Privacy Policy

Dalexor, a company registered in Romania (CUI: 37851685, Registration Number: J05/1822/2017, Registered Office: Strada Episcop Ioan Alexi nr 16, Oradea, Bihor County, 410130, Romania), is committed to protecting and respecting personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered platform ("the Service").

By using our Service, you agree to the collection and use of information in accordance with this policy. This policy complies with the EU General Data Protection Regulation (GDPR) and applicable Romanian data protection laws.

1. Information We Collect

1.1 Personal Information

When you register an account, we collect:

• Full name and email address (for account creation and authentication)
• Encrypted password (stored using bcrypt hashing)
• Company information (optional, for business accounts)
• Billing information processed securely through Paddle

1.2 Technical and Usage Data

We automatically collect certain information when you use our service:

• IP address and geolocation data (for security and compliance)
• Browser type, operating system, and device information
• Pages visited, time spent, and interactions within the platform
• Projects created and AI analyses performed
• RSS feeds monitored and public content analyzed
• Usage patterns and feature interactions
• AI analysis prompts and generated content

2. Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to provide our service (account management, AI analysis, billing)
• Legitimate Interest: Fraud prevention, service improvement, and security monitoring
• Legal Obligation: Compliance with tax, accounting, and legal requirements
• Consent: Marketing communications (where applicable, with opt-out option)

3. How We Use Your Information

We use the information we collect to:

• Provide and maintain our service
• Process your transactions
• Send you service updates and notifications
• Respond to your comments and questions
• Analyze usage patterns to improve our service
• Detect and prevent fraud

4. Data Storage and Security

Your data is stored on servers located within the European Union through Supabase, which provides enterprise-grade security and is GDPR compliant.

We implement industry-standard security measures including:

• All passwords are hashed using bcrypt - we never store plain-text passwords
• All data transmission is encrypted using SSL/TLS
• Regular security audits and monitoring
• Access controls and authentication mechanisms

Data Breach Notification: In the event of a data breach affecting your personal data, we will notify you via email within 72 hours and inform the relevant supervisory authority as required by GDPR.

5. Third-Party Services and International Data Transfers

We use the following third-party services:

• Supabase (EU-based): Database and authentication - data stored in EU
• Groq (or alternative AI providers): AI analysis of publicly available Reddit content. Only public Reddit posts/comments retrieved via RSS feeds are sent to Groq for analysis. No personal user data, passwords, or authentication credentials are shared with AI providers.
• Resend: Email notifications
• Paddle: Payment processing - GDPR compliant

International Data Transfers: When we transfer data outside the EU ( such as to AI processing services), we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission. Note: Only publicly available Reddit content and your project descriptions are processed by AI services - never your personal account data.

5A. Processing of Public Data

Our service analyzes publicly available Reddit content accessed through RSS feeds. This content:

• Is already public and freely accessible on the internet
• Does not require Reddit authentication to access
• Does not include any of your personal Reddit account information
• Is processed solely to provide AI-generated business insights

We do not access, store, or process any private Reddit messages, account credentials, or non-public user information.

6. Your Rights (GDPR)

Under GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate data
• Erasure: Request deletion of your data
• Portability: Export your data in a machine-readable format
• Restriction: Limit how we process your data
• Objection: Object to certain types of processing

You can exercise these rights from your account settings page or by contacting us at support@dalexor.com. We will respond to your request within 30 days.

Withdrawal of Consent: Where processing is based on consent, you have the right to withdraw consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.

Right to Lodge a Complaint: You have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) at www.dataprotection.ro or with your local data protection authority.

7. Data Retention

7.1 Retention Periods

We retain your data for the following periods:

• Account Data: Retained while your account is active
• Public Reddit Content: Temporarily processed for analysis, not permanently stored
• AI Analysis Results: Retained for 12 months or until account deletion
• Usage Logs: Retained for 90 days for security and analytics
• Deleted Accounts: Data retained for 30 days after deletion for recovery

We may retain certain data longer where required by Romanian law, EU regulations, or to resolve disputes and enforce our agreements.

8. Cookies and Tracking

We use essential cookies to maintain your session and remember your preferences. Specific cookies used:

• Session Cookie: Maintains your login state (expires when you close browser)
• Preference Cookie: Remembers your settings (expires after 1 year)

We do not use tracking cookies or third-party advertising cookies. IP addresses are considered personal data and are processed for security and fraud prevention purposes only.

9. Automated Decision-Making

Our AI analysis tools provide recommendations and insights, but do not make automated decisions that significantly affect you without human oversight. You maintain full control over how you use AI-generated content.

10. Marketing Communications

We will only send you marketing communications if you have opted in. You can opt out at any time by:

• Clicking the unsubscribe link in any marketing email
• Updating your preferences in account settings
• Contacting us at privacy@dalexorpaysrl.ro

11. Business Transfers

If Dalexor is involved in a merger, acquisition, or sale of assets, your personal data may be transferred. We will provide notice before your data is transferred and becomes subject to a different privacy policy.

12. Children's Privacy

Our service is not intended for children under 13. We do not knowingly collect personal information from children under 13.

13. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes, we will notify you via email at least 30 days before the changes take effect. Your continued use of the service after the effective date constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at:
Dalexor
CUI: 37851685
Registration Number: J05/1822/2017
Email: support@dalexor.com
Address: Strada Episcop Ioan Alexi nr 16, Oradea, Bihor County, 410130, Romania

Supervisory Authority: Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)
Website: www.dataprotection.ro