Privacy policy

1. Who is responsible for your data

VOICU is a brand of ROEM NOSIS SRL (tax ID 33063978, trade register J2014001371126, Str. Tulgheșului 5A, 400388 Cluj-Napoca, Romania). ROEM NOSIS SRL is the controller of the personal data described here. I run it myself: in this policy "I" means ROEM NOSIS SRL.

For anything about your data, write to contact@voicu.app.

2. What data I collect

Data you give me:

• Quote requests and emails: name, email, company, the tools you use, budget, timeline and what you describe.
• Pack orders: company name, tax ID, registered address and country, contact name and email. As proof that you accepted the terms, the order keeps the date, your IP address and your browser.
• The form after an order: the answers the pack needs (for example your website address or the Oblio invoice series). The form asks for invitations, never for passwords.
• Free tools: the website address, your email and the answers you give (Health Scan, Trust Checker, Automation Audit, SaaS Estimator, the RankRadar free scan).
• RankRadar subscription: business name, website, email, language and the questions and competitors you set.
• Newsletter: your email, only if you ticked the box.

Data collected automatically:

• Technical logs: IP address, browser, pages requested and errors, kept by the hosting provider.
• Abuse limits: your IP address, stored only as a one-way code, used to limit how often a form or tool can be used, and deleted within 48 hours.
• Cookies and local storage: only what the site needs to work; see the cookie policy.

Data from public sources:

• the public content of a website you ask me to scan;
• when you order with a tax ID, the company details registered at ANAF (Romania) or in VIES (EU).

3. Why I use it, and on what legal basis

• Answering your request and preparing a quote: steps you asked for before a contract (art. 6(1)(b) GDPR).
• Delivering what you ordered or requested: packs, projects, RankRadar and the free reports you asked for (art. 6(1)(b) GDPR).
• Invoicing and accounting: a legal obligation (art. 6(1)(c) GDPR).
• Proof of acceptance, security and abuse limits: my legitimate interest in being able to prove an order and in keeping the site safe (art. 6(1)(f) GDPR).
• Newsletter: your consent, which you can withdraw at any time from the link in every newsletter (art. 6(1)(a) GDPR).

I do not sell your data and I do not use it for advertising.

4. Reports made with AI

The free tools, the Health Scan and RankRadar send the details about the business you entered (name, website address, industry, description, the questions you set) and the public content of the website to AI providers to write the reports. RankRadar asks ChatGPT, Claude, Gemini and Perplexity every week whether they recommend the business.

No decision with legal or similarly significant effect on you is made automatically.

5. Who receives the data

Only the providers I need to run the services, each for its own job:

• Vercel: hosting of the site (EU and US).
• Supabase: database (EU).
• Stripe: card payments; card details never reach me.
• Oblio: invoicing and e-Factura (Romania).
• Resend: sending emails; my own mail server receives your emails.
• Brevo: the newsletter list, only with your consent.
• Clerk: sign-in to the RankRadar dashboard.
• OpenAI, Anthropic, Google, Perplexity: AI reports and RankRadar checks.
• Firecrawl and Browserless: reading the public content of the website you ask me to scan.
• Telegram: a short notice to my phone when a request or an order arrives.
• Google Calendar and Google Meet: only for a paid project consultation you booked by email: name, email and time.
• Plausible and Vercel Web Analytics: visit statistics without cookies and without personal data.
• Authorities: only when the law requires it (for example ANAF).

6. How long I keep it

• Quote requests and emails: up to 2 years after our last exchange; I review the data once a year and delete what is older.
• Orders, contracts, invoices and payment records: 5 years, as Romanian accounting law requires (Law 82/1991). The proof of acceptance (date, IP, browser) is kept as long as the order.
• Free reports and tool answers: up to 12 months, so you can ask for them again; removed at the yearly review.
• RankRadar: while the subscription is active, and up to 12 months after it ends (so it can be resumed), except the billing records above.
• Data requests: a record of each export or deletion request (email, type, date), kept 3 years to prove it was handled.
• Newsletter: until you unsubscribe.
• Technical logs: up to 90 days.

7. Transfers outside the EU

Some providers above (for example Vercel, Stripe, Clerk, Resend and the AI providers) process data in the United States. These transfers rely on the EU-US Data Privacy Framework or on the Standard Contractual Clauses approved by the European Commission, as each provider offers them.

8. How the data is protected

• encrypted connections (HTTPS) everywhere;
• sign-in with two-factor authentication on every account that holds data;
• API keys kept encrypted, never in emails or forms;
• access only for me, and only to what each job needs.

9. Your rights

You can ask me for access to your data, correction, deletion, restriction, a copy in a structured format, and you can object to processing based on legitimate interest. Where processing relies on consent, you can withdraw it at any time. I answer within one month.

To export or delete your data yourself, use the data request page. Manage my data

Or write to contact@voicu.app. You can also complain to the Romanian data protection authority (ANSPDCP, www.dataprotection.ro).

10. Cookies

The site sets only the cookies it needs to work and counts visits without cookies. Cookie policy

11. Children

My services are for businesses and are not meant for people under 16.

12. Changes

When this policy changes, the new version is published here with its date. Important changes are announced by email to active customers.