Privacy Policy

1. Introduction

Leanistic ("we", "the Company") respects the privacy of Rezolvat! platform users. This policy explains what data we collect, how we use it, and how we protect it, in accordance with the General Data Protection Regulation (GDPR) and applicable Romanian legislation.

2. Data Collected

We collect the following categories of data:

• Identification data: name, email address, organization name
• Operational data: problem reports, process descriptions, created standards
• Audio data: voice recordings of reports, automatically processed for transcription
• Usage data: access logs, IP addresses, device and browser type
• Financial data: payment information processed through Stripe (we do not store card data)

3. Purpose of Processing

We use collected data for:

• Providing and improving the Service
• Processing AI analyses based on your reports
• Account and payment management
• Service-related communications (notifications, updates)
• Compliance with legal obligations

4. Third-Party Processing and Artificial Intelligence

We do not use personal or user-submitted data to train models. We use models from external providers and have no control over whether they use your data.

External services used:

• Contabo - web hosting
• Cloudflare - file storage & security
• OpenAI - AI processing
• Google Gemini - AI processing

5. Data Sharing

We do not sell your data. We share data only with:

• AI service providers: OpenAI and Google Gemini (for analyses)
• Payment processors: Stripe (for financial transactions)
• Infrastructure providers: Contabo and Cloudflare
• Authorities: only when required by law

6. Data Security

We implement technical and organizational measures for data protection, including: data encryption in transit (TLS/SSL), data encryption at rest, role-based access control, audit logs for access monitoring, and regular backups.

7. Your Rights (GDPR)

Under GDPR, you have the right to:

• Access: request a copy of your personal data
• Rectification: correct inaccurate data
• Erasure: request deletion of your data ("right to be forgotten")
• Portability: receive your data in a structured format
• Objection: object to processing under certain conditions
• Restriction: request restriction of processing

To exercise your rights, contact us at [email protected]. We will respond within 30 days.