Privacy Policy

1. Data Controller

The data controller is Monitive COM SRL, registered number CUI 27263785, J35/1246/2010 (founded 2010), with registered address at Str. Armoniei 23A, Tronson T3, Scara 3, Ap. 5, Timișoara, 300291, Timiș, Romania, operating under the laws of Romania.

Contact for data protection matters: hello@monitive.com

2. Personal Data Collected

The following categories of personal data are collected or generated when you use this site:

• Contact information provided on order or sample request: name, work email address, company name, job role.
• Situation description: free-text input you submit through the AI matchmaker or sample request form describing your professional context.
• IP address and request metadata: collected server-side for security, audit, and abuse prevention. Not used for tracking or advertising.

3. Purposes of Processing

• Matching your described situation to the appropriate service offering.
• Sending order confirmations, sample delivery, and engagement-related communications.
• Fulfilling the engagement once a signed engagement letter is in place.
• Maintaining records required by law (accounting, tax, legal obligations).
• Detecting and preventing abuse of the AI matchmaker or order inbox.

4. Lawful Bases

• Art. 6(1)(b) GDPR - Contract performance: processing your contact information and order details is necessary to respond to your request and, where a signed engagement letter follows, to perform the contract.
• Art. 6(1)(f) GDPR - Legitimate interest: using your situation description to run AI-assisted service matching is a legitimate interest. You may object to this processing at any time (see Section 7).
• Art. 6(1)(c) GDPR - Legal obligation: retaining order records for the periods required by tax and commercial law.

5. Third-Party Processors

The following sub-processors may receive your personal data strictly for the purposes described:

6. Retention Periods

• Order records (contact details, engagement scope, pricing): retained for 7 years from the end of the engagement to satisfy legal and tax obligations.
• AI conversation logs: the situation description you enter is passed to OpenRouter for matching and is not stored server-side beyond the request lifecycle.
• Email delivery logs: retained per Resend's published data retention policy; we do not maintain a separate copy.
• IP and request logs: retained for up to 90 days for security purposes, then deleted.

7. Your Rights

Under GDPR Articles 15-22 you have the right to:

• Access the personal data held about you (Art. 15).
• Rectification of inaccurate data (Art. 16).
• Erasure ("right to be forgotten") where processing is no longer necessary (Art. 17).
• Restriction of processing in specified circumstances (Art. 18).
• Data portability for data processed on the basis of consent or contract (Art. 20).
• Objection to processing based on legitimate interest, including the AI matching (Art. 21).

To exercise any right, send an email to hello@monitive.com. Requests will be acknowledged within 72 hours and resolved within 30 days, with one possible 60-day extension for complex requests.

8. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority. Where Romania is Romania, the competent authority is the National Supervisory Authority for Personal Data Processing (ANSPDCP), www.dataprotection.ro. In all other cases, contact your local Data Protection Authority.

9. International Transfers

OpenRouter may route inference requests to large-language model providers whose infrastructure is located in the United States. Where such transfers occur, they are conducted under appropriate Standard Contractual Clauses (SCCs) as adopted by the European Commission, or equivalent transfer mechanisms. You can request a copy of the relevant safeguards by contacting us at hello@monitive.com.

10. Cookies & Local Storage

This site does not set advertising or cross-site tracking cookies and does not share data with advertising platforms. The only client-side state we use is:

• chat_verified - a short-lived (1 hour), HMAC-signed, HttpOnly cookie scoped to /api/match. It records the fact that you completed the Cloudflare Turnstile bot-check on your first chat message so subsequent messages in the same session don't re-prompt. Contains only an expiry timestamp + signature - no identifier, no email.
• chat_lead - a 7-day, HMAC-signed, HttpOnly cookie scoped to /api/match. It records that we've already sent the operator a "new chat lead" notification for this browser so a long conversation doesn't produce duplicate emails. Contains only an expiry timestamp + signature - no identifier, no email.
• localStorage["chat_lead_email"]- if you typed your email into the chat, it is cached in your browser's local storage so the order drawer can pre-fill it later. Browser-only, never transmitted automatically; cleared from your browser settings at any time.
• Umami Cloud analytics (see Section 5) - cookieless. No identifiers are stored on your device by the analytics layer.

None of the above are used for advertising, profiling, or cross-site tracking. You can clear them via your browser settings at any time; doing so will not affect your ability to use the site (it will only re-prompt the Turnstile check on next chat).

11. Updates to This Policy

Material changes to this policy will be reflected in an updated version date at the top of this page. For significant changes affecting your rights or the purposes of processing, we will notify you via email where we hold your contact details.