Cookie Policy

NERO is provided by KRIS CORRECT CONSULT 2006 LTD (in Bulgarian: КРИС КОРЕКТ КОНСУЛТ 2006 ЕООД), UIC (ЕИК) 206224007, with its registered office at 79 Louis Ayer Str., entr. B, apt. 4, Manastirski Livadi-Iztok, Triaditsa District, Sofia 1404, Bulgaria. The company trades as Nero Partners and is referred to in this policy as "Nero Partners".

NERO is an invite-only business web application through which Nero Partners works together with its clients. Any person who uses NERO, whether an authorised member of Nero Partners' team or an authorised contact of one of its clients, is referred to in this policy as the "User". Where this policy addresses the User directly, it uses "you".

This policy applies only to NERO, including its sign-in, invitation and legal-document pages. It does not apply to the website neropartners.bg or to any other website, including websites to which links in NERO lead.

A cookie is a small text file that a website stores, through the browser, on the User's device and that the browser sends back to the same website with each later request to it. A session cookie is normally deleted when the browser is closed; a persistent cookie is deleted on a set date or after a set period.

The browser's local storage (localStorage) is a separate area of the browser in which a website can keep small amounts of data on the device. Unlike cookies, this data is not sent to the server automatically with requests to it: it stays on the device and is available only to the pages of the same website in the same browser.

First-party cookies and similar technologies are set by the website the User is visiting, on its own domain. Third-party technologies are set by another domain, for example by an analytics or advertising service embedded in the page.

In this policy, "cookies and similar technologies" means cookies, the browser's local storage and any other technology by which information is stored on the User's device or information already stored on it is accessed.

NERO uses only first-party technologies, and only of the following two kinds:

• Strictly necessary technologies: cookies and local-storage entries without which NERO cannot provide the service the User has requested or keep it secure. They sign the User in, maintain the session and end it as the User has chosen, and reload the other open tabs of the same browser after sign-out or a change of account, so that those tabs do not continue to show pages of the previous account.
• Functional preferences: local-storage entries that remember the choices the User has made in the interface and the state of the interface, such as a light or dark theme, a collapsed side navigation, a list, card or table view, the columns shown, the conversations open in the chat panel, and muted pop-up notifications. They include the entry that ensures a pop-up notification appears in only one of the open tabs. These entries are kept only in the User's browser.

NERO uses no analytics or statistics services, no advertising technologies, no tracking pixels, no social-media plug-ins, no session-recording (session replay) services and no error-monitoring services. Nothing NERO keeps in the browser is used to profile the User, to follow the User across other websites or for advertising. The two cases in which the User's browser contacts third-party websites directly are described below under "Content from third-party websites".

Under Article 5(3) of Directive 2002/58/EC (Directive on privacy and electronic communications), as transposed into Bulgarian law by Article 4a of the Electronic Communications Act, storing information on the User's terminal device, or gaining access to information already stored there, requires the User's consent, unless it is strictly necessary to provide a service the User has explicitly requested. NERO's cookies are strictly necessary in that sense. The local-storage entries are likewise part of the service the User has requested: each serves a function the User uses and keeps only the choice or state that function needs.

For that reason NERO shows no cookie banner and does not ask for consent to their use. When given access to NERO, the User confirms having read this policy; that confirmation records that the information has been provided and is not consent.

Where information stored or read through these technologies relates to an identified or identifiable natural person (the session cookie, for example, is linked to the User's account), its processing as personal data is described in the Privacy Policy.

NERO may set only the cookies listed in the table below. All of them are first-party cookies and all of them are strictly necessary. NERO sets no cookie for language, theme, analytics, advertising or for recording consent.

The part of the first two cookies' names shown as "…" is the identifier of NERO's project with its authentication provider. It is the same for every user and does not identify the User.

When signing in, the User may tick the "Remember me" box. This choice determines only how long the browser keeps the session. NERO never stores the User's password in the browser; saving passwords is a function of the browser itself or of a password manager chosen by the User.

• If the box is not ticked, the session cookie is temporary and is deleted when the browser is closed. Because many browsers restore such cookies when they reopen the previous tabs, NERO also ends the session after 12 hours without use; this is what the pos-session cookie is for.
• If the box is ticked, the session cookie is kept on the device for up to 400 days from the last renewal of the session, which happens automatically while NERO is in use, unless the User signs out earlier.
• The pages on which the User accepts an invitation or activates a new account offer the same "Remember me" box, unticked, with the same effect on the session that begins there. At every later sign-in through the sign-in form the choice is made again.

Signing out ends the User's sessions on all devices, not only on the device used to sign out, and deletes the pos-session cookie. On a shared or publicly accessible device, it is advisable to leave "Remember me" unticked and to sign out when you finish working.

NERO keeps the entries listed in the table below in the local storage of the User's browser. Their keys begin with "pos:". They stay on the device, are not sent to the server automatically and are not cookies.

In the keys ending in "…", that part is the identifier of the User's account, so that two people who use the same browser keep their settings separately. The entries contain no passwords, no message content and no files.

NERO uses no session storage (sessionStorage), no in-browser database (IndexedDB) and no background script (service worker).

NERO loads no scripts, fonts or media from third parties: its program code, fonts and welcome video are served by NERO itself, and its pages exchange data only with NERO and with the providers that operate NERO on behalf of Nero Partners, which are described in the Privacy Policy. Two functions, however, cause the User's browser to contact third-party websites directly:

• Link cards: the card of a link added in NERO shows the small icon (favicon) of the website the link leads to, and the browser loads it directly from that website.
• Logos set by web address: where a logo is set by entering a web address, the browser loads the image from the server at that address.

These requests go directly from the User's browser to the third party, without passing through NERO. As with any request on the internet, the third party receives the device's IP address and information about the browser, may record them in its server logs and may apply its own cookies or similar technologies under its own rules. For a link's icon, NERO asks the browser not to send the address of the NERO page; for a logo set by web address, the third party may also learn the address of NERO's site. Nero Partners does not control those websites or what they record.

Where the optional Google Calendar connection is enabled and the User chooses to connect it, the browser is redirected to Google's own pages for that step, where Google's terms and policies apply.

NERO also supports an optional check against automated access (CAPTCHA) on forms such as the sign-in and invitation forms. That check is not currently used. Before it is enabled, Nero Partners will update this policy to name the provider of the check and the technologies it uses.

You can view, block and delete cookies and local-storage data in your browser's settings, usually in the privacy and security section or in the settings for cookies and site data. Instructions are in each browser's help pages. Clearing the site data for NERO's address deletes both its cookies and its local-storage entries.

Please note the following consequences:

• If you block or delete the session cookie, you cannot sign in to NERO, and if you are already signed in, your session on that device ends. NERO cannot be used without this cookie. If you block or delete only the pos-session cookie, NERO can no longer end, after 12 hours without use, a session in which you chose not to be remembered, and that session may be kept as if "Remember me" had been ticked; to end it, sign out.
• If you delete the local-storage entries, the interface settings (theme, views, columns shown, conversations open in the chat panel, muted notifications) return to their defaults. NERO continues to work.
• If local storage is not available, NERO can still be used, but it will not remember your choices in the interface. In many browsers, however, blocking all site data also blocks cookies, and without them signing in to NERO is not possible.

If Nero Partners introduces into NERO cookies or similar technologies that are not strictly necessary, for example to analyse usage, they will be used only with the User's prior consent, which can be withdrawn at any time and as easily as it was given. Nero Partners will update this policy before they are introduced.

This policy is version 1.0 and is effective from 19 October 2026.

Nero Partners may amend this policy, in particular when the technologies NERO uses change, when the law or the guidance of a competent authority so requires, or to clarify its wording. Each new version is published in NERO with its version number and effective date.

Where a change is material, the amended policy may be presented to Users for acknowledgement again when they next use NERO.

Questions about this policy and about the cookies and similar technologies NERO uses can be sent to Nero Partners at k.georgiev@neropartners.bg.

How Nero Partners processes personal data, what your rights are and how you can exercise them, including the right to lodge a complaint with the Commission for Personal Data Protection (cpdp.bg), are set out in the Privacy Policy.