Privacy Policy

Last Updated: July 12, 2025

At Ionkom, we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website ionkom.com and use our SaaS platform, including our chatbot and geolocation services. Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

1. Introduction & Data Controller

This Privacy Policy applies to information collected by Ionkom ("we," "us," or "our"). We are the data controller for the personal data we collect directly from you when you register for an account and use our Service.

Our contact details are:
Ionkom
Bucharest, Romania
hello at ionkom.com

If you have any questions about this Privacy Policy or our data practices, please contact us.

2. Information We Collect

We collect various types of information, including personal data, to provide, maintain, and improve our Service.

a. Information You Provide Directly:

  • Account Registration Data: When you create an account, we collect information such as your name, email address, company name, and password.

  • Communication Data: If you contact us for support, inquiries, or feedback, we collect the content of your communications and our responses.

  • Payment Information: While we do not directly store your full payment card details, we collect transaction details, subscription information, and limited billing information (e.g., billing address, last four digits of card) which is shared with our payment processor, Stripe.

b. Information Collected Automatically (Usage & Technical Data):

  • Usage Data: We collect information about how you access and use the Service, such as the features you use, the time and duration of your activities, and interactions with our chatbots.

  • Device & Technical Data: We collect information about your device and internet connection, including your IP address, browser type, operating system, unique device identifiers, and mobile network information.

  • Cookies & Tracking Technologies: We use cookies and similar tracking technologies (e.g., pixels, web beacons) to track activity on our Service and hold certain information. These are used for essential functionality, analytics, and improving your experience. You can manage your cookie preferences through your browser settings.

c. Specific Data for Chatbot & Geolocation Services:

  • Chatbot Data: When you use our chatbot features, we collect the content of your conversations, including text inputs, questions, and responses generated by the chatbot. This data is used to provide the chatbot service, understand user interactions, and improve our AI models.

  • Geolocation Data:

    • Precise Geolocation: With your explicit consent, we may collect precise location data (e.g., GPS coordinates from your device) to provide location-specific features or services. We will always ask for your permission before collecting precise location data. You can revoke this permission at any time through your device settings or our Service settings.

    • Approximate Geolocation: We may infer your approximate location (e.g., city, country) from your IP address or other network information, which does not require explicit consent.

3. How We Use Your Information (Purpose and Lawful Basis - GDPR)

We use the information we collect for various purposes, based on the following lawful bases:

  • To Provide and Maintain the Service (Contractual Necessity):

    • To operate, deliver, and maintain the functionality of our SaaS platform, including chatbot and geolocation features.

    • To manage your account, process payments, and provide customer support.

    • To fulfill our obligations and enforce our rights arising from any contracts entered into between you and us.

  • To Improve and Develop the Service (Legitimate Interests):

    • To understand how users interact with our Service and identify areas for improvement.

    • To train and enhance our AI models for the chatbot to provide more accurate and helpful responses. We may anonymize or aggregate chatbot data for this purpose.

    • To develop new features and functionalities.

    • To conduct research and analytics.

  • For Security and Fraud Prevention (Legitimate Interests & Legal Obligation):

    • To detect, prevent, and address technical issues, fraud, and unauthorized access or use of the Service.

  • For Marketing and Communication (Consent & Legitimate Interests):

    • To send you service-related announcements, updates, and administrative messages.

    • With your explicit consent, to send you marketing and promotional communications about our services, features, and offers. You can opt-out of marketing communications at any time.

  • To Comply with Legal Obligations (Legal Obligation):

    • To comply with applicable laws, regulations, legal processes, or governmental requests.

4. How We Share Your Information

We may share your information with the following categories of recipients:

  • Third-Party Service Providers: We engage trusted third-party companies and individuals to facilitate our Service, provide the Service on our behalf, perform Service-related services, or assist us in analyzing how our Service is used. These include:

    • Payment Processor (Stripe): Your payment information is shared with Stripe for secure payment processing. Stripe's handling of your data is governed by their Privacy Policy, available at https://stripe.com/legal/privacy-center.

    • Cloud Hosting Providers: (e.g., AWS, Google Cloud) where our data and your data are securely stored.

    • Analytics Providers: (e.g., Google Analytics) to help us understand Service usage.

    • Customer Support Platforms, Email Service Providers, etc.

    These providers have access to your personal data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.

  • With Your Consent: We may disclose your personal data for any other purpose with your explicit consent.

  • Business Transfers: In connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

  • Law Enforcement & Legal Compliance: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court order or government agency).

  • Aggregated or Anonymized Data: We may share aggregated or anonymized data that cannot reasonably be used to identify you, with third parties for various purposes, including industry analysis, demographic profiling, marketing, and other business purposes.

5. Data Security

We implement appropriate technical and organizational measures designed to protect your personal data from unauthorized access, alteration, disclosure, or destruction. These measures include data encryption, secure access controls, regular security assessments, and employee training. However, no method of transmission over the Internet or method of electronic storage is 100% secure. Therefore, while we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data, and whether we can achieve those purposes through other means, and the applicable legal requirements.

7. Your Data Protection Rights (GDPR & CCPA)

Depending on your location, you may have the following rights regarding your personal data:

For individuals in the European Economic Area (EEA), UK, and Switzerland (GDPR Rights):

  • Right to Access: You have the right to request copies of your personal data.

  • Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.

  • Right to Erasure ("Right to be Forgotten"): You have the right to request that we erase your personal data, under certain conditions.

  • Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.

  • Right to Object to Processing: You have the right to object to our processing of your personal data, under certain conditions (e.g., direct marketing, processing based on legitimate interests).

  • Right to Data Portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

  • Right to Withdraw Consent: Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time.

For California Residents (CCPA Rights):

  • Right to Know: You have the right to request that we disclose what personal information we collect, use, disclose, and sell/share.

  • Right to Delete: You have the right to request the deletion of your personal information, subject to certain exceptions.

  • Right to Correct: You have the right to request the correction of inaccurate personal information.

  • Right to Opt-Out of Sale/Sharing: We do not "sell" your personal information in the traditional sense. However, if our use of cookies or other technologies constitutes "sharing" for cross-context behavioral advertising under CCPA, you have the right to opt-out.

  • Right to Limit Use and Disclosure of Sensitive Personal Information: This includes precise geolocation. You have the right to limit the use and disclosure of your sensitive personal information to that which is necessary to perform the services or provide the goods requested.

  • Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

How to Exercise Your Rights: To exercise any of these rights, please contact us using the contact information provided in Section 1 of this Privacy Policy. We will respond to your request in accordance with applicable data protection laws. We may need to verify your identity before processing your request.

8. International Data Transfers

Your information, including personal data, may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction.

If you are located outside [Your Country, e.g., Romania] and choose to provide information to us, please note that we transfer the data, including personal data, to [Your Country, e.g., Romania] and process it there. We implement appropriate safeguards for these transfers, such as using Standard Contractual Clauses approved by the European Commission, where required.

9. Children's Privacy

Our Service is not intended for individuals under the age of 18 (or the age of legal majority in your jurisdiction). We do not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent or guardian and you are aware that your child has provided us with personal data, please contact us. If we become aware that we have collected personal data from children without verification of parental consent, we take steps to remove that information from our servers.

10. Links to Other Websites

Our Service may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

11. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top. We will also inform you via email or a prominent notice on our Service prior to the change becoming effective. You are advised to review this Privacy Policy periodically for any changes.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us:

Ionkom
Bucharest, Romania
hello at ionkom.com