Privacy Policy

Last updated: 25 May 2026

This Privacy Policy explains what personal data MassAI collects through this website, how it is used, and what rights you have. We keep data collection minimal and purpose-bound.

1. Who we are (data controller)

MassAI is a brand operated by Auto-Moto Office SRL, a company registered in Romania, CUI 35951149, with registered office at sat Vestem no. 215, Sibiu county, Romania. Auto-Moto Office SRL is the data controller for this website. For any data-related request, contact contact@massai.ro.

2. What we collect

When you submit the pilot request form or contact us, we may collect:

We do not run advertising trackers or behavioural profiling on this website. We do not knowingly collect sensitive categories of data — please do not submit passwords, payment details, government IDs, or health information through the website form.

3. Why we process it (legal basis)

We process this data on the basis of your request (steps taken at your request prior to entering a contract) and our legitimate interest in responding to business inquiries. Processing is limited to: reviewing your request, contacting you, preparing a pilot proposal, and improving our service.

4. How form submissions are handled

The pilot request form is processed through Formspree (formspree.io), a third-party form-handling provider. When you submit the form, the data is transmitted to Formspree and forwarded to our business inbox. Formspree operates from the United States, which means your submission involves an international data transfer outside the EU. We keep the data sent through the form to the minimum described in section 2.

5. Data sharing

We do not sell your data. We share information only with service providers strictly needed to operate the website and process inquiries — currently the form provider (Formspree), our email provider (Zoho Mail, EU data centre), our web-analytics provider (Google Analytics — see section 9), and our hosting/CDN provider. Each acts as a processor on our behalf.

6. Where data is stored

Our email and business communication are hosted on Zoho Mail's EU infrastructure. Form submissions transit through Formspree (US) before reaching our EU inbox. We are progressively consolidating processing within the EU.

7. Retention

We retain inquiry data only as long as reasonably necessary for business communication, follow-up, and legal compliance. If an inquiry does not lead to an engagement, we delete or anonymise it within a reasonable period.

8. Your rights

Under the GDPR and applicable law, you may request access to, correction of, deletion of, restriction of, or portability of your personal data, and you may object to processing based on legitimate interest. To exercise any of these, email contact@massai.ro.

You also have the right to lodge a complaint with a supervisory authority. In Romania this is the National Supervisory Authority for Personal Data Processing (ANSPDCP) — dataprotection.ro.

9. Cookies and web analytics

This website uses Google Analytics 4 (GA4) to understand, in aggregate, how the site is used. We use Google Consent Mode v2: on your first visit, analytics and marketing storage is denied by default and no analytics cookie is set before you make a choice.

Through a consent banner you can choose:

Your choice is stored locally in your browser (localStorage, key massai_consent) so we do not ask again on every visit. Analytics data is processed by Google (Google Ireland Ltd. / Google LLC), which may involve a data transfer outside the EU. GA4 is configured for aggregate reporting, without advertising profiling. You can change your choice at any time by clearing the site's cookies and data in your browser.

10. Changes to this policy

We may update this policy as the service evolves. The "last updated" date above reflects the current version.

11. Contact

For any privacy question or request, contact contact@massai.ro.

Auto-Moto Office SRL · CUI 35951149 · sat Vestem no. 215, Sibiu county, Romania

This policy is a clear, good-faith baseline. Because MassAI positions itself around EU AI Act readiness and works with B2B clients' data, it is worth having this document and the associated Data Processing Agreement reviewed by a qualified lawyer before scaling client onboarding.