Wolty
Legal document
Privacy Policy
Last updated: 29 September 2026
This policy explains what personal data we process through the wolty.ai website, why, how long we keep it and what rights you have under Regulation (EU) 2016/679 (GDPR).
1. Who the controller is
CIOCA ENTERPRISES SRL, trading as RiseUp Solutions, with its registered office at 3 Costache Negri Street, Sibiu, Sibiu County, 550402, Romania, registered with the Romanian Trade Register under no. J2026021707001 (EUID ROONRC.J2026021707001), tax identification number (CUI) 54396908 (“RiseUp Solutions”, “we”). You can write to us at contact@riseup-solutions.ro or call us at +40 757 790 130.
2. What data we process
- Demo form data: name, email address, company, the message you write to us and your consent confirmation.
- Technical data to protect the form: from your IP address we compute a cryptographic fingerprint (a code that cannot be turned back into the IP address) to limit automated and abusive submissions. We do not store your IP address in plain form.
- Correspondence data: when you email or call us, we process the data you share with us in that conversation.
We do not use analytics or marketing cookies and we do not track you across other websites. Details in our Cookie Policy.
3. Why we process it and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Replying to you and scheduling the demo you requested | Art. 6(1)(b), steps taken at your request before entering into a contract, and Art. 6(1)(a), the consent you give by ticking the consent box |
| Protecting the form against spam and abuse | Art. 6(1)(f), our legitimate interest in keeping the website secure |
| Complying with legal obligations (for example accounting, if we enter into a contract) | Art. 6(1)(c), legal obligation |
We do not make decisions based solely on automated processing that produce legal effects concerning you.
4. Who we share data with
Your data is not sold and is not used to train artificial intelligence models. It is accessed by our team and by the providers that help us operate, under contract and only to the extent necessary:
- Vercel Inc.: hosting of the website and the application (processing in the Frankfurt, Germany region).
- Supabase Inc.: the database where requests are stored (Ireland region, European Union).
- Anthropic PBC: the AI model our team uses internally, for example to summarise a request. Anthropic does not use the data to train its models.
- Google LLC: the website fonts (Google Fonts). To deliver them, your browser sends your IP address to Google's servers.
Some of these providers are based in the United States. Transfers outside the European Economic Area rely on the Standard Contractual Clauses approved by the European Commission or on the EU-US Data Privacy Framework, as applicable.
5. How long we keep data
We keep demo request data while we are in conversation with you and for no more than 24 months after the last contact if no contract is concluded. If we become partners, the data needed for the contract is kept for its duration and then for as long as the law requires. The technical fingerprint is kept together with the request it belongs to. You can ask us to delete your data earlier at any time.
6. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection. You can withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal. To exercise any of these rights, write to us at contact@riseup-solutions.ro; we reply within one month at the latest.
You also have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), 28-30 G-ral. Gheorghe Magheru Blvd., Sector 1, Bucharest, www.dataprotection.ro, or with the supervisory authority in your country.
7. Security
We use encrypted connections (HTTPS), account- and role-based access to stored data and rate limits on form submissions. No method of transmission or storage is 100% secure, but we take technical and organisational measures appropriate to the risk.
8. Data in the Wolty platform
This policy covers the presentation website. Data that our clients process in the Wolty platform is processed by us as a processor, under the contract and the data processing agreement (DPA) concluded with each client.
9. Changes
We may update this policy; the version in force is the one published on this page, with the last updated date shown above.