Privacy policy

AI Moldova is operated by Societatea cu Răspundere Limitată „ADS WEB AUGUST”, tax ID 1026023162317, Republic of Moldova. Registered address: Mihail Sadoveanu 6/6. Version: 2026-10-31. contact@adsmoldova.md

To let a chat request continue after you leave the page, we temporarily store its latest prompt, status, progress and result on the server. Recovery access expires after 24 hours; a scheduled task runs every five minutes to remove expired records and temporary images, retrying failed deletions. Copies in account history or the gallery follow those features’ retention rules. SessionStorage holds task references and a visitor access key, without message text, to deliver the requested continuity; references work for up to 24 hours and disappear when the browser session ends. Attachments and the full conversation context are not copied into the temporary task record.

Moldovan Law 195/2024 on personal data protection has applied since 23 August 2026 according to the national data protection authority. Account administration, AI responses, documents, support and subscriptions process information needed for your request or contract. Abuse prevention and service security pursue a legitimate interest that the operator must assess and document. Mandatory records rely on applicable legal obligations. Analytics and optional preferences require separate consent. GDPR applicability to people in the EU/EEA depends on actual targeting and activities, rather than the language alone.

At your request, the video prompt and selected source image are sent through our server to fal.ai and the selected model (MiniMax, Veo or Kling). Optional prompt enhancement uses OpenAI. Completed videos and new images archived for an account are copied into private Vercel Blob storage; history and usage are stored in Neon with user ownership checks. Source-image references expire after 23 hours; intermediate fal uploads are configured for one day and intermediate results for seven days. These settings do not guarantee deletion of backups or cover all provider processing. Deleting a creation withdraws history access and initiates deletion of its private file; operational, usage and audit metadata may remain under the operator’s retention procedure. If image archiving fails, the result can still be downloaded from the generation session without appearing in history. Analytics events do not include prompts or files. The one-time free video trial status is retained with your account so it is not granted again on another day or month. Deleting the video from history does not restore the trial; the trial record is removed when the account is deleted.

At your request, Website Studio sends your description and project files to OpenAI or v0/Vercel, depending on the selected engine. Projects, revisions and history are stored in Neon with ownership checks; previews run in an isolated frame and publication is not automatic. For music, descriptions, preferences, lyrics and variation context are sent to Google Gemini/Lyria. Generation runs in the background using the Interactions API with Google storage; Google retention depends on actual provider-account terms and settings, which need separate verification. MP3 files are stored in private Vercel Blob storage; metadata, history, costs and one-time trial records are in Neon. Archiving a website or moving a track to trash is reversible and does not erase its file or trial record. No automatic deletion period is configured for these projects and tracks; request permanent deletion through the privacy contact. The website editor and music generator are excluded from analytics and marketing.

Assistant configuration, instructions, tasks, intermediate results and run history are stored in Neon with ownership checks for the account. Requested AI steps are sent through our server to OpenAI; generated images are archived in private account storage. Deleting an assistant is reversible and does not delete usage or run history. No automatic deletion period is currently configured for these records; request deletion through the privacy contact. The editor page is excluded from analytics and marketing. When you choose to sign in, a temporary sessionStorage draft, aim_agent_login_draft, preserves the workflow for your return; it is restored only within 15 minutes and removed on return.

Clerk and Google handle the selected sign-in method. The application receives a provider identifier, verified email and name. Neon/PostgreSQL stores the profile, language, optional company, plan and activation dates, and affiliate information. AI Moldova does not receive your Google password. Existing local password records use scrypt hashes and salts, never plaintext. The application session cookie is HttpOnly, Secure and SameSite=Lax. A phone number is not required for basic AI chat.

Messages, selected conversation context and attached files are sent through our server to OpenAI to fulfil your AI request. Do not upload passwords, full payment card details or information about others that you are not entitled to use. For signed-in users the text prompt and response are also stored in the platform database. Archiving a conversation in the browser does not erase that copy. Attachments remain in page memory and can be sent again as conversation context; local history stores their metadata only. Word, PDF, Excel, PowerPoint, CSV and TXT exports process the text on the server without another AI request or saving the exported file in the application database.

Vercel serves the site and runs APIs, processing IP addresses, URLs and technical metadata in its infrastructure. Neon hosts PostgreSQL accounts, sessions, conversations, usage and payment records. Clerk and Google provide authentication; Clerk protection mechanisms may use Cloudflare Turnstile. OpenAI processes requested AI inputs. Meta receives the visit data described in the Cookies policy only after Marketing consent, under its own policies. Google Analytics 4 receives navigation data only after consent and is not loaded in chat, account or payment-result pages. If the configured MAIB payment integration is used, MAIB receives the name, email, IP and order details. The operator and authorized support or administration personnel can access information required for their responsibilities.

Email, phone, WhatsApp, Telegram, Facebook and Instagram links open external services when you choose to follow them. Those providers also process messages submitted there; the operator receives what you include in your enquiry. Meta Pixel measures visits to public information pages only after Marketing consent. This choice does not enable a newsletter form or promotional messaging system. Descriptions of email/SMS automation services do not mean those tools track this website’s visitors. Cookie consent does not subscribe you to promotional messages.

Application sessions expire after 30 days and cookie choices remain valid for 180 days. Session expiry does not automatically delete its database record. Local preferences are removed when consent is withdrawn or website data is cleared. The code currently has no scheduled fixed-term deletion for accounts, conversations, usage, credit reservations, payments or audit records. The operator must confirm and implement a retention schedule covering tax duties, backups and provider deletion. We do not claim an unconfigured period. Request erasure using the contact above; any exceptions and reasons for continued retention must be explained in the response.

Cloud providers may process data in other countries. Contracted regions, processors, subprocessors and transfer safeguards need verification against actual agreements; we do not claim that all data remains in Moldova or the EU. OpenAI text requests set store:false, which does not promise zero provider retention. Secrets remain server-side, requests are validated, account access is checked and abuse limits apply. These controls reduce risk without eliminating every possibility of an incident.

You may request access, correction, erasure, restriction, objection and, where applicable, portability. Withdraw optional consent using Cookie settings; withdrawal does not invalidate earlier lawful processing. Contact contact@adsmoldova.md, identifying your account and request without passwords or unnecessary identity documents. Identity checks must be proportionate. Name, company and language can be edited in the account. Account closure, complete export and deletion across all providers are handled by the operator. Complaints can be submitted to Moldova’s National Center for Personal Data Protection: datepersonale.md, centru@datepersonale.md; current contacts: https://datepersonale.md/about/contacts/. In Account → Settings → Your data and rights you can register an actual access, export, correction, erasure, restriction or objection request. A session with a verified email is required. You receive a reference, status and an initial one-month response deadline; the administrator records a reply visible in the same panel. Erasure is a request, not immediate deletion of the account, payments or accounting records. This feature does not send automatic confirmation emails; check the panel or use the public contact. If you cannot access your account, email us; identity is checked proportionately before disclosure.

Free-text chat and uploads can contain sensitive information even though the platform does not request it. Do not submit health, biometric, criminal-conviction or other special-category data without an appropriate assessment and basis. The operator must assess whether a DPIA is needed and the rules for children. The application has no age-verification mechanism; business positioning alone does not prevent children from accessing it. These matters require legal review.

PayPal processes eligible PayPal and card payments using its SDK and secure forms. AI Moldova does not receive full card numbers or security codes. We store the account receiving the plan, order and transaction references, amount, currency, exchange rate, status, terms version, acceptance time and a trader-details snapshot for new orders. MAIB is implemented but availability depends on commercial configuration. No Paynet integration was identified. Changing public identity does not automatically transfer a PayPal account or earlier transaction.

In the image generator, uploaded photos and, when selected, the example photo are sent to OpenAI for adaptation. Your source file stays in page memory; the application does not separately save it in your gallery. The result may be saved under the gallery rules. In the video generator, the source photo and MP4 reference clip are sent to fal.ai and the selected model. Application file references expire after 23 hours, and intermediate provider uploads are configured for one day; these values do not describe every provider operation or backup. Only use materials you have the right to use. Stock previews load from our domain; the source and license open only when you follow their links.

With Analytics consent, the server may send a confirmed purchase to Google Analytics 4: a unique reference, product, amount, currency and Analytics cookie identifier, plus the session when available. With Marketing consent, the server may send the purchase details to Meta Conversions API together with available _fbp/_fbc identifiers, IP address and browser technical data; Google may use purchase data for ad attribution. This integration does not send names, email addresses, phone numbers, card details, conversations or files. Google and Meta scripts remain excluded from the account, chat and payment pages; the server event is limited to the confirmed order. Previous consent limited to visits does not authorize this measurement: a new choice is requested. The sessionStorage entry aimoldova.ga-checkout-context holds an Analytics identifier and session, usable for up to 30 minutes to associate a purchase, and removed on withdrawal or browser-session closure. Server context is cleared after seven days by a scheduled task; a delivery marker remains with the payment record to prevent duplicates. Withdrawal from a signed-in session removes identifiers from the account’s unsent events; it cannot recall a request already sent to a provider. Purchases without consent are not sent.