Assetify Privacy Policy
DRAFT — requires legal review before publication. Fields in square brackets are filled in by the client.
Last updated: [DATE]
Who we are
The data controller is [COMPANY NAME], registration number [NUMBER], with its registered office at [ADDRESS] ("we"). You can write to us at [CONTACT EMAIL].
What we process
- Your phone number and email address, one or both, used to sign in (no password, a code sent on WhatsApp or by email) and for messages about your account.
- What you add: asset names (for example "Car"), documents, expiry dates, reminder settings and document files or photos.
- Device data: an installation identifier, platform (iOS or Android), language, time zone and the notification token.
- Subscription data: whether you have Premium and until when. Payments are handled by Apple or Google; we never see card details.
- Your conversation with the assistant on WhatsApp: your messages and the assistant's replies, kept for 30 days, then deleted. The Assetify team's dashboard shows only how many there are, never what was written.
- Technical logs: requests to the server (without their content), kept for security and troubleshooting.
We do not use advertising and we do not sell data.
Why, and on what basis
- To provide the service (account, sync, reminders, sharing, Premium): performance of a contract (Art. 6(1)(b) GDPR).
- To protect the service against abuse: legitimate interest (Art. 6(1)(f)).
- To meet legal obligations, such as accounting: legal obligation (Art. 6(1)(c)).
Who we work with
- Railway — hosting of the server, database and files, in the Amsterdam data centre (EU).
- Amazon Web Services (Amazon SES) — sending email, from the Stockholm data centre (EU).
- Expo — delivering push notifications through Apple and Google.
- RevenueCat, Apple and Google — managing subscriptions.
- Meta (WhatsApp) — carrying the messages between you and the assistant.
- Anthropic — the AI model that writes the assistant's replies; it receives the text of the messages in order to answer.
- Google (Gemini API) — transcribes the voice messages sent to the assistant. We do not keep the audio file after transcription.
These providers process data only on our behalf, under data processing agreements. Transfers outside the EU rely on standard contractual clauses.
Sharing
When you share an asset, the people you invite see its documents, can add more and get the same reminders. They also see your name and your account's email address or phone number.
How long we keep data
For as long as you have an account. If Premium ends, whatever is over the free plan is deleted after 3 months, with warnings beforehand. When you delete your account in the app, your data is removed from the database immediately and files within [N] days. Database backups rotate within [N] days.
Your rights
You have the right of access, rectification, erasure (directly in the app, Account → Delete account), restriction, portability and objection. Write to us at [CONTACT EMAIL]. You may complain to the Romanian data protection authority (ANSPDCP, www.dataprotection.ro) or the authority where you live.
Children
Assetify is not intended for people under 16.
Security
Communication with the server is encrypted. Files are stored privately and are only downloaded through short-lived links after access is checked.
Changes
If we change this policy, we will tell you in the app before the changes take effect.