your data only goes to the tools we can't work without (website, calendar, video calls, email) and to the people on the team working on your content. We don't sell it to anyone and we don't show your results publicly without your permission.

Some of the providers listed above are based or store data outside the Republic of Serbia, including in the United States (Vercel, Cal.com, Google, Notion). We transfer data abroad only with the safeguards required by law, such as transfers to countries with an adequate level of protection or standard contractual clauses. On request, we will provide more information about the safeguards in place.

In plain terms: Some of our tools are American. Data is only transferred with the legal safeguards the law requires.

The website does not set its own cookies and does not store your data in your browser. The selected language is not remembered: the Serbian and English versions have their own addresses (/ and /en/), so nothing needs to be stored for that.

When you open the booking window, Cal.com may set its own cookies needed for the calendar to work. Cal.com's privacy policy applies to those.

You can also delete or block cookies in your browser settings.

In plain terms: The website itself remembers nothing about you. The booking calendar uses its own cookies to work.

When the period ends, we delete or permanently anonymize the data. You can request deletion earlier (section 8), except for data we are legally required to keep.

In plain terms: We don't keep anything “just in case”. If we don't work together, your booking data is deleted after a year, and you can ask us to delete it sooner.

Regarding your data, you have the right to:

• request access to your data and a copy of the data we process about you;
• request correction of inaccurate data or completion of incomplete data;
• request erasure of your data;
• request restriction of processing;
• receive the data you gave us in a structured, commonly used and machine-readable format and transfer it to another controller;
• object to processing based on legitimate interest;
• withdraw your consent at any time, without affecting the lawfulness of processing before the withdrawal;
• lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection of the Republic of Serbia (www.poverenik.rs). If you live in the European Union, you can also lodge a complaint with the supervisory authority in your country.

Send your request to nautiluscreator@gmail.com. We will respond without undue delay and within 30 days at the latest. If the request is complex, this period may be extended by another 60 days, and we will let you know. Exercising your rights is free of charge. To protect your data, we may ask you to verify your identity.

In plain terms: You can ask at any time what we know about you, correct it or ask us to delete it. Send an email and we'll respond within 30 days.

We protect your data with appropriate technical and organizational measures. The website runs exclusively over an encrypted HTTPS connection, only a limited number of people who need it for their work have access to the data, and our tool accounts are protected with strong passwords and two-factor authentication where available.

No system is completely secure. In the event of a personal data breach, we will notify the Commissioner within the period required by law, and notify you without undue delay if the breach is likely to result in a high risk to your rights.

In plain terms: We handle your data carefully and only the people who need it can access it. If something ever goes wrong, you'll hear it from us.

The website and the Nautilus program are intended for adults. We do not knowingly collect data from anyone under 18. If we learn that we have received such data, we will delete it.

In plain terms: We only work with adults.

The website contains links to Instagram, TikTok, YouTube and other services. If you contact us through social networks, those messages are also processed by the platform under its own privacy policy. We are not responsible for the privacy practices of third-party websites and platforms.

In plain terms: Once you leave our website or message us on social media, that platform's rules apply.

We may update this policy from time to time, for example when we start using a new tool. Changes are published on this page with a new “Last updated” date. If a change significantly affects your rights, we will also notify you by email if we have your address.

In plain terms: If we change something, you'll see a new date at the top. For important changes, we'll reach out.