Privacy Policy

1. Who we are

We are Digital Beauty SRL, your personal data controller. You can contact us anytime at contact@digitalbeauty.ro for any privacy-related questions.

2. What data we collect

We collect the bare minimum to provide the RepliQ service:

• Account data: name, email, hashed password;
• Billing data: VAT ID, office address, bank account;
• Usage data: IP address, technical access logs;
• Documents: anything you upload for the chatbot. Note: Documents are stored on our dedicated EU infrastructure and are isolated per client.

3. How we use the data

• Providing and improving the contracted services;
• Communication related to the account (invoices, service notifications, technical support);
• Fulfilling legal obligations (accounting, taxation);
• Preventing fraud and ensuring platform security.

We do not sell or transfer your data to third parties for marketing purposes.

4. Your rights

• Access: you can request a copy of your data;
• Rectification: you can correct inaccurate data;
• Deletion: right to be forgotten, within the limits of the law;
• Restriction: limitation of processing under certain conditions;
• Portability: receiving data in a structured format;
• Objection: against processing based on legitimate interests;
• Withdrawal of consent: anytime, without retroactive effect.

Requests are sent to contact@digitalbeauty.ro. We respond within 30 days. You also have the right to file a complaint with ANSPDCP.

5. Storage duration

Account data is kept for the duration of the contract and up to 3 years after its termination, according to legal obligations. Billing data is kept for 10 years (accounting legal term). Technical logs are deleted after a maximum of 90 days.

6. International transfers

Data is processed and stored exclusively on servers in the European Union (Germany — Hetzner). We do not transfer data outside the EU/EEA.

7. Data Security

Data security is our top priority. RepliQ uses advanced technical measures to ensure information integrity:

• End-to-end encryption for all communications (HTTPS/TLS);
• Full data isolation between clients (Multi-tenancy);
• Automated auditing of database access;
• Your documents are never shared with third parties;
• Daily encrypted backups for the knowledge base;
• Proactive security incident monitoring (24/7);
• Automated security updates for the platform.

While we make every effort to protect your data, no method of transmission or storage is 100% secure. We encourage you to use strong passwords and secure access.

8. Cookies

The site uses exclusively cookies strictly necessary for operation (authentication session). We do not use tracking, advertising, or third-party analysis cookies.

9. Policy changes

Any changes will be published on this page at least 30 days before taking effect. Continued use of the service after the change date constitutes acceptance of the new version.