Privacy Policy

1. Data controller

Flovoice SRL, registered at Str. Stadionului Nr. 4D, Sc. 2, Ap. 2, Florești, Cluj County, 407280, Romania, is the controller of personal data for the sms-florin platform. You can contact us at [email protected].

2. What data we collect

• Account data: email address, password (stored encrypted, never in plain text);
• Transaction data: the history of payments, rentals, and commissions on your account;
• Technical data: IP address and session information, collected automatically by the server for security purposes;
• Partner data (if you connect a device): the SIM card's phone number, country, and carrier.

We do not collect bank card data — this is processed directly by Stripe and never reaches our servers.

3. How we use your data

• to provide you with the service (authentication, rentals, payments);
• to prevent fraud and abuse;
• to send you transactional emails (account confirmation, password reset) — we never send marketing without your explicit consent.

4. Who we share data with

We use the following providers (sub-processors) to operate the Platform:

• Stripe — payment processing;
• Resend — sending transactional emails;
• Hetzner Online GmbH — server hosting (Germany);
• Cloudflare — DNS, attack protection, and bot verification (Turnstile);
• Sentry — error monitoring, to detect and fix technical issues (may process your IP address and browser information when an error occurs).

We do not sell or rent your data to third parties for marketing purposes.

5. How long we keep your data

We keep account data for as long as the account is active, plus the period required to meet legal obligations (e.g. tax records). You can request deletion of your account at any time, as described in the section below.

6. Your rights (GDPR)

Under the General Data Protection Regulation, you have the right to:

• access your personal data;
• rectify inaccurate data;
• erase your data (the "right to be forgotten");
• data portability;
• object to processing, under certain conditions.

To exercise these rights, write to us at [email protected].

7. Cookies

We use a single essential cookie, required for authentication (to keep your login session). It is httpOnly and secure, and we do not use tracking or advertising cookies.

8. Security

Passwords are encrypted with bcrypt, connections are secured via HTTPS/TLS, and server access is restricted through SSH keys and a firewall.

9. Changes

We may update this policy periodically. Significant changes will be communicated by email or via an announcement on the Platform.