Privacy policy

This site is operated by DCI Brands LLC, a Wyoming limited liability company. For the information described here we are the controller. Write to constantine@vavusai.com. Our representative in the European Union under GDPR Article 27 is Dragoș Ignat, Str. General Șova nr. 21, Letea Veche, jud. Bacău, 607270, Romania. You may contact the representative on any matter relating to the processing of your personal data, in addition to or instead of contacting us. We are not required to appoint a data protection officer and have not appointed one.

Inquiries. What you type into the quote form: name, email address, company, role, the system and platforms you are interested in, delivery mode, integrations, whether data must be migrated, timeline, budget range, and any notes. We use it to prepare and send your quote, to follow up, and to run the engagement if you proceed. Basis: steps taken at your request before entering a contract, and our legitimate interest in responding to business inquiries.

Email. Correspondence you send us, and our replies. Basis: the same, and our legitimate interest in keeping a record of what was agreed.

Server logs. IP address, page requested, browser type, and time, recorded by our hosting infrastructure for security and reliability. We do not use them to profile visitors. Basis: our legitimate interest in keeping the site available and secure.

You do not have to give us any of this. If you leave out contact details or scope, we cannot quote. We make no automated decisions that produce legal or similarly significant effects. We do not collect sensitive personal information, we set no cookies, and we run no analytics or advertising trackers.

Almost everything comes from you. Where you name a colleague or a third party in the form or in an email, we hold that person's details because you supplied them, we use them only to run the same inquiry, and we apply this policy to them. If you are that person, write to us and we will tell you what we hold.

We do not sell personal information, we do not share it for advertising or cross-context behavioral advertising, and we do not disclose it for anyone else's independent purposes. We use service providers who process it only on our written instructions: cloud hosting (United States), transactional email delivery, and a database provider. A named list is available on request. We may also disclose information where the law requires it, to enforce our agreements, to protect our rights, safety, or property, and to a buyer in connection with a sale of the business, under confidentiality.

We are in the United States and store this information there. If you are in the European Economic Area, the United Kingdom, or Switzerland, your information is transferred to us in the United States. That transfer relies on the European Commission's standard contractual clauses, together with the UK International Data Transfer Addendum and the Swiss amendments where they apply, and on supplementary measures we assess as appropriate. Ask us and we will send you a copy of the safeguards. Engagements that must keep data in a specific region are scoped that way in the written quote.

Inquiries that do not become an engagement: deleted 24 months after the last contact. Records of an engagement: for the life of the contract and for seven years afterward, or longer where tax, accounting, or limitation rules require. Server logs: 90 days. Backups are overwritten on their ordinary cycle.

We protect this information with encryption in transit, access limited to named people who need it, logged administrative access, and secure deletion. No method of transmission or storage is completely secure, and we do not promise that ours is.

Depending on where you live, you may ask us to confirm and give you access to what we hold, correct it, delete it, give you a portable copy, restrict or object to processing, and withdraw consent where consent is the basis. You also have the right not to be discriminated against for exercising any of them.

Write to constantine@vavusai.com. We will verify your identity against what we already hold before we act, and you may use an authorized agent with written proof of authority. We answer within the time the applicable law allows, one month under the GDPR and 45 days under US state laws, and we will tell you if we need the extension those laws permit.

If we refuse a request, you may appeal by replying to our decision with the word "appeal". We will review it and give you a written answer, with reasons, within 45 days. You may also complain to your data protection authority or to your state attorney general.

We collect the categories of identifiers (name, email, IP address), commercial information (the project, timeline, and budget range you describe), internet activity (server logs), and professional information (company, role). We collect them from you and from our hosting provider's logs, for the business purposes in section 2: responding to inquiries, quoting, contracting, delivering, security, and legal compliance. We disclose them only to the service providers in section 4. We have not sold or shared personal information and we do not process it for targeted advertising, so there is nothing for an opt-out or a Global Privacy Control signal to switch off. We do not collect sensitive personal information, and there is nothing to limit.

When we build, host, or maintain a system, the personal data inside it is yours. You are the controller and we are your processor or service provider, governed by the signed data processing agreement, not by this policy. If you are a user of one of those systems, contact the organization that runs it; if you contact us, we will pass your request to them.

This site is for business buyers. We do not knowingly collect information from anyone under 16. If you believe a child has sent us information, write to us and we will delete it.

If this policy changes, the effective date and version above change with it. Where a change materially affects an open inquiry or engagement, we tell you by email.