Privacy Policy

1. Who we are

Kreovative SRL is responsible for this processing. Our registered address is Str. Tudor Vladimirescu nr. 31, 505100 Codlea, Brașov, Romania. CUI: 51283270. For privacy questions or requests, contact info@kreovative.com.

2. What we process and why

We use the contact details, business information and messages you choose to submit to answer enquiries, discuss projects and prepare requested offers. This is based on steps you request before a contract or our legitimate interest in responding to business communications (Article 6(1)(b) or (f) GDPR).

We process technical visit information, such as your IP address, browser and requested pages, for our legitimate interest in operating a secure website. Optional analytics helps us understand website use and runs only with your consent (Article 6(1)(a) GDPR).

Providing information is voluntary, but we need contact details to reply. Please do not submit confidential information or sensitive personal data. We do not send marketing emails.

3. The AI assistant and your choices

The assistant is an AI system. OpenAI processes your messages and conversation context to generate replies. Messages are not used to train its models by default. OpenAI normally retains abuse-monitoring data for up to 30 days, with possible legal or safety exceptions.

We do not automatically save chat transcripts. The chat disappears when you close your browser tab. Only a summary you review and choose to submit is stored as part of your enquiry; it may include the messages shown in that summary. A person handles your enquiry; the assistant makes no decisions about you.

Optional analytics uses no analytics cookies and receives no form or chat content. Your consent choice is saved in your browser. You can change it at any time through Privacy settings in the footer. We use no marketing cookies.

4. Who receives your data

We use Vercel for hosting and optional analytics, Supabase for enquiry storage in Ireland, EmailJS for notification emails, Google Workspace for correspondence, and OpenAI for assistant replies. We do not sell your data.

EmailJS and OpenAI process data in the USA. Google Workspace and Vercel may also process data outside the European Economic Area. For international transfers, the applicable safeguards include EU Standard Contractual Clauses or, for eligible US recipients, the EU–US Data Privacy Framework. Contact info@kreovative.com for details or a copy of the applicable safeguards.

5. How long we keep it

Our retention period for enquiries that do not become projects is 24 months after our last contact. Relevant project records are kept during the project; afterwards, documents subject to Romanian accounting requirements are retained for the applicable statutory period.

Unsubmitted chat follows the browser and OpenAI retention described above. Technical logs are kept as needed for security and operational investigations, within the hosting service's retention settings. Optional analytics contains aggregate statistics, not enquiry or chat content.

6. Your rights

Where applicable, you can request access, correction, deletion, restriction or portability of your data, object to processing based on legitimate interests, and withdraw consent. Withdrawal does not affect processing that was lawful before it. Contact info@kreovative.com; we normally respond within one month. If a permitted extension is necessary, we will tell you within that month and explain why.

You may also complain to Romania's data-protection authority, ANSPDCP (dataprotection.ro (https://www.dataprotection.ro)), or the competent authority where you live or work.

We update this policy when our processing changes and show the revised date with the policy.