Privacy policy
Last updated: 8 October 2026
This policy explains which personal data we process when you use aiforge.ro, why we process it, how long we keep it and what your rights are under Regulation (EU) 2016/679 (GDPR).
1. Who we are
The data controller is AIForge. You can reach us about your data at any time via the contact form on aiforge.ro.
2. What data we process and why
| Situation | Data | Purpose | Legal basis |
|---|---|---|---|
| Contact form | name, email, estimated budget, message, site language | to reply and discuss the proposed project | steps taken at your request before a contract (Art. 6(1)(b)) |
| Client area account | name, email, password (stored only as an irreversible hash), language | to provide your account and access to your requests | performance of the service you asked for (Art. 6(1)(b)) |
| Requests and messages in the client area | request title and description, budget, messages exchanged with us, request status | to assess and follow up on your project | Art. 6(1)(b) |
| Account security | IP address and browser type linked to your session, sign-in attempts | protection against unauthorised access and abuse | our legitimate interest in keeping the site secure (Art. 6(1)(f)) |
| Email notifications | email address, notification content | to let you know when we reply or change the status of your request | Art. 6(1)(b) |
We do not use your data for advertising, we do not sell it, and we do not carry out profiling or automated decisions with legal effects on you. Please do not send sensitive data (health data, national ID numbers, bank details) through the form or in requests — we do not need it.
3. Cookies
We only use cookies that are strictly necessary for the site to work, which is why we do not ask for consent:
- session cookie — keeps you signed in to the client area; expires after at most 30 days or when you sign out;
- two-step verification cookie — temporary, at most 10 minutes, administrator accounts only;
- NEXT_LOCALE — remembers your language (Romanian/English) for one year.
We use no analytics or marketing cookies and load no third-party tracking scripts. Fonts are served by our own site.
4. Who receives the data
Data is accessible only to the AIForge team and to the providers that help us operate, acting as processors:
- Render (Render Services, Inc.) — hosting of the site and database, in the Frankfurt, Germany (EU) data centre;
- Cloudflare — DNS for the aiforge.ro domain;
- the email provider we use to send replies and notifications (for example Google Gmail or Resend).
Some of these providers are based outside the EU. In those cases transfers are protected by the European Commission’s standard contractual clauses or the EU–US Data Privacy Framework. We disclose data to authorities only when required by law.
5. How long we keep data
- contact form messages — at most 2 years after the last exchange, unless they turn into a project;
- client area account, requests and messages — while the account is active; deleted within 30 days of your request;
- sign-in sessions — at most 30 days; verification codes — 10 minutes;
- server technical logs — a short period set by the hosting provider, for security and troubleshooting.
If we sign a contract, contractual and financial documents are kept for the period required by law.
6. How we protect data
Connections to the site are encrypted (HTTPS), passwords are stored only as cryptographic hashes and service access keys are encrypted in the database. Administrator access is protected by two-step verification, and sign-in is rate-limited against repeated attempts.
7. Your rights
You have the right to request:
- access to your data and a copy of it;
- correction of inaccurate data;
- erasure of your data (“right to be forgotten”);
- restriction of processing;
- data portability, in a structured format;
- to object to processing based on our legitimate interest.
To exercise any of them, contact us via the contact form on aiforge.ro. We reply within one month. If you are not satisfied, you can lodge a complaint with the Romanian supervisory authority (ANSPDCP), www.dataprotection.ro, or with the authority in your EU country of residence.
8. Portfolio applications
The applications shown in the portfolio (e.g. Sfetnicul AI, Asistent Juridic AI, Murphy AI) are separate websites with their own privacy policies. This policy covers aiforge.ro only.
9. Children
The site is intended for businesses and adults. We do not knowingly collect data from people under 16.
10. Changes
When we change what data we collect or who receives it, we update this page and the date above. See also our Terms and conditions.