1. Who we are
This Privacy Policy is issued by Cedatex-IT, a software development company based in the Republic of Moldova ("Cedatex-IT", "we", "us" or "our").
We are the data controller for the personal data described in this policy. You can contact us about any privacy matter at cedatexit@gmail.com.
2. Scope of this policy
This policy applies to:
- our website at https://it.cedatex.md (the "Website");
- the mobile applications we publish under our own name on the Apple App Store and Google Play (the "Apps");
- any related support, communication and online services that link to this policy (together, the "Services").
An individual App may have a short supplementary notice describing data specific to that App. If there is a conflict, the supplementary notice applies to that App.
Apps and platforms we build for clients. When we develop software for another company and it is published under that company's name, that company is the data controller and its own privacy policy applies. In those cases we act only as a processor, following the client's instructions.
3. Personal data we collect
a) Data you give us
- Contact and inquiry data: your name, email address, phone number, company and the content of your message when you contact us or send a project request.
- Account data (in Apps that have accounts): your name, email address or phone number, password (stored only in hashed form), profile picture and settings. If you use "Sign in with Apple" or "Sign in with Google", we receive only the identifier and details you choose to share.
- User content: text, photos, files or other content you choose to create or upload in an App.
- Support data: the information you give us when you ask for help, including screenshots and device details.
b) Data collected automatically
- Technical data: IP address, browser type, device model, operating system version, language, app version and time zone.
- Usage and diagnostic data: the pages or screens you view, the features you use, crash reports and performance data. We use this to keep the Services working and to improve them.
- Push notification token: if you allow notifications, we receive a token from Apple Push Notification service or Firebase Cloud Messaging so we can send you notifications.
c) Data accessed only with your permission
Some App features may ask for access to your camera, photo library, location, microphone or contacts. We ask for this access only when a feature needs it, use it only for that feature, and you can withdraw it at any time in your device settings.
d) Payments
Purchases and subscriptions in our Apps are handled by Apple (App Store) or Google (Google Play). We never receive or store your full card details. We receive only confirmation of the purchase (for example, the product purchased and a transaction identifier) so that we can unlock the content.
e) Cookies on this Website
This Website does not use advertising or cross-site tracking cookies. It stores your language choice in your browser so the site opens in your language next time. Our hosting provider may process strictly necessary technical data (such as server logs) to deliver the site securely. If we introduce analytics in the future, we will update this policy and, where the law requires it, ask for your consent first.
4. How we use your data and legal bases
We process personal data only when we have a lawful basis to do so:
| Purpose | Legal basis |
|---|---|
| Providing the Services, creating and managing your account, delivering App features | Performance of a contract |
| Replying to your inquiries and support requests, preparing offers | Steps taken at your request before a contract / legitimate interest |
| Security, fraud prevention, debugging and crash analysis | Legitimate interest in keeping the Services safe and working |
| Improving the Services using aggregated usage statistics | Legitimate interest / consent where required |
| Sending push notifications and marketing messages | Consent (you can withdraw it at any time) |
| Accounting, tax and responding to lawful requests | Legal obligation |
We do not sell your personal data. We do not use it for automated decisions that have legal or similarly significant effects on you.
5. Tracking and advertising
We do not track you across apps and websites owned by other companies for advertising purposes. If an App ever needs to do so, we will first ask for your permission through Apple's App Tracking Transparency prompt on iOS and through the consent controls required on Android. You can change your choice at any time in your device settings.
6. Who we share data with
We share personal data only in these cases:
- Service providers that process data on our behalf under a written contract, such as cloud hosting, databases, email delivery, crash reporting and analytics (for example Google Firebase), and customer support tools.
- Platform providers: Apple and Google, when you download Apps, make purchases, sign in with their accounts or receive push notifications. Their own privacy policies apply.
- Authorities, when the law requires it or when it is needed to protect our rights, your safety or the safety of others.
- Business transfers: a successor, as part of a merger, acquisition or sale of assets. The successor must continue to protect your data under this policy.
Third-party SDKs used in a specific App are listed in the App's privacy disclosures on the App Store ("App Privacy") and on Google Play ("Data safety").
7. International transfers
Some of our service providers may process data outside the Republic of Moldova, for example in the European Union or the United States. When this happens, we use appropriate safeguards, such as standard contractual clauses or equivalent mechanisms recognised by the applicable data protection law.
8. How long we keep data
- Account data and user content: for as long as your account is active. When you delete your account, we delete this data or make it anonymous within 30 days, unless the law requires us to keep it longer.
- Inquiries and support messages: up to 24 months after our last contact with you.
- Server logs and crash reports: usually up to 90 days.
- Accounting records: for the period required by tax and accounting law.
9. Your rights
Depending on the law that applies to you, you have the right to:
- ask for access to your personal data and receive a copy of it;
- ask us to correct inaccurate or incomplete data;
- ask us to delete your data (the "right to be forgotten");
- ask us to restrict how we process your data, or object to processing based on legitimate interest;
- receive your data in a portable, machine-readable format;
- withdraw your consent at any time, without affecting processing that took place before you withdrew it;
- lodge a complaint with a supervisory authority.
To exercise these rights, email cedatexit@gmail.com. We will respond within 30 days. We may ask you to confirm your identity first.
In the Republic of Moldova, the supervisory authority is the National Center for Personal Data Protection (NCPDP). If you live in the European Economic Area, you may also contact the data protection authority in your country.
10. Deleting your account
You can delete your account and the data linked to it at any time:
- In the App: go to Profile → Settings → Delete account;
- On the web: follow the steps on our account deletion page;
- By email: write to cedatexit@gmail.com from the email address registered to your account.
Deleting your account does not cancel subscriptions bought through Apple or Google. Please cancel those in your App Store or Google Play subscription settings.
11. Children
Our Services are not directed at children under 13, or under 16 where local law sets a higher age of consent. We do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.
12. Security
We use appropriate technical and organisational measures to protect personal data. These include encryption in transit (HTTPS/TLS), encryption of sensitive data at rest, access controls based on the principle of least privilege, regular backups, monitoring and staff confidentiality obligations. No method of transmission or storage is 100% secure, but we work continuously to protect your information.
13. Changes to this policy
We may update this policy from time to time. We will publish the new version on this page and update the "Last updated" date. If the changes are significant, we will also notify you in the App or by email.
14. Contact us
Cedatex-IT · Republic of Moldova · Email: cedatexit@gmail.com