- We store nothing on your device. The site uses no cookies and loads nothing from third parties.
- We don't sell data, show ads or build profiles.
- We see what your assistant (Claude, ChatGPT) searches in Adeveri. Your conversation stays with it.
- You can download your data or delete your account at any time from your account page.
1. Who we are
Adeveri (adeveri.com) is run by STEMDARK S.R.L., registered office Str. Sg. Constantin Moise nr. 5D, bl. 2, sc. 2, ap. B5, sector 6, 061421 București, Trade Register no. J2023023617404, tax code RO49256843. We decide how and why the data described here is used, so we are its controller. Write to [email protected] with any question about your data.
2. What we process, why, and for how long
| What | Why | Legal basis | How long |
|---|---|---|---|
| Your account: email, password (only as an Argon2 hash, never in plain text), your two-step sign-in secret (encrypted), recovery codes (hashed), sign-in methods (the Google or Facebook identifier and the email they give us), when you joined and last signed in | To give you an account and sign you in safely | Contract (GDPR art. 6(1)(b)) | While you have an account. Deleted within 30 days of closing it, and from backups within 35 |
| Connected apps: which app (Claude, ChatGPT), when you connected it and last used it, tokens (hashed only) | So the app can search on your behalf and you can disconnect it | Contract | Until you disconnect it or delete your account |
| Connections without an account: a random identifier per connection, not linked to you as a person | Limits for use without an account | Legitimate interest (art. 6(1)(f)): keeping a free service from being abused | 90 days after last use |
| Searches: what the assistant sends to Adeveri (search terms, articles requested), the app, and the user identifier it sends. We keep the shape of each search, and the full text only of searches that found nothing | To answer, find errors and improve search | Contract; legitimate interest for improvements | Server logs: 30 days. Telemetry: 60 days. Errors: 30 days |
| Court file search: when the assistant searches by a party's name, the name reaches us and the service that queries the courts' portal | To find the files asked for, from public sources | Legitimate interest (access to public information about justice) | As for searches |
| Technical data: IP address, browser or client type, time of request | Security, limits, troubleshooting | Legitimate interest | 30 days |
| Your messages: what you send us by email or through the app's feedback function | To reply and fix what you report | Legitimate interest | Until resolved, then at most 12 months |
| Billing (once paid plans exist, through the merchant of record) | Accounting obligations | Legal obligation (art. 6(1)(c)), Law no. 82/1991, art. 25 | 5 years from 1 July of the following year |
Your assistant decides what it sends to Adeveri. If you give it personal data (yours or someone else's), it may put it in a search. When it isn't needed, leave it out.
3. What we don't do
- We don't sell or rent data.
- We don't advertise or work with ad networks.
- We don't make automated decisions with legal effects on you (GDPR art. 22).
- We don't put your email in telemetry. There you are only a random identifier.
4. Cookies and storage on your device
We use no cookies, local storage or any other technology that stores or reads information on your device. That is why we don't ask for your consent to them (Law no. 506/2004, art. 4(5)). Fonts, images and scripts all come from adeveri.com.
If you choose to sign in with Google or Facebook, you go to their pages, which set their own cookies under their own rules.
5. Who else receives data
We work with providers that process data only on our instructions, under data processing agreements:
| Provider | For | Where |
|---|---|---|
| Pidgin Host | The server that runs Adeveri and accounts | Romania |
| Cloudflare, Inc. | Network and attack protection; all traffic passes through it | Global, including the US |
| Functional Software, Inc. (Sentry) | Error reports and uptime checks | EU (Germany) |
| Hound Technology, Inc. (Honeycomb) | Telemetry, only to make sure the service works: how long requests take and where problems appear. We do not use it to track people | US |
| Sendinblue SAS (Brevo) | Confirmation and password reset emails | EU (France) |
| Scaleway SAS | Encrypted backups of accounts | EU (France) |
| DosarJust (dosarjust.ro) | Searching court files | Romania |
Separately, some recipients decide for themselves what to do with data, under their own policies: Anthropic (Claude) and OpenAI (ChatGPT) for your conversations with their assistants, and Google and Meta if you sign in with them. From Google or Meta we receive only an identifier and your email address.
We give data to authorities only when the law requires it, and only as much as it requires.
6. Transfers outside the EU
Cloudflare and Honeycomb may process data in the US. These transfers rely on the EU–US Data Privacy Framework, under which both companies are certified. Ask for a copy of the safeguards at [email protected].
7. Your rights
You can ask to see the data we hold about you, have it corrected or erased, restrict its use, or receive it in a machine-readable format. You can object at any time to processing based on legitimate interest, including when your name appears in court file searches.
You can do much of this yourself on your account page: download your data, disconnect apps, delete your account. For anything else, write to [email protected]. We reply within one month.
Send these requests by email, not through the app's feedback function. Feedback reaches us anonymously, so we can't tell it's yours or reply to it.
If you think we got something wrong, you can complain to Romania's data protection authority, ANSPDCP (dataprotection.ro), B-dul G-ral. Gheorghe Magheru 28–30, sector 1, Bucharest, or to the authority where you live or work.
8. How we protect data
Connections are encrypted (HTTPS). Passwords are kept only as Argon2id hashes. App tokens expire after 15 minutes, and refresh tokens are kept only as hashes. Backups are encrypted. If a breach that puts you at risk happens anyway, we will write to you and notify the authority within 72 hours.
9. Minimum age
Accounts are for people aged 16 or older. If you learn that a younger child has made an account, tell us and we will delete it.
10. Changes
When we change something important, we write to account holders at least 30 days ahead and announce it on the site. Past versions stay published, with their dates.
