Privacy notice
What Actessia processes, why, for how long, where, and your rights, for visitors to this site and for the end users of the products it runs in.
Last updated: 14 September 2026. Digital Current SRL, Romania, the company that operates Actessia, is the controller for this website and a processor for the products the assistant runs in.
This website
We collect what you type into the pilot form (name, work email, company, product URL, end-user count, whether your users are technical, an OpenAPI URL, notes) and a hashed form of your network address to limit abuse. We use it to reply to you and to prepare the first call; we keep it for 12 months or until you ask us to delete it. We do not run advertising trackers and the site works without cookies; the pilot form sets none.
The assistant on a customer's product
When you talk to an assistant on a company's website, that company is the controller and we are its processor under a data processing agreement. On its behalf we process:
- the conversation, and the page context the company chose to attach;
- for signed-in users, the identity the company's server signed (an id, and where the company chose, an email, a name, a plan);
- the actions the assistant performed through the company's own API, with their arguments and results, in an audit log the company can read.
Transcripts are redacted before long-term storage (card numbers, IBANs, emails, phone numbers, addresses, tokens); the original is encrypted under a key specific to that company and can be revealed only by the company's administrators, with a reason, in a way that is itself logged. Retention is set by the company, 90 days by default, with hard deletion.
Where it is processed
Customer data is stored in the European Union. For a model to answer, the conversation and the passages retrieved from the company's documents are sent to the model provider (Anthropic, United States) and to the embeddings provider (Voyage AI, United States) under data processing terms that do not retain the content. The signed identity's credential never leaves our broker. The full list is on the sub-processors page.
Your rights
Access, rectification, erasure, restriction, portability and objection, as the GDPR provides. For a conversation on a company's product, write to that company; we act on its instruction and have a deletion endpoint for exactly this. For anything about this site, write to privacy@actessia.ai. You may complain to the Romanian supervisory authority (ANSPDCP) or the one where you live.
Changes
We will note material changes here with the date above.