Privacy Policy
1. Controller
Data controller: COOL BITS S.R.L. (Romania)
Contact: office@coolbits.ai
Registered address: Jud. Iași, mun. Iași, str. Columnei, nr.14, bl.K4, et.4, ap.19, Romania
2. What data we process
- Account data: identifiers needed for authentication and account management (e.g., email address, user ID, basic profile fields).
- Workspace/client context: workspace membership, active client selection, settings and preferences.
- Chat and run data: messages, prompts, generated outputs, traces, workflow execution metadata.
- Connector data: metadata and reporting data retrieved from connected services (e.g., Google Ads / GA4) within the permissions you grant.
- Technical data: logs and security events (IP address, timestamps, request metadata) needed to operate and protect the Service.
3. Purposes and legal bases (GDPR)
- Provide the Service (account, sessions, workspaces, runs) - performance of a contract.
- Security and abuse prevention - legitimate interests.
- Connector operations (fetching data from connected services) - performance of a contract and your instructions.
- Support and communications - legitimate interests; in some cases your consent.
4. OAuth and connected Google services
If you sign in with Google or connect Google services (e.g., Ads/GA4), we process OAuth tokens and authorized data strictly to provide connector functionality. You can revoke access from your Google account settings and/or disconnect within the Service where available.
5. Processors and sub-processors
We use service providers ("processors") to operate the Service. Depending on your usage, this may include:
- Cloudflare for edge routing, security, and caching.
- Infrastructure hosting used to run the Service backend and databases.
- Google services when you use Google OAuth/connectors, and when AI functionality uses Google Cloud infrastructure.
6. International transfers
Where processors operate outside the EEA, transfers may occur under appropriate safeguards (such as standard contractual clauses) where required.
7. Retention
We retain personal data only as long as needed to provide the Service, meet legal obligations, resolve disputes, and enforce agreements. You may request deletion of your account and associated data.
8. Your rights
You may have rights to access, rectification, deletion, restriction, objection, and data portability, subject to applicable law. To exercise rights, contact office@coolbits.ai.
You may also lodge a complaint with your supervisory authority. In Romania, the supervisory authority is ANSPDCP.
9. Cookies and local storage
The Service uses strictly necessary cookies and/or local storage for sessions, authentication state, and security. Disabling them may prevent the Service from functioning.
10. Changes
We may update this policy to reflect changes in the Service. We will post the updated version on this page.
11. Contact
Privacy questions: office@coolbits.ai