Privacy policy

1. Who is responsible

SIEL AI SRL, a company registered in Romania, is the data controller for the personal data described here. You can reach us at contact@siel.ai.

2. What we collect and why

We collect only what a request needs.

• Form submissions: name, work email, company, role and the message or process you describe. Campaign forms may also ask for company size, country, the process concerned and the systems involved. We use this to answer you and to prepare a first conversation. Legal basis: pre-contractual steps at your request (Art. 6(1)(b) GDPR) and our legitimate interest in answering enquiries (Art. 6(1)(f)).
• Job applications: name, email, location, links you provide, your experience, your motivation and your notice period. Legal basis: pre-contractual steps at your request.
• Campaign attribution: if you arrive from an ad or a link with tracking parameters, we store the campaign source, medium, campaign name, the click identifier your ad platform appended, the landing page and the referrer in a first-party cookie for 90 days, and attach them to a form you later submit. We use this to know which campaigns bring relevant conversations. Legal basis: legitimate interest.
• Language preference: a cookie remembers the language you chose for up to one year.
• Usage statistics: with your consent we load Google Analytics 4 through Google Tag Manager to understand how the site is used. Without consent, nothing from Google loads.
• Server logs: our hosting provider records IP address, request path, browser type and timestamp for security and error handling, retained for a short period.

3. Who processes data for us

We use a small number of service providers. Each processes data only on our instructions.

• Microsoft Azure: hosting of the website and the form handling.
• Resend: delivery of the notification email that a form submission creates.
• Slack: an internal notification with the content of your submission, so an engineer sees it the same day.
• Notion: our lead and application register, where submissions are stored and followed up.
• Google: the discovery-call scheduler (Google Calendar appointment booking) and, only after consent, Google Analytics 4 and Google Tag Manager.

4. Transfers outside the EEA

Some of these providers process data in the United States. Where that happens, transfers rely on the EU-US Data Privacy Framework or on the European Commission's Standard Contractual Clauses.

5. How long we keep it

Enquiries and campaign submissions are kept for as long as the conversation is open and for up to 24 months after our last contact, unless a contract follows, in which case the contract's own retention applies. Job applications are deleted six months after the position is filled or the application is closed, unless you ask us to keep it on file. Attribution cookies expire after 90 days; the language cookie after one year.

6. Cookies

The site sets two first-party cookies without consent: one for your language choice and one for campaign attribution, described above. Analytics cookies from Google are set only after you accept them. Your choice is stored in a cookie for six months. You can change it at any time from the cookie settings link in the footer or by clearing your browser's cookies.

7. Your rights

Under the GDPR you can ask for access to your data, correction, deletion, restriction of processing, portability, and you can object to processing based on legitimate interest. Write to contact@siel.ai; we answer within one month. You can also complain to the Romanian supervisory authority (ANSPDCP) or to the authority in your own country.

8. Security

Form data travels over encrypted connections and is handled on the server, never in the browser. Credentials for the services above are held in the hosting environment, not in the website code, and access is limited to the people who follow up on requests.

9. Changes

When this policy changes, the date at the top changes with it. Material changes are announced on this page.