Privacy Notice

Who we are

nifty is the customer-facing brand of NIFTY SNAP S.R.L., a Romanian company. CUI / registration code: 51151873.

For privacy or data-protection questions, contact contact@niftysnap.ro. Additional company/provider information is available on the Legal information page.

What we process and why

Waitlist

If you join the waitlist, we use your email address to manage the nifty access queue and contact you about an appropriate current or future access opportunity. The legal basis is consent. Waitlist consent is not treated as consent to unrelated marketing, and you can withdraw through the unsubscribe or contact route provided by nifty.

Invited nifty services

Depending on the service, data may include account/contact information, the selected business workspace, business websites and links, documents and files you choose to provide, guided service answers, source references, generated service outputs or assets, manual edits/version history, support-authorization records and limited technical/security records.

Processing necessary to provide a requested service/account may rely on steps taken at your request before a contract and/or performance of the applicable service agreement. Narrow security, fraud/abuse prevention and reliability processing may rely on legitimate interests where appropriate. Records required by law may rely on legal obligation.

What is required

The waitlist email is optional, but without it nifty cannot place you on or contact you through the waitlist. For an invited service, you decide what business material to provide subject to that service's requirements. Missing, unclear, conflicting and genuinely not-applicable information is handled explicitly rather than invented.

Selected free-place applications

nifty may separately invite applications for a limited number of free places for particular services. The application page identifies the service, eligibility or suitability criteria, information requested, purpose of the application and the applicable privacy information. Applications are reviewed by nifty and are not selected by random draw. Joining the waitlist does not automatically submit an application.

Data we do not ask for

nifty services are designed primarily around business information. Do not upload passwords, credentials, payment-card data, health information, biometric data, political or religious information, or other sensitive personal information unless a particular nifty service has explicitly requested that information for a lawful and necessary purpose.

Where information can come from

Information may come directly from the account user, from materials the business provides, from business websites or links supplied to nifty, and from relevant public sources used to understand the business. Public availability does not remove data-protection obligations where information identifies a person.

Where personal data is obtained from a source other than the individual, nifty will assess the transparency requirements that apply to that use, including the source and whether it was publicly accessible, and will provide Article 14 information where required or document an applicable legal exception.

Service providers and international transfers

nifty may use service providers needed to deliver the service, such as hosting/storage, AI, authentication, email/delivery, security and narrowly scoped support infrastructure. Routine nifty administration is designed not to browse customer content.

If personal data is transferred outside the EEA, nifty uses an applicable GDPR transfer mechanism where required. Additional information about relevant recipients or safeguards is provided where the GDPR requires it.

AI and automated decisions

nifty uses AI to help read permitted business material, identify relevant gaps, retrieve stored business information and professionally structure or rewrite service outputs. Ask nifty is identified as an AI assistant.

nifty's current services do not make solely automated decisions about a natural person that produce legal or similarly significant effects, such as lending, employment, insurance or eligibility decisions. If that changes for a future service, the applicable privacy information and safeguards will be provided for that service.

Retention

nifty keeps personal data only for as long as needed for the purpose for which it was collected and for applicable legal obligations. Waitlist emails are kept while the person remains in the active access queue, with earlier deletion if the person withdraws, receives access and no longer needs to remain queued, or the relevant access programme closes. Workspace and service content is kept while the service relationship remains active and for a limited recovery period after closure where appropriate. Technical/security records, support records and contract/accounting/tax records are retained only for the operational, accountability or statutory periods that apply to them.

Your rights

Where the GDPR applies, you may have rights including access, rectification, erasure, restriction, objection, portability and withdrawal of consent. The exact rights depend on the processing and legal basis. Requests can be sent to contact@niftysnap.ro or submitted using the form below.

Submitting this form creates a request record, but it does not by itself verify identity or trigger automatic deletion. nifty may need to verify identity before acting on a request.

You may also lodge a complaint with a competent supervisory authority. In Romania, the supervisory authority is the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP).

Changes

We may update this notice when the services, providers, processing activities or legal requirements materially change. The latest version is published here with its update date.