Privacy Policy
Updated: 7 October 2026
How data is processed on the ADS Moldova website and app, in accounts, service requests and AI chat.
CNPDCP · Cookie Policy · Legal details
1. Operator and scope
ADS Moldova is managed by the operator identified below. This policy covers the website and Android app, which opens the same web platform. Preferences and the account may be shared with the browser used by the app.
A.I. AUGUSTIN NICOLAU
IDNO: 1026023042507
Email: adsmoldova77@gmail.com
+373 60 178 298
2. Data we use
Registration requires a name, email and password. Passwords are stored as hashes. Sessions may include IP addresses and browser information. Accounts hold associated service requests, carts, orders, subscriptions and rewards. For available online payments, we store the order reference, service and accepted offer, amount, currency, payment type (full payment or deposit), status and creation, update and confirmation timestamps. We also store technical PayPal order, capture and notification identifiers and a hash linking the order to the browser's payment session, including guest payments. We do not directly collect card numbers, CVVs or PayPal passwords. The account deletion form requests an email and optional details. Reporting an AI response sends the selected response, reason and explanation you provide. At checkout we request and save a name and contact email to begin work on the selected service.
3. Purposes and legal bases
Data needed for accounts, quotations, requested payments and project communication is used to provide the requested service or take precontractual steps. Technical payment data supports initiating and verifying payments, preventing repeated processing and displaying accurate confirmation. Optional audience measurement and advertising rely on your cookie choices. Abuse prevention and security rely on a legitimate interest in protecting the service and its users; you may request details and object. Applicable legal recordkeeping obligations may justify retaining relevant documents.
4. Cookies, analytics and advertising
Without consent, Google Analytics, Google Ads, Meta Pixel and Vercel Analytics do not load. Microsoft Ads UET is optional and starts only when configured and marketing is accepted. Analytics may record pages and contact clicks; marketing measures campaigns and conversions. With analytics consent, Google Analytics may receive checkout events and, only after server confirmation, a purchase event containing the order reference, service, amount, currency and payment type. These events do not include the customer's name, email, telephone number, card details or personal PayPal account information. A local marker reduces repeated reporting of the same purchase and is removed when analytics consent is withdrawn or site data is cleared. Payment works without analytics or marketing consent. Google Maps and YouTube are optional functional content. Categories can be accepted separately, rejected and withdrawn through Cookie settings. The versioned preference is stored for 180 days. The cookie policy explains storage and known durations.
5. AI chat and files
Your message, a limited number of previous messages and files you attach are sent to the AI provider to generate a response. AI Moldova and GPT use the OpenAI API; The DeepSeek option uses the DeepSeek API when configured and available. Conversation history stays in your browser until deleted in the interface or by clearing site data. Do not enter passwords, payment card details, identity documents or sensitive information about yourself or others. Automated answers may be incorrect and do not automatically determine access to a service or the exercise of a right. The relevant provider's processing and retention rules also apply to API requests.
6. Providers and recipients
Vercel hosts the application and private Blob storage for the CRM; the PostgreSQL database is hosted through Neon. Better Auth is an authentication library running on our infrastructure, not an assumed separate recipient. Google, Meta and, when enabled, Microsoft receive data for accepted categories. The provider configured for the selected AI feature, OpenAI or DeepSeek, receives the submitted content. For offers with online payment enabled, PayPal processes the payment and determines eligible methods, including cards where available. The PayPal interface loads after you request payment preparation. PayPal receives the order data needed for processing and the information you enter in its interface; full card details are not collected by ADS Moldova's form or server. PayPal's processing and storage policies also apply. Requests and payment records are accessible to the operator and authorised people handling them. There is no active newsletter signup form. When payment notifications are enabled, Resend sends the contact name and email, service, amount, date, order and transaction identifiers to adsmoldova77@gmail.com. Gmail receives this notification for the operator. We store notification content and sending status to prevent duplicates; card data is not sent.
7. External links and international transfers
When you choose WhatsApp, Telegram, Messenger, email or another external link, data sent there is also processed under that service's policy. A message prepared from the cart may include your name, email and selected services; you confirm sending in the external app. Infrastructure, AI and advertising providers may process data outside Moldova, including outside the EU/EEA. You may request information about recipients and applicable transfer safeguards. Exact regions, contractual terms and safeguards must be confirmed for each provider; we do not assume every transfer is automatically authorised.
8. Retention
Accounts and associated data are retained while needed to manage the account and requested services. Quotation enquiries and business correspondence that do not result in a contract have a retention period of 1 year from the last interaction. At the end of this period, the operator reviews the data for deletion or anonymisation. Data needed to perform contracts, meet legal obligations or resolve disputes is retained for as long as necessary for those purposes and in accordance with applicable statutory retention periods. Reports and requests to exercise data rights are retained to resolve them and document the response for as long as necessary for that purpose. For deletion requests we verify identity, assess exceptions and explain what is retained and why. Technical abuse counters use cryptographically derived IP identifiers without request content, with 10–60 minute windows; expired counters are removed on subsequent requests.
9. Security and device storage
We use HTTPS, protected sessions, access controls and request validation. No measure removes all risk. Language preferences, calculator state, AI conversations and PWA cache may remain on your device. On shared devices, sign out and delete conversations after use. Private pages and API requests are not intended for offline storage. Do not submit unnecessary documents in free-text fields.
10. Your rights
You may request access, rectification, erasure, restriction, object to processing and, where applicable, request portability. Consent may be withdrawn without affecting processing before withdrawal. Contact the operator and explain your request; we may ask only for information necessary to verify identity. You can download account-related data from your dashboard and request a copy of other data or corrections through the same address. The Delete account form works without the app. We respond within applicable legal deadlines.
11. Supervisory authority and legal framework
You can complain to Moldova's National Centre for Personal Data Protection (CNPDCP): 48 Serghei Lazo Street, Chișinău, MD-2004; centru@datepersonale.md; +373 22 820 801. Relevant national legislation includes Law No. 195/2024 on personal data protection and Law No. 72/2025 on electronic communications. GDPR and ePrivacy rules are additionally relevant when their application conditions are met, including for certain activities directed at people in the EU/EEA.
12. Minors and updates
Services are presented for businesses and projects. Registration does not request age and there is no technical age verification mechanism. For questions about a minor's data, contact the operator before sending more information. We update this page when features or providers change; material cookie changes trigger a new choice.