Privacy policy

Data controller

The controller is Automaite S.R.L., with the identification details above. For any question about your data, write to us through the contact form on this site.

What data we process

• Contact form: name, email address, company or website (optional), the topic you pick, your message and the page language.
• Shield setup form: company, contact person, email, phone, website address, hosting provider and your notes. Passwords and other access details are not saved in our database: they are sent through an encrypted one-time link that expires after 7 days or once it is opened.
• Free website check: the address of the site checked and the result (findings, score and risk level). We do not store your IP address.
• Shield subscription: the email address used at payment, the Stripe customer, session and subscription identifiers, the plan (monthly or annual), the amounts paid, the subscription status and renewal date. You enter your card details directly with Stripe; we never receive or store them.
• Usage statistics, only with your consent: pages visited, visit source, device and browser type and interactions with the pages, collected through Google Analytics and Microsoft Clarity. Details in the Cookie policy.
• The demo chat, only if you start it: the messages you type and the technical data the conversation needs are processed by Voiceflow to run the chat. Do not type sensitive data into the chat.
• Technical data: your IP address is used briefly, in server memory, to limit request volume and prevent abuse, and is not saved to our database. Our hosting provider may keep technical access logs.

Why, and on what legal basis

• To answer your request and prepare an offer: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
• To provide the Shield subscription and manage payments: performance of a contract (Art. 6(1)(b) GDPR).
• To keep financial records: legal obligation (Art. 6(1)(c) GDPR), under accounting and tax law.
• To run the free check, protect the site from abuse and improve our services: our legitimate interest (Art. 6(1)(f) GDPR).
• To measure anonymously how the site is used, through Google Analytics and Microsoft Clarity: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time from Cookie settings.

We do not use your data for advertising, we do not sell it and we do not build marketing profiles.

Who we share data with

We use providers that process data on our behalf under contract:

• Stripe, for payments, invoicing and the subscription management portal.
• Supabase, for the database that stores requests, check results, orders and subscriptions.
• Vercel, for hosting the site.
• Resend, for delivering contact form messages to us.
• Voiceflow, for the demo chat on the Platforms page, only if you start it.
• Google (Google Analytics) and Microsoft (Clarity), for anonymous usage statistics, only if you accepted analytics cookies.

We share data with authorities only when the law requires it.

Transfers outside the European Economic Area

Our main data store (Supabase) is hosted in the European Union. Stripe, Vercel, Resend, Google, Microsoft and Voiceflow, which process data on our behalf, may also process data outside the European Economic Area; in those cases the transfer relies on the European Commission's standard contractual clauses or an adequacy decision.

How long we keep data

• Contact form requests: at most 24 months after the last interaction, unless you become a client.
• Free check results: at most 12 months.
• Client and payment data: for the duration of the contract, then as long as accounting and tax law requires.

Your rights

You can ask for access to your data, rectification, erasure or restriction of processing, receive your data in a portable format, and object to processing based on our legitimate interest. For any of these, write to us through the contact form; we reply within one month.

If you are not satisfied, you can complain to the Romanian data protection authority (ANSPDCP), www.dataprotection.ro.

Automated decisions

The free check automatically calculates a score and risk level for the site entered. The result is informational and has no legal effect on you. We make no other decisions based solely on automated processing.

Security

Data is sent encrypted (HTTPS). The database cannot be read from the browser; only our server has access, with keys kept outside the code. No system is completely secure, but we take reasonable technical and organisational measures to protect data.

Children

Our services are for businesses. We do not knowingly collect data from anyone under 16.

Changes

We may update this policy. The current version is always on this page, with the date it was last updated.