This Privacy Policy explains how TECHLIS S.R.L. ("webem.io", "we", "us") collects, uses, discloses and safeguards personal data when you visit techlis.net or use our products and services (the "Services"). We act as the data controller within the meaning of the EU General Data Protection Regulation (GDPR).
1. Data we collect
- Account data: name, email, company, password hash, role.
- Billing data: billing address, VAT ID, last 4 digits of payment method, invoice history. Card data is processed by our PCI-DSS compliant payment providers.
- Usage data: prompts submitted, monitored brands, queries, dashboards viewed, API calls, credits consumed.
- Technical data: IP address, browser, OS, device identifiers, log timestamps, referrers.
- Communications: support tickets, emails, and chat messages you send us.
2. Legal bases and purposes
- Contract (Art. 6(1)(b) GDPR): to provide the Services, manage your account, process payments, and provide support.
- Legitimate interests (Art. 6(1)(f)): to secure the Services, prevent fraud, analyse aggregated usage, and improve our product.
- Consent (Art. 6(1)(a)): for marketing emails, optional cookies and tracking.
- Legal obligation (Art. 6(1)(c)): to comply with tax, accounting and AML obligations.
3. Sharing
We share personal data with vetted processors strictly to provide the Services: cloud hosting (EU/EEA regions where possible), authentication, payment processing, email delivery, analytics, AI model providers, and customer support tooling. We do not sell personal data. Cross-border transfers rely on Standard Contractual Clauses and supplementary measures.
4. Retention
Account data is retained for the lifetime of your account and up to 24 months after closure. Invoices are retained for 5 years to meet Romanian accounting obligations. Logs are retained for up to 12 months.
5. Your rights
You have the right to access, rectify, erase, restrict, port or object to processing of your personal data, and to withdraw consent at any time. You may also lodge a complaint with the Romanian supervisory authority (ANSPDCP). Contact [email protected] to exercise your rights.
6. Security
We use TLS in transit, encryption at rest, role-based access, audit logging and regular penetration testing. No system is fully secure — please notify us of any suspected incident immediately.
7. Changes
We may update this Policy. Material changes will be announced in-product or by email at least 14 days before they take effect.