Privacy notice

Last updated: 11 October 2026 (v2)

1. Who we are

The data controller is VOLANTA S.R.L., CUI 55533620, Strada Lunca Sighet nr. 22, 440063 Satu Mare, Romania ("Volanta", "we"). Contact for any privacy matter: richard@volanta.ai.

2. What data we process and why

Garda TVA free checker: files you select are read in your browser and are not uploaded. Only the CUI (company tax code) and date pairs are sent through our server to the public ANAF web service, to answer your request. We do not store these pairs or your files. Public ANAF registry answers (company data, not data about you) may be cached for up to 24 hours. Legal basis: legitimate interest in providing the tool you requested (Art. 6(1)(f) GDPR). Technical data (IP address) is used briefly in memory for abuse rate-limiting and is not logged by us.
Garda TVA accounts: your email address (for passwordless sign-in links and alerts), the companies and supplier CUIs you choose to monitor, sign-in session records, and the alert emails we send you. Public ANAF data about monitored suppliers is stored to detect changes. Legal basis: contract (Art. 6(1)(b)). You can delete your account and all monitoring data at any time from the account page. Payments are processed by Stripe; we receive subscription status and invoice data, which we keep as required by accounting law.
Website statistics: when you open a page, your browser sends us the page path and the hostname of the site that linked to it. We count page views per day, path and referring site. We set no cookies, store no IP address, user agent or identifier, and send nothing to third-party analytics. No request is sent if your browser signals Do Not Track or Global Privacy Control. Legal basis: legitimate interest in understanding which pages are used (Art. 6(1)(f)).
Enquiries you send us by email: to answer you. Legal basis: steps prior to a contract / legitimate interest (Art. 6(1)(b) and (f)).
Customers (once paid plans launch): account and billing data to provide the service and meet accounting and tax obligations, including e-Factura (Art. 6(1)(b) and (c)).
We do not send unsolicited commercial email to recipients where prior consent is required by law, including Romanian Law 506/2004.

3. Website

This website does not use advertising or tracking cookies. The contact form does not send data to our servers: it opens an email in your own mail application. Our hosting provider (Cloudflare) processes technical data such as IP addresses to deliver and secure the site.

4. AI and automation

Volanta builds and operates its software with AI agents supervised by the company administrator. We do not use customer files to train AI models, and no decision producing legal effects on you is made solely by automated means. Garda TVA results are informational and are not tax advice.

5. Recipients and transfers

Processors we use may include Google (Workspace email), Cloudflare (hosting), Stripe (payments), Resend (transactional email), SmartBill (invoicing) and AI model providers. Some may process data outside the EEA; where they do, transfers rely on adequacy decisions (including the EU–US Data Privacy Framework) or Standard Contractual Clauses.

6. Retention

Garda TVA free checker: inputs are not stored; cached public ANAF answers expire within 24 hours. Enquiries: up to 24 months after the last contact. Accounting documents: as long as Romanian law requires (generally 5 to 10 years).

7. Your rights

You have the right to access, rectify, erase, restrict and port your data, to object to processing based on legitimate interest (including direct marketing, at any time), and to withdraw consent. Write to richard@volanta.ai. You may also complain to the Romanian supervisory authority, ANSPDCP (www.dataprotection.ro), B-dul G-ral. Gheorghe Magheru 28-30, Bucharest.

8. Security

We use encrypted connections, least-privilege access and no server-side storage of checker inputs.