Privacy Policy

1. Introduction

Up 2 Date Software SRL(Tax ID: 25438988), hereinafter referred to as "Company", "we", or "WapIt", respects the privacy of its users and is committed to protecting the personal data we collect through the WapIt platform and related services.

This Privacy Policy explains what data we collect, how we use it, with whom we share it, and what rights you have regarding your personal data.

2. Data We Collect

2.1 Data you provide directly

• Account information: name, email address, phone number
• Business information: company name, business type, address
• Payment data: securely processed through Stripe (we do not store card details)
• Generated content: messages, appointments, orders created on the platform

2.2 Data collected automatically

• Technical data: IP address, browser type, operating system
• Usage data: pages visited, actions on the platform, timestamps
• Cookies and similar technologies (see dedicated section)

2.3 Data from third parties

• Data from WhatsApp Business API: phone numbers, messages sent/received
• Data from Stripe payment processor: payment status, confirmations

3. How We Use Your Data

We use the collected data to:

• Provide services: manage appointments, orders, and WhatsApp conversations
• Communications: notifications about appointments, reminders, service updates
• Billing: process payments and issue invoices
• Service improvement: analysis and platform optimization
• Customer support: respond to questions and resolve issues
• Legal compliance: fulfill legal obligations

4. Legal Basis for Processing

We process your data based on:

• Contract performance: to provide requested services
• Consent: for marketing communications (can be withdrawn at any time)
• Legitimate interest: to improve and secure services
• Legal obligations: to comply with applicable legislation

5. Data Sharing

We may share your data with:

• Meta (WhatsApp Business API): for messaging functionality
• Stripe: for payment processing
• Hosting providers: for platform hosting
• Authorities: when required by law

We do not sell your personal data to third parties.

6. Data Retention

We retain your data as long as necessary for the purposes described in this policy or as required by law:

• Account data: during service usage + 3 years
• Billing data: 10 years (legal requirement)
• Messages and conversations: 2 years or upon deletion request
• Technical logs: 1 year

7. Your Rights

Under GDPR, you have the following rights:

• Right of access: request a copy of your data
• Right to rectification: correct inaccurate data
• Right to erasure: request deletion of data ("right to be forgotten")
• Right to restriction: limit processing in certain situations
• Right to portability: receive data in a structured format
• Right to object: object to processing based on legitimate interest
• Right to withdraw consent: at any time, without affecting the lawfulness of prior processing

To exercise these rights, contact us at: privacy@wapit.ro

8. Data Security

We implement technical and organizational measures to protect data:

• SSL/TLS encryption for all communications
• Encrypted databases accessible only to authorized personnel
• Regular security monitoring and auditing
• Secure authentication and access control

9. Cookies

We use cookies for:

• Essential cookies: necessary for platform operation
• Performance cookies: to understand usage patterns
• Preference cookies: to remember your settings

You can manage cookie preferences in your browser settings.

10. International Transfers

Data may be transferred and processed in countries outside the European Economic Area (EEA), particularly in the USA, through our providers (Meta, Stripe). These transfers are protected by:

• Standard contractual clauses approved by the European Commission
• Appropriate certifications and guarantees from providers

11. Policy Changes

We reserve the right to update this policy. Significant changes will be communicated via email or through platform notification. We encourage you to check this page periodically.

12. Contact

For questions or requests related to personal data:

If you believe we process your data improperly, you have the right to file a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP) - www.dataprotection.ro