Privacy Policy
Last updated 5 October 2026
Draft. Some company details are still being added and are marked below.
This policy explains what personal data we collect through smartdecision.io, the live demos, the former waitlist, buying a license, downloading the software, and support, and what we do with it.
It does not cover the data inside your SmartDecision installation. SmartDecision runs on your own servers and sends nothing to us: no telemetry, no usage data, no decision data. For that data your organisation is the controller, and we have no access to it.
1. Who is responsible
The controller is WIN GRAVITY SRL, Romania, registered office Strada Dacia, nr. 1, Camera 1, 700259 Iași, Trade Register number [Trade Register number: to be added], tax identification number RO37233986. For anything about your personal data, write to support@smartdecision.io.
2. What we collect and why
| When | Data | Why, and legal basis |
|---|---|---|
| You visit the website | IP address and browser details in the hosting provider's logs; page views and page speed, without cookies | To deliver the site, keep it secure, and see which pages are used and how fast they load. Legitimate interest. |
| You try a live demo | The sample values you enter, sent to our demo server to calculate the result | To show the demo. Legitimate interest. The demos are built for sample data: please do not enter personal data. |
| You joined the waitlist (now closed) | Your email address and, if you answered it, which feature matters most to you | To tell you once that SmartDecision has launched, and to decide what to build first. Consent, which you can withdraw at any time. |
| You buy a license | Company legal name, VAT number, billing address, billing and technical contacts, payment status. Card details go to Stripe; we only see the card brand and last digits. | To sell and invoice the license, apply VAT, and keep accounting records. Contract and legal obligation. |
| We deliver your license | License id, plan, end date, the emails we send you and whether they were delivered | To send license keys, renewal keys, reminders before expiry, and security notices. Contract. |
| You download the software | License id, time, IP address, network operator, country, and the file downloaded | To deliver downloads and to notice license keys being shared beyond the license. Legitimate interest. |
| You email support | Your name, email address, and what you send us, including support bundles you choose to attach | To answer you. Contract, or legitimate interest if you are not a customer yet. |
We do not sell personal data, use it for advertising, or profile you. We send no marketing email. People who joined the former waitlist receive one email announcing the launch.
3. Cookies
smartdecision.io and get.smartdecision.io set no cookies and use no tracking scripts. Our website analytics count page views without cookies and without identifying you. When you pay, Stripe's checkout page sets its own cookies, mainly to prevent fraud; see Stripe's privacy policy.
4. Who processes data for us
We use these providers, each only for the purpose shown and under a data processing agreement:
| Provider | What for |
|---|---|
| Vercel | Hosting the website, its logs, and cookieless analytics |
| Web3Forms | Passing waitlist sign-ups to our inbox, until the waitlist closed |
| Stripe | Checkout, payments, subscriptions, invoices, and VAT calculation |
| Cloudflare | DNS, the download portal and its storage, receiving email, and securing our internal tools |
| Resend | Sending license and account emails |
| Neon | The database of customers and licenses, in the European Union (Frankfurt) |
| [server provider and country: to be added] | Hosting our internal license management tool |
| Google (Workspace) | Our email inboxes, including support |
Some of these providers are based in the United States or process data there. Those transfers rely on the EU-US Data Privacy Framework where the provider is certified, or on the European Commission's standard contractual clauses.
5. How long we keep it
- Website logs: as long as the hosting provider keeps them, a few weeks at most.
- Waitlist: deleted after the launch announcement, or earlier if you ask us.
- Customer, license, and invoice records: for as long as you are a customer, then as long as Romanian accounting and tax law requires.
- Download records: 12 months.
- Support emails: as long as needed to help you, and no longer than 3 years after the last message.
6. Your rights
You can ask us for a copy of your personal data, and to correct, delete, or restrict it, or to send it to you in a portable format. You can object to processing based on our legitimate interest, and withdraw consent at any time without affecting what happened before. Write to support@smartdecision.io; we answer within one month.
You can also complain to the Romanian data protection authority, the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (dataprotection.ro), or to the authority in the EU country where you live or work.
7. Security
Connections to our website, download portal, and internal tools are encrypted. Our internal tools require a login that only our team can complete, and every change to customer and license records is logged.
8. Changes
We update this policy when what we collect or the providers we use change. The date at the top shows the current version. If a change affects customers materially, we email them.