Privacy policy

The DoozUp platform is operated by Media Serv SRL, VAT RO16059292, registered office in Șelimbăr, 43/1 Doamna Stanca St., Sibiu county, Romania (“DoozUp”, “we”). You can write to us at any time at contact@doozup.com. Data protection officer: [name / “not appointed”].

• Visitors of the DoozUp website and people who write to us through the contact form.
• DoozUp customers: the companies that create an account and their team members (administrators, operators).
• Visitors of our customers' shops who talk to DoozUp Assistant.

• For account, billing and contact data, DoozUp is the controller.
• For conversations in a shop's chat, the shop is the controller and DoozUp is the processor, acting only on the shop's instructions under the Data processing agreement (DPA). If you talked to the assistant on a shop's website, contact the shop first; we will help too if you write to us.

• Account data: name, e-⁠mail, password, passkeys, panel language, sessions open on other devices and team members invited by e-⁠mail.
• Billing data: the company details printed on invoices, subscription and credit orders, payments and their status, invoices.
• Usage data: credits used per day and per kind of use, the log of actions in the panel, technical connection data (e.g. IP address, browser).
• Messages sent to us: name, e-⁠mail, company (optional), topic and message from the contact form or by e-⁠mail.
• Shop chat conversations: written messages, voice messages and live voice calls, photos the visitor sends, contact details the visitor chooses to give, delivery details for chat orders, return, complaint and quote requests (with photos and the order number).
• Virtual try-⁠on (add-⁠on): the photo the visitor uploads and the resulting image.
• Cookies: described in the Cookie policy.

We do not ask for sensitive data (health, religion and so on). Please don't share it in the chat.

• To provide the service (account, apps, credits, support): performance of the contract accepted when the account is created.
• Billing and accounting: legal obligation.
• Security (sessions, action log, preventing abuse): legitimate interest.
• Replying to your messages: legitimate interest or steps before entering a contract.
• Reports sent to the customer (e.g. the daily e-⁠mail report): performance of the contract.
• Shop conversations: on the basis chosen by the shop, as controller.
• Marketing messages: only with your consent, which you can withdraw at any time. [to confirm whether we send such messages]

Chat answers are generated by AI from the shop's content (catalogue, pages, documents). Visitors know they are talking to an AI assistant and can ask for a person at any time. The AI can make mistakes, and its answers are not automated decisions with legal effects on anyone. To generate answers, voice and images we use AI model providers: [provider names and country].

• Chat conversations: deleted automatically after the plan period (12 months).
• Virtual try-⁠on photos: deleted automatically after 7 days.
• Account data: while the account is open and for [period] after it is closed.
• Invoices and accounting records: as long as the law requires [to fill in: legal term].
• Messages sent to us: [period].
• Action log and technical data: [period].

We never sell personal data. We share it only as far as needed with:

• hosting and infrastructure providers: [names];
• AI model providers: [names];
• the card payment processor: [name];
• the e-⁠mail delivery service: [name];
• the customer shop, for conversations held on its website;
• public authorities, when the law requires it.

Every provider is bound by written confidentiality and security obligations.

[To fill in: whether any transfers happen, to which countries and with which safeguards, e.g. the European Commission's standard contractual clauses.]

• encrypted connections (HTTPS / TLS);
• every account and every website keeps its own data, separately;
• team roles and access (administrators, operators);
• passkey sign-⁠in and the open sessions visible from the account;
• a log of the actions taken in the panel;
• personal data (GDPR) settings in the panel, for each website.

More on the Security and compliance page.

You have the right to:

• know what data we hold about you and get a copy;
• have it corrected;
• have it erased;
• restrict its processing;
• receive it in a portable format;
• object to processing based on legitimate interest;
• withdraw your consent at any time, without affecting earlier processing.

Write to us at contact@doozup.com. We reply within one month. You may also lodge a complaint with the Romanian data protection authority (ANSPDCP), www.dataprotection.ro, or with the authority in your country.

DoozUp is a service for businesses. We do not knowingly collect data from children under [age]. [To fill in for shop visitors.]

We may update this policy. The date of the last update is shown at the top of the page. For important changes we notify customers in their account or by e-⁠mail.

Media Serv SRL · VAT RO16059292 · Șelimbăr, 43/1 Doamna Stanca St., Sibiu county, Romania · contact@doozup.com · www.doozup.com

See also: Terms and conditions · Cookie policy · DPA.