Privacy Policy

2. What we collect and why

We collect only what you send us and what the site strictly needs to work. We don't sell data and we don't build marketing profiles.

• —Contact form: name, email address, company name (optional), service of interest, budget range and your message. Legal basis: your consent (Art. 6(1)(a) GDPR), given by ticking the box on submission.
• —AI assistant (Voiceflow): the content of the conversation, if you choose to use it. It only loads after you accept third-party scripts. Legal basis: your consent.
• —Call scheduling (Calendly, Typeform): your name, email address and the answers you fill in on their form. Legal basis: pre-contractual steps taken at your request (Art. 6(1)(b) GDPR).
• —Technical traffic data: pages visited, country, device type — collected in aggregate and without cookies by Vercel Analytics. It does not identify you individually. Legal basis: our legitimate interest in understanding how the site is used (Art. 6(1)(f) GDPR).
• —Your IP address, temporarily, to rate-limit abuse of the contact form. Legal basis: legitimate interest in preventing spam (Art. 6(1)(f) GDPR).

3. Who we share data with

We work with the following providers, each acting as a processor or independent controller. Some are established outside the European Economic Area; transfers rely on the European Commission's Standard Contractual Clauses or the EU-U.S. Data Privacy Framework.

• —Vercel Inc. (USA) — site hosting and aggregate traffic statistics
• —Resend (USA) — email delivery of messages sent through the contact form
• —Voiceflow Inc. (Canada) — the conversational AI assistant
• —Calendly LLC (USA) — call scheduling
• —Typeform S.L. (Spain) — the qualification form

4. How long we keep data

Messages received through the contact form and related correspondence are kept for a maximum of 24 months from the last interaction, then deleted — unless a contractual relationship has arisen in the meantime that requires longer retention.

Financial records relating to an engagement are kept for the period required by Romanian tax and accounting law.

Conversations with the AI assistant are retained according to Voiceflow's own policy. Traffic statistics are aggregated and contain nothing that identifies you.

5. Your rights

Under GDPR you have the following rights, which you can exercise by writing to the email address in the identification section. We reply within 30 days at most, free of charge.

• —Right of access — to find out what data we hold about you (Art. 15)
• —Right to rectification — to have inaccurate data corrected (Art. 16)
• —Right to erasure — to have your data deleted (Art. 17)
• —Right to restriction of processing (Art. 18)
• —Right to data portability — to receive your data in a structured format (Art. 20)
• —Right to object to processing based on legitimate interest (Art. 21)
• —Right to withdraw consent at any time, without affecting the lawfulness of processing before withdrawal (Art. 7(3))

6. How we delete your data

Send us an email with the subject Data deletion from the address you used in the form. We delete the messages you sent and the related correspondence, and request deletion from the providers the data passed through wherever technically possible. We confirm in writing when it's done.

7. Where to complain

If you believe we are infringing your rights, you may contact the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, sector 1, Bucharest, www.dataprotection.ro. You also have the right to go to court.

8. Children

Our services are aimed at companies and professionals. We do not knowingly collect data from people under 16. If you learn that a minor has sent us data, write to us and we will delete it.

9. Security

Data sent through the site travels encrypted (HTTPS). Access to received messages is limited to the people who answer enquiries. Credentials for the services we use are stored in environment variables, not in application code.