AVOCĂȚEL PRIVACY POLICY

1. Data controller

This policy explains how Bács M-Cs. Balázs ÎI processes personal data through https://avocatel.ro. Controller: Bács M-Cs. Balázs ÎI Registered address: Bixad, 147, CV, RO Tax ID: 51894240 Email: bmcb.dev@gmail.com Phone: +40743234307

2. Data we process

• Account data: email address, account identifier, language, credit balance and use, account status, and authentication data.
• Conversations: questions, answers, citations, and the excerpts needed to retain chat context or create an action plan.
• Document generator data: information entered in the form, which may include a name, address, contact details, personal identification number (CNP), identity-document details, and the situation described.
• Payment data: the credit package or document purchased, payment status, transaction identifiers, and credit records. Stripe, not us, collects full card details. Stripe may request a CNP on its checkout page.
• Invitations and feedback: the invited person's email address, connection to the inviter, invitation status, and feedback messages.
• Location: coordinates and city, only when you allow browser access.
• Technical and usage data: IP address, browser, device, pages visited, access times, errors, and security events. Vercel Web Analytics measures traffic without third-party analytics cookies.

3. Why we use data and our legal bases

• Contract: authentication, managing accounts and credits, providing chat, documents and invitations, and processing orders.
• Legitimate interests: Platform security, fraud prevention, troubleshooting, aggregated statistics, and service improvement, balanced against your rights.
• Legal obligation: tax and accounting records, responses to authorities, and handling lawful requests.
• Consent: access to device location and any optional communication for which we ask permission. You may withdraw consent at any time.

4. How data is handled in key features

Chat history is stored with your account through Supabase and, for quick access, in an encrypted browser copy. Your question and recent conversation are sent to Anthropic to generate a response; an action plan may use a broader conversation excerpt. Information entered in the document generator passes through our servers to create the document. If you select AI refinement for a field, that text and other form data needed as context are sent to Anthropic. A document preview may be stored temporarily in the browser to complete payment. If you enable location, the browser sends coordinates to Nominatim/OpenStreetMap to identify the city. Provide only necessary data and avoid providing another person's data unless you are entitled to do so. Content sent through Anthropic's commercial services is not used to train its models by default.

5. Who receives data

We do not sell personal data or use it for behavioural advertising. Providers process data under contracts and their own legal obligations.

• Supabase – authentication, database, and account history.
• Anthropic – AI responses and optional refinement of document text.
• Stripe – payment processing and fraud prevention.
• Resend – invitations and service emails.
• Vercel – hosting, technical logs, and web analytics without third-party analytics cookies.
• OpenStreetMap/Nominatim – converting coordinates into a locality if you enable the feature.
• Authorities, advisers, or courts when required by law or necessary to defend legal rights.

6. International transfers

Some providers may process data outside the European Economic Area, including in the United States. In those cases we use GDPR-permitted safeguards, such as an adequacy decision, the EU-US Data Privacy Framework, or standard contractual clauses, as applicable. You may request more information at bmcb.dev@gmail.com.

7. How long we retain data

We retain account data while the account is active and chat history until you clear it or ask us to delete it. The account-closure option deactivates the profile and resets credits but does not automatically erase every record; to request erasure of remaining data, contact bmcb.dev@gmail.com. Payment, billing, anti-fraud, and dispute records may be retained for the period required or permitted by law. Temporary browser data remains until removed by the relevant feature, by you, or by the browser. Providers may retain limited copies under their legal and security schedules; under Anthropic's currently published rules, it normally deletes API data from its systems within 30 days, subject to certain exceptions.

8. Your rights

Subject to the GDPR, you may request access, correction, deletion, restriction, or portability of your data, or object to processing. Where processing relies on consent, you may withdraw it without affecting earlier use. Send requests to bmcb.dev@gmail.com; we may need to verify your identity. You may also complain to Romania's National Supervisory Authority for Personal Data Processing (ANSPDCP) or your local supervisory authority.

9. Security

We use HTTPS connections, access controls, link-based authentication, and reasonable technical and organisational safeguards. The local chat copy is encrypted in the browser. No online system is completely secure. If you suspect unauthorised account access, contact us and secure the email account used to sign in.

10. Browser storage and children

The Platform uses local and session browser storage for authentication, local history, preferences, generator access, and completing a download. These items support functionality, not advertising. You can clear them in browser settings, but some features will no longer retain their state. The Platform is intended for people aged 18 or over, and we do not knowingly collect children's data.

11. Automated decisions and updates

AI generates content at your request, but we do not use your data for solely automated decisions that produce legal effects on you. We may update this policy when services, providers, or the law change. We will post the new version and update date and will highlight material changes where appropriate. For privacy questions or requests, contact bmcb.dev@gmail.com.