Privacy & Cookie Policy

How DataFlux Software collects, uses, and protects your data — and exactly what cookies we set.

1. Who we are

DataFlux Software (operated by Gazolin Production SRL) is an AI voice agent and chatbot development agency registered in Romania, European Union.

Contact: viktor@datafluxsoft.com · Baia Mare, Romania.

For the purposes of the EU General Data Protection Regulation (GDPR), we are the data controller for personal data collected through this website.

2. What data we collect

We collect only the minimum data needed to operate the site and respond to inquiries.

2.1 Information you give us

• Contact form / email: name, email address, company, message content — only when you reach out to us directly.
• Resource download form: email address only, when you ask for a checklist, matrix, or reference architecture. See section 4.
• Voice agent demo: if you interact with the embedded ElevenLabs voice agent, audio is processed by ElevenLabs Inc. for the duration of the conversation. See ElevenLabs Privacy Policy.

2.2 Information collected automatically

• Analytics (Matomo, with your consent): anonymized IP, browser, device type, pages viewed, referrer, language. See cookie table below.
• Server logs: standard web-server access logs (IP, timestamp, URL, user-agent), retained up to 30 days for security and abuse prevention.

3. How we use it

• To reply to your inquiry and provide the services you request.
• To understand how the site is used, so we can improve content and performance (analytics only with consent).
• To protect the site against abuse, fraud, and security incidents (server logs, legitimate interest under Art. 6(1)(f) GDPR).

We do not sell your data, do not use it for advertising profiling, and do not share it with marketing networks.

4. Downloadable resources and marketing email

Some pages offer a document — a checklist, a compatibility matrix, a reference architecture — behind a short form that asks for your email address.

• What we store: the email address you type, which document you asked for, the page you asked from, the interface language, and the date and time you ticked the consent box. Nothing else — these forms have no name or company field and set no tracking pixel.
• Legal basis: your consent, Art. 6(1)(a) GDPR. The consent box is unticked by default and the form will not submit until you tick it. The document appears on screen immediately after you submit, so you are never made to open an email to get what you came for.
• What we send: a copy of the document you requested, and occasionally other material on the same topic. Every message carries an unsubscribe link. We do not send unrelated promotions and we do not pass your address to anyone else.
• How it reaches us: the form posts to a Cloudflare Worker, which validates the input at the network edge and forwards it to our own CRM at crm.datafluxsoft.com, hosted on our EU infrastructure. Cloudflare acts as a processor and may log the request IP; see Cloudflare's privacy policy.
• Withdrawing consent: use the unsubscribe link in any message, or email viktor@datafluxsoft.com and we will delete the record. Withdrawal does not affect processing that already took place lawfully.

5. Cookies we set

We use a minimal, consent-based cookie setup. Strictly necessary cookies are always active; analytics cookies require your explicit consent and can be revoked at any time.

6. Third-party services we use

• ElevenLabs (voice agent widget) — processes audio when you interact with the voice demo. Privacy policy.
• Google Fonts — serves DM Sans and JetBrains Mono. May log IP for delivery.
• jsDelivr CDN — delivers the cookie consent script. May log IP for delivery.
• Matomo — self-hosted by us, no third-party sharing.
• Cloudflare Workers — validates resource-download form submissions at the network edge before they reach our CRM. May log the request IP. Privacy policy.

7. Where data is stored

All servers and analytics infrastructure are located in the European Union (Romania / Germany). Email inquiries are processed via standard EU-based email infrastructure.

8. How long we keep it

• Inquiry emails: retained as long as the business relationship is active, plus up to 3 years for accounting and legal compliance.
• Analytics data: 13 months max, then automatically purged.
• Server logs: up to 30 days.
• Resource-download email addresses: retained until you unsubscribe or ask us to delete the record.

9. Your rights under GDPR

You have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate data.
• Erase your data ("right to be forgotten").
• Restrict or object to processing.
• Data portability — receive your data in a machine-readable format.
• Withdraw consent at any time, without affecting prior lawful processing.
• Lodge a complaint with a supervisory authority (in Romania: ANSPDCP — dataprotection.ro).

To exercise any of these rights, email viktor@datafluxsoft.com. We respond within 30 days.

10. Security

We use HTTPS site-wide, modern TLS, and standard infrastructure hardening. No system is 100% secure — if you believe your data may have been compromised, please contact us immediately.

11. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top reflects the latest revision. Significant changes will be highlighted on the site.

12. Contact

Questions about privacy, data, or this policy?
Email: viktor@datafluxsoft.com
Mail: DataFlux Software, Baia Mare, Romania.