Privacy Policy

CAPPS AI SRL ("Capps.AI", "we", "us" or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose and safeguard your information when you visit www.capps.ai or contact us, and the rights you have under the EU General Data Protection Regulation (GDPR) and applicable Romanian law.

1. Who we are (Data Controller)

The controller of your personal data is:

• CAPPS AI SRL
• Str. Gheorghe Lazăr 24, 300080 Timișoara, Romania
• VAT: RO51981559
• Email: office@capps.ai

2. What data we collect

• Identity and contact data you provide voluntarily through our contact, executive‑diagnostic, support or newsletter forms — such as your name, company, email address, phone number and the content of your message.
• Support data — information and attachments you submit when opening a support ticket.
• Technical and usage data — IP address, browser type, device information, pages visited and similar data collected automatically through server logs and analytics.
• Cookies and similar technologies (see section 8).

3. How we use your data and our legal bases

• To respond to your enquiries and provide an executive diagnostic or proposal — based on your request and steps taken prior to entering into a contract, and our legitimate interest in answering you.
• To create and manage support tickets and deliver our services — based on the performance of a contract and our legitimate interest in supporting customers.
• To send you information or newsletters you requested — based on your consent, which you may withdraw at any time.
• To operate, secure and improve our website — based on our legitimate interest.
• To comply with legal, accounting and tax obligations — based on a legal obligation.

4. Sharing your data

We do not sell your personal data. We share it only with trusted service providers (processors) who act on our instructions, including our ERP/website hosting (Odoo / Odoo.sh) and email infrastructure (Microsoft 365 and our domain registrar). These providers are bound by data‑processing agreements. We may also disclose data where required by law or to protect our rights.

5. International transfers

We aim to keep your data within the EU/EEA. Where a provider processes data outside the EEA, we ensure appropriate safeguards are in place, such as the European Commission's Standard Contractual Clauses.

6. How long we keep your data

We retain personal data only for as long as necessary for the purposes set out above, including to meet legal, accounting or reporting requirements, after which it is deleted or anonymised.

7. Your rights under GDPR

Subject to conditions in the law, you have the right to: access your data; request rectification or erasure; restrict or object to processing; data portability; and withdraw consent at any time. To exercise these rights, contact us at office@capps.ai. You also have the right to lodge a complaint with the Romanian Data Protection Authority (ANSPDCP, dataprotection.ro).

8. Cookies

We use essential cookies needed for the website to function and may use analytics cookies to understand how the site is used. You can control or delete cookies through your browser settings; disabling some cookies may affect site functionality.

9. Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss or misuse. No method of transmission over the internet is completely secure, however, and we cannot guarantee absolute security.

10. Children

Our website is intended for businesses and is not directed at children under 16. We do not knowingly collect data from children.

11. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date above reflects the latest revision.

12. Contact

For any question about this policy or your personal data, contact us at office@capps.ai or by post at the address above.