Privacy Policy.

1. Who processes data and with what role

CLOUDENYX SRL
Registered office: Strada Gabroveni 61, 030167 Bucharest, Romania
VAT number: RO52632905 · Tax code: 52632905 · Business register: J2025075824009
Email: get@leady.it

CLOUDENYX SRL is owner by site, demo requests, accounts, contract, assistance, security and payments. When a customer company uses Leady.it to manage its leads, the company decides purposes and methods and is normally the owner; CLOUDENYX SRL is responsible for the contract and instructions received.

The processing is governed by the Regulation (EU) 2016/679 (GDPR) and, as applicable to the holder established in Romania, by the Romanian Law no. 190/2018.

2. What data we process

• Site and contacts: name, company, e-mail, optional phone, message and technical data necessary for safety and operation.
• Account and contract: identity and role of users, business and tax data, accesses, preferences, requests for assistance, plan and payment references.
• Managed data for customer companies: identity and contacts of leads, source and proof of demand, WhatsApp conversations, preliminary prequalification responses, appointments and documents expressly requested by the flow.
• Medical and dental practices, only when activated with a specific agreement: contact data, study or service required, customer status and day and hourly preferences. This administrative data may also reveal health information.
• Cookies: details are in Cookie Policy.

Health models do not require symptoms, diagnosis, anamnesi, therapies, prescriptions, referts or clinical documents and do not perform triage. Biometric, judicial, minor and other special categories are excluded from the standard service.

3. Purposes and legal basis

• Answer, organize a demo, create and provide the account: pre-contractual request and execution of the contract.
• Payments, invoices and administrative obligations: contract and legal obligations.
• Security, prevention of abuse and protection of rights: legitimate interest and security obligations, balanced with people's rights.
• Lead and conversations: legal and informative basis are defined by the customer company; depending on the case may be pre-contractual request, consent or other basis permitted by law.
• Medical and dental appointments: the customer company defines the applicable condition for health data, specific information, necessary fields and storage time.

When consent is necessary it can be revoked at any time, without making the activities already carried out illegal.

4. AI Assistant and Human Control

Leady.it uses an AI assistant to formulate questions and understand answers. The person is notified in the first message and can ask at any time to speak with an operator. The AI does not calculate creditworthiness, does not approve or reject funding and does not make final decisions. In the medical, dental and veterinary sectors, it does not make triage and does not manage urgencies: organizes only general information, appointments and recounts under human control.

5. Suppliers and recipients

We use strictly necessary suppliers: the European provider of hosting, mail and backup; Meta for WhatsApp Business and Lead Ads; Google for Gemini and Firebase; Stripe for payments; Cloudenyx Customer Area for assistance, reconciliation and billing. They only receive the data necessary for their service and operate according to the applicable roles, contracts and privacy agreements. Any group companies may access only on the basis of a defined role, an appropriate agreement and nominative permissions. We do not sell or diffon personal data.

6. Where data are processed

The data are hosted in the European Union. Meta, Google and Stripe can use international infrastructure; any transfers outside the European Economic Area only occur with a decision of adequacy, standard contractual clauses or other guarantee provided by the GDPR.

7. How long we keep data

• lead and conversations: 30, 90, 180 or 365 days according to the company's documented choice; initial value 90 days;
• medical or dental appointment requests: 30 recommended days; a higher duration must be necessary and documented by the holder;
• documents: as a rule 30 days and however not beyond the expiration of the lead;
• account: duration of the contract and technical period up to 90 days, subject to legal obligations;
• requests for demo and contact: usually 12 months after closing the request; longer only if a contractual relationship arises, the law imposes it or serves to protect a right;
• assistance: usually 24 months after closing;
• safety records: as a rule 12 months, longer only for an accident or a documented obligation;
• tax data: for the period imposed by the applicable legislation.

Expired data is deleted automatically where expected. Backup copies come out by rotation; if a copy is restored, deadlines are applied again before reopening the service.

8. How we protect data

We apply encryption, separation between companies, access by role, enhanced authentication, activity registration, private files, document control, minimization to suppliers, automatic deletion, separate backups and periodic verifications. No measurement eliminates any risk; accidents and requests are managed with defined procedures and responsibilities.

9. Rights and contacts

You can request access, rectification, cancellation, limitation, opposition and portability, revoke your consent and contest an automated decision. For data collected by a company through Leady.it contact the company indicated in the information received: we will assist you in the answer. For data processed directly by CLOUDENYX SRL write to get@leady.it.

You can also lodge a complaint withAuthorita Națională de Supraveghere in Prelucrării Datelor cu Caracter Personal (ANSPDCP) or the competent supervisory authority in your country. We usually reply within a month in cases provided by the GDPR.

10. Changes

We update this information when changing purposes, data, suppliers or applicable rules. The current version and date are always indicated on this page; the relevant changes are communicated to the accounts concerned.