Privacy policy

Who is responsible

The controller for personal data processed on this website is WOLFITWAYAGENCY S.R.L., Remetea Mare nr. 41, Timiș County, Romania, VAT RO47341942, trade register J35/5748/2022. Contact us about anything in this policy at dan@wolfitway.com.

What we collect and why

• Contact form, project brief and booking: name, email, company and your message or meeting details, so we can reply and run the call. Legal basis: steps before a contract (Art. 6(1)(b) GDPR).
• Account and sign-in: email, name and, if you use Google sign-in, your Google profile name and picture. Used to log you in. Legal basis: contract (Art. 6(1)(b)).
• Newsletter: your email and the date you subscribed. Sent only with your consent, which you can withdraw with the link in every email (Art. 6(1)(a)).
• Hero Analyzer: the website address you submit, screenshots and text of that public page, the report, and your email if you unlock or buy the full audit. Used to produce and deliver the audit (Art. 6(1)(b)).
• Payments: handled by Stripe. We receive the payment status, amount and your email, never your card details (Art. 6(1)(b) and our legal accounting duties, Art. 6(1)(c)).
• Chat assistant and voice navigation: your messages, and voice recordings which are transcribed on our own server and not kept. Used to answer you (Art. 6(1)(f), our interest in helping visitors).
• Security: a salted hash of your IP address, kept briefly to stop abuse (rate limiting). Legal basis: legitimate interest in protecting the service (Art. 6(1)(f)).

Analytics without cookies

We run our own privacy-friendly analytics. It stores no IP addresses, no browser fingerprints and no cookies. Visits are counted with a hash that changes every day and cannot be linked back to you. If your browser sends Do Not Track or Global Privacy Control, nothing is recorded.

Cookies

We only set one strictly necessary cookie, the session cookie that keeps you logged in, and only after you sign in. Your theme choice is kept in your browser's local storage. Neither is used for tracking, so no consent banner is needed.

Who else processes your data

We use these service providers, under data processing agreements:

• Hetzner Online GmbH (Germany), which hosts our servers and database in the EU.
• Resend, to send emails.
• Stripe, to take payments.
• Google, only if you choose Google sign-in.
• AI model providers (such as Anthropic, OpenAI, DeepSeek or OpenRouter), which receive chat messages and the page content of submitted Hero Analyzer audits so they can generate answers and reports. They do not receive your contact details.

Some of these providers are outside the European Economic Area. Transfers are covered by the European Commission's adequacy decisions (such as the EU-US Data Privacy Framework) or Standard Contractual Clauses.

How long we keep it

• Enquiries and booking details: up to 3 years after our last contact, unless they become part of a contract.
• Invoices and payment records: 10 years, as Romanian accounting law requires.
• Newsletter: until you unsubscribe.
• Hero Analyzer audits: until you ask us to delete them, at most 2 years.
• Rate-limit records: 2 days.

Your rights

You can ask to see, correct, delete or export your data, restrict or object to processing, and withdraw consent at any time. Email dan@wolfitway.com and we will reply within one month. You can also complain to the Romanian data protection authority, ANSPDCP (dataprotection.ro).

We do not sell your data and we make no automated decisions that have legal effects on you.