Privacy policy — ArgonStack

01. Overview

TECHINS DIGITAL SRL (“we”, “our”), which provides the ArgonStack platform in Romania, respects your privacy and is committed to protecting it in line with this Privacy policy (the “Policy”).

This Policy explains how we collect, use and protect your personal data when you visit our website or use the ArgonStack platform and related services.

By accessing or using the platform, you accept the practices described in this Policy. If you do not agree, please do not use our services.

02. Data we collect

a. Data you give us: full name, email address, phone number, company name, billing information.

b. Data collected automatically: IP address, browser type, device identifiers and platform usage. These are personal data to the extent they allow you to be identified directly or indirectly. Your IP address in particular is treated as personal data and receives the same safeguards.

We collect data:

Directly from you, when you create an account, fill in forms, subscribe to updates or contact support.
Automatically, through the technical logs of the website and platform.
From third-party providers, to the extent permitted by law.

03. Legal basis for processing

We process personal data on one or more of the following GDPR legal bases:

Performance of a contract with you or your organisation.
Compliance with legal obligations.
Legitimate interests, such as improving services, communication and security.
Consent, where explicitly given (for example, newsletter subscription).

04. How we use data

We use your data solely to:

Operate, maintain and improve the platform and services.
Provide support and manage payments.
Personalise the user experience.
Send updates or newsletters, only with your consent.
Meet legal or regulatory obligations.

We do not sell or rent personal data to third parties.

For Google user data, the additional restrictions in section 12 apply: it is not used for advertising or to create, train or improve artificial intelligence or machine learning models.

05. Access to client data

Although we may technically have access to data clients store in the platform (for example, contacts or messages), we may only use or process it at the client’s explicit request for technical support.

Restricted access. Access to data is strictly limited to support or maintenance cases requested by the client.

Liability. Any unauthorised access to or misuse of data by our staff makes the individual concerned fully personally liable under the GDPR and Romanian law.

The clause above concerns staff access. It does not limit automated processing by the platform and by processors acting on our behalf to provide the features the client enables, described in sections 4 and 12. Staff access is also possible where strictly necessary for the security of the service or to meet a legal obligation.

06. Data retention

We keep personal data only as long as needed for the purposes in this Policy or as required by law.

Client data stored in the platform is deleted or anonymised within 90 days of account termination, unless otherwise requested.

Google user data is deleted within 30 days of the organisation’s account being closed, earlier than the period above (see section 12).

07. Processors and third-party providers

We use selected infrastructure and service providers inside and outside the EU. All are bound by data processing contracts and, where required, Standard Contractual Clauses (SCCs), ensuring an equivalent level of protection.

Providers that process Google user data are named in section 12.

08. Security measures

We apply strict technical and organisational measures, such as:

Encryption of data in transit and at rest.
Access control and logging of administrator actions.
Multi-factor authentication.
Backups and regular security checks.

09. Your rights

You have the right to:

Access your data.
Correct inaccurate data.
Erase your data.
Restrict or object to processing.
Data portability.
Withdraw your consent at any time where processing is based on it (for example, newsletter subscription). Withdrawal applies to the future and does not affect the lawfulness of earlier processing.
Lodge a complaint with the supervisory authority. In Romania, this is the National Supervisory Authority for Personal Data Processing (ANSPDCP), www.dataprotection.ro.

Requests should be sent to alin@techinsgroup.com.

10. Other provisions

International transfers. Data may be processed outside the European Economic Area. In all cases, appropriate safeguards apply under Chapter V of the GDPR.

Updates. This Policy may be revised for legal or technical reasons.

11. Contact details

Legal name: TECHINS DIGITAL SRL
Platform: ArgonStack
Tax ID (CUI): 54339260
Trade Register no.: J2026019607007
EUID: ROONRC.J2026019607007
Registered office: Cluj-Napoca, Cluj County, Romania
Email: alin@techinsgroup.com

12. Google user data in ArgonCRM

What we access. If you connect a Google account, ArgonCRM requests only the following permissions:

Gmail, read (gmail.readonly): new messages from the day of connection, including headers, message text and attachment names and sizes. Attachment content is not downloaded.
Gmail, send (gmail.send): to send, from your own address, the emails, replies and campaign messages you write or approve in ArgonCRM.
Google Calendar events (calendar.events) and calendar list (calendar.calendarlist.readonly): to add the appointments you set in ArgonCRM to the calendar you choose and to read events from the calendars you enable, so your busy times are shown.
Your email address (userinfo.email): to identify which account you connected.

How we use it. Only to provide the features you see in ArgonCRM: logging your emails to the matching customer record, sending replies from your own address, sending the campaigns you launch, keeping appointments in sync with your calendar and showing your availability. If your organisation enables the AI assistant, it can read this data when you ask it a question. We do not sell Google user data, do not use it for advertising and do not use it to create, train or improve any artificial intelligence or machine learning model.

Who we share it with. Only with the service providers that process it on our behalf so these features work:

Amazon Web Services EMEA SARL: hosting and database, in the AWS Frankfurt region (eu-central-1), Germany.
Anthropic, PBC (United States): only if your organisation enables the AI assistant, and only the content needed to answer a request you make. Anthropic’s commercial terms prohibit it from training models on this data. Anthropic deletes API inputs and outputs within 30 days, and the transfer is covered by Anthropic’s Data Processing Addendum, which incorporates the EU Standard Contractual Clauses (SCCs).

No other third party receives Google user data, including our SMS/Viber provider and any analytics or advertising service. We may disclose data where required by law, to protect the security of the service, or as part of a merger or acquisition, in which case we will ask for your consent first.

Human access. Our staff do not read your Google user data unless you ask us to for support, or where necessary for security or legal compliance.

Storage and security. Data is encrypted in transit (TLS). OAuth access tokens are additionally encrypted before storage.

Retention and deletion. Emails and calendar entries remain part of your organisation’s customer records until you or your organisation delete them, or until 30 days after the organisation’s account is closed. If you disconnect a mailbox or calendar in ArgonCRM, we immediately delete the related access token and stop reading. You can revoke ArgonCRM’s access at any time at myaccount.google.com/connections. To request deletion, write to alin@techinsgroup.com.

Limited Use. ArgonCRM’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.