Privacy Policy
This translation is provided for your convenience. In the event of any discrepancy, the Romanian version prevails.
Last updated: October 17, 2026
1. Who we are and how to contact us
The controller of your personal data is AI SKILLS SRL, IDNO 1024600060193, with its registered office at str. Mihai Viteazu 2A, MD-2004, Chișinău, Republic of Moldova (“AI SKILLS” or “we”).
Person responsible for data protection: Denis Zacon, founder — denis@aiskills.md, +373 60 683 308. We respond to any request concerning your data within 30 days.
2. Legal framework
We process personal data in accordance with Law No. 195/2024 on personal data protection of the Republic of Moldova and, for users located in the European Union — Romania in particular — with Regulation (EU) 2016/679 (the “GDPR”). We have written this policy in plain language, without diminishing its legal force.
3. What data we collect and where it comes from
We collect only the data you provide to us directly or that is technically necessary:
- Contact form (on the Contact page and in the contact section of the homepage): your name, company name (optional), phone number, and message.
- Free AI Assessment (the AI Assessment page): your name, email address, phone number, and answers to questions about your company (industry, size, challenges, tools in use).
- Certificate verification (the verification page): for graduates of our courses, we store their name, the course, the date, and the unique certificate code so that employers or institutions can confirm the certificate is authentic. This data is shown only to someone who enters the correct code. We do not use analytics tools on the verification pages.
- Technical usage data — only if you accept analytics cookies: pages visited, visit duration, device and browser type, approximate country and city, how you arrived at the site, and actions such as submitting a form or clicking a phone, email, Telegram, or WhatsApp link (without their content). Microsoft Clarity also records how you scroll and where you click on pages; text typed into forms, numbers, email addresses, and the AI Assessment report are hidden in these recordings. Google Analytics does not store your IP address.
- Administration data: technical session cookies used exclusively by the AI SKILLS team to access the admin panels.
- Map on the Contact page: the Contact page shows a Google Maps map. When it loads, your browser connects to Google’s servers, which receive your device’s IP address and may set their own cookies. Google processes this data as an independent controller under its own privacy policy.
We do not collect sensitive data (such as health information, political opinions, or religious beliefs), and we do not request payment details through the site. The site is not intended for anyone under the age of 18.
4. Why we process data and on what legal basis
| Purpose | Legal basis |
|---|---|
| To reply to your message and send you the quote you requested | Your consent and steps taken prior to entering into a contract |
| To generate and deliver your AI Assessment report | Your consent (given by checking the box when you submit the form) |
| To provide the contracted services (courses, consulting, development) | Performance of the contract |
| To enable verification of the authenticity of the certificates we issue | Performance of the training contract and the graduate’s legitimate interest |
| To understand how the site is used, which pages and forms work, and improve it | Your consent to analytics cookies |
| To show you on a map where to find us (Contact page) | Legitimate interest |
| To protect the site and comply with our legal obligations (accounting, tax) | Legitimate interest and legal obligation |
We do not use your data for unsolicited marketing, we do not sell it, and we do not pass it on to advertising networks.
5. How we use artificial intelligence
The AI Assessment report is generated automatically by a language model provided by OpenAI, based on your answers about your company. We send OpenAI only your questionnaire answers — not your name, email, or phone number. Under OpenAI’s commercial API terms, this data is not used to train models.
The report is for guidance only. We do not use it to make automated decisions that have legal effects on you; any collaboration starts with a conversation with a real person on our team.
6. Who we share data with
We work with a small number of service providers (“processors”) that handle data on our behalf under contracts requiring them to protect it:
| Provider | Role | Data involved |
|---|---|---|
| Vercel Inc. (US/EU) | Website hosting and form processing | All data submitted through the site passes through Vercel’s servers |
| Supabase Inc. (US/EU) | Database for AI Assessment requests and for online certificate verification | Assessment: name, email, phone, answers, and the generated report · Certificates: participant’s name, course completed, date, and unique code |
| OpenAI, L.L.C. (US) | Generating the personalized AI Assessment report | Your answers about your company (without your name, email, or phone number) |
| Telegram FZ-LLC (UAE) | Internal channel through which the AI SKILLS team instantly receives requests sent via the forms | Contact: name, company, phone, message · Assessment: name, email, phone, answers |
| Google Ireland Ltd. (EU) | Google Analytics 4 — usage statistics (only with your consent) | Random identifier (cookie), pages visited, device, approximate location, traffic source, actions (form submitted, contact click) |
| Microsoft Ireland (EU) | Microsoft Clarity — heatmaps and session recordings (only with your consent) | Random identifier (cookie), clicks, scrolling, page movement — excluding form text and areas containing personal data |
Separately, Google provides the map on the Contact page as an independent controller, not on our behalf. We may also disclose data to public authorities when required by law. We do not sell data or share it with any other third parties.
7. Transfers outside the Republic of Moldova and the EU
Some of the providers listed above have servers outside the Republic of Moldova and the EU (the United States, the United Arab Emirates). For Vercel, Supabase, OpenAI, Google, and Microsoft, transfers are based on safeguards recognized under applicable law: the European Commission’s Standard Contractual Clauses, certification under the EU-U.S. Data Privacy Framework (where the provider is certified), and additional technical measures (encryption in transit and at rest). Requests received via Telegram (UAE) are transferred in order to act on the request you send us (steps prior to entering into a contract).
8. How long we keep data
- AI Assessment requests in our database: 24 months from submission, then deleted automatically.
- Contact form messages and requests received in Telegram: up to 24 months from submission, after which we delete them.
- Certificate verification data: for as long as the certificate remains valid, so that it can be verified at any time.
- Contractual and financial data: for the period required by accounting and tax law.
- Analytics data (if you have consented): detailed Google Analytics data for up to 14 months (the identifying cookie expires after about 13 months); Clarity recordings are deleted after 30 days, and aggregated data (heatmaps) after at most 13 months.
- Your cookie preferences: 12 months, after which we will ask you again.
- Site language: 12 months.
You can ask us to delete your data sooner at any time (see section 10).
9. Cookies and similar technologies
The site keeps cookies to a minimum. Analytics cookies are enabled only after you accept them in the banner shown on your first visit, and you can disable them at any time via “Cookie settings” at the bottom of the page. The full list, including the cookies Google may set through the map on the Contact page, is available in our Cookie Policy.
10. Your rights
You have the right to:
- find out what data we hold about you and receive a copy of it (right of access);
- correct inaccurate or incomplete data;
- have your data erased (the “right to be forgotten”) when we no longer have a legal reason to keep it;
- restrict processing or object to it;
- receive your data in a structured format so you can transfer it to another controller (data portability);
- withdraw your consent at any time, without affecting any processing carried out before the withdrawal;
- file a complaint with the supervisory authority.
To exercise your rights, write to us at denis@aiskills.md. We will respond within 30 days, free of charge.
The supervisory authority in the Republic of Moldova is the National Center for Personal Data Protection (CNPDCP) — www.datepersonale.md. If you are in Romania, you can contact the Romanian data protection authority, ANSPDCP (www.dataprotection.ro), or the supervisory authority in your EU member state.
11. How we protect data
All data is encrypted in transit (HTTPS/TLS) and at rest with our providers. Access to data is limited to the people who need it to respond to you, is protected by authentication, and is reviewed periodically. In the event of a security breach that could affect you, we will inform you and notify the competent authority within the time limits set by law.
12. Changes to this policy
If we change the way we process data, we will update this page and the date above. We will notify you of significant changes through a banner on the site.
13. Contact
AI SKILLS SRL · IDNO 1024600060193
str. Mihai Viteazu 2A, MD-2004, Chișinău, Republic of Moldova
Email: denis@aiskills.md
Phone: +373 60 683 308