Privacy policy
This is a draft awaiting legal review. No lawyer has read it yet, so its wording may still change.
This policy covers the personal data Dovalis itself decides about: the accounts of the businesses that use it, and visits to dovalis.com. Testimonials are different: the business that collects them decides, and each of its forms links to its own notice.
Who is responsible
SOULSOLUTIONS S.R.L., a company registered in Romania, runs Dovalis and decides about the data this policy covers. Write to support@dovalis.com about anything in it.
What we keep about you
- Your login: your email address, and your password, stored only in a scrambled form that nobody can read back, us included.
- Your business: what you enter or let us read from your website, such as its name, logo, colour, trade, country and contact address.
- Your settings: your language and the look you chose.
- What you agreed to: the version of each document you accepted, and when.
- What happens in your account: a record of the actions taken in it, such as a testimonial approved or a page published, and who took them.
- Security records: the network address a request came from, and when, kept by our hosting and login providers to stop abuse.
Why we keep it
- To run the account you asked for: the contract between us.
- To keep Dovalis safe and stop abuse: our legitimate interest.
- To keep the records the law requires of us: a legal obligation.
We do not sell your data and do not use it for advertising.
When we read your website
If you give us your website's address while setting up, Dovalis reads it, as any visitor could, to fill in your business's name, logo, colour and a line about it. You can change or remove anything it found.
Cookies
Dovalis uses only the cookies it cannot work without: the ones that keep you logged in, and one that remembers a language you picked. The pages your customers see, your forms and your walls, set none. There are no advertising or analytics trackers anywhere.
Where your data is, and who helps us
Your data is stored in the European Union, in Frankfurt, Germany. These companies handle it for us, each under a contract that binds it to protect the data:
- Supabase: the database, logins and stored files, in Frankfurt, Germany.
- Vercel: hosting. The application runs in Frankfurt, and Vercel's network passes each page to the browser that asked for it.
- Resend: sending email, from Ireland.
- Cloudflare: the dovalis.com domain name, and the mail sent to Dovalis's own addresses.
Where one of them could reach the data from outside the European Union, the transfer is covered by the European Commission's standard contractual clauses in its contract with us.
How long we keep it
- Your account and your business's data: for as long as the account exists. When the account is deleted, everything in it is deleted at once, except what the law makes us keep, such as invoices.
- The record of actions in an account: at most 24 months.
- Backups: something deleted leaves our backups within 30 days.
Your rights
You can ask to see the data we keep about you, to correct it, to delete it, to receive a copy in a common format, or object to how we use it. Write to support@dovalis.com from your account's email address, and we answer within one month. You can also complain to the Romanian data protection authority (ANSPDCP) or to the one in your own country.
How we protect it
Your data travels encrypted. Each business can reach only its own data, and files stay private unless you publish what they belong to. If a breach ever puts your data at risk, we tell you without delay.
When this policy changes
When this policy changes in a way that matters, we tell you by email before the new version applies. Each version has a number and a date, shown at the top of this page.