Privacy Policy

The data controller is Te Așteptăm SRL, based in Bucharest, Romania. Contact email: gdpr@teasteptam.ro.

Account data: name, email address, encrypted password.

Event data: information about the event (date, venue, type), invitation content (texts, music).

Guest data: the names and contact details of the guests you upload (email, phone), plus their RSVP replies.

Payment data: we do not store card data. Payments are processed by Stripe, which holds its own PCI DSS certification.

Technical data: IP address, browser type, pages visited — for security and to improve the service.

• Performance of the contract — to provide you with the digital invitation service
• Legitimate interest — platform security, fraud prevention, improving features
• Consent — marketing communications (newsletter), if you explicitly subscribed
• Legal obligation — keeping financial records as required by Romanian law

Account data is kept for as long as the account exists + 30 days after deletion. Billing data is kept for 10 years under Romanian tax law. Guest data is deleted 90 days after the invitation expires, unless you delete it sooner.

• Right of access — you can request a copy of your data
• Right to rectification — you can correct inaccurate data directly from your account
• Right to erasure — you can request deletion of your data (except data we are legally required to keep)
• Right to portability — you can export your data in JSON/CSV format
• Right to object — you can withdraw consent for marketing at any time

To exercise your rights, contact gdpr@teasteptam.ro. We reply within 30 days at most.

We work with the following service providers:

• Stripe — payment processing (USA, Privacy Shield)
• Resend — transactional email delivery
• Vercel — infrastructure hosting (EU/USA)

We do not sell or rent your data to anyone.

All communications are encrypted via HTTPS/TLS. Passwords are stored with bcrypt. Access to data is strictly limited to authorised staff.

You have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) — dataprotection.ro.