Privacy Policy

BOOST PRODUCTION SRL (the "Company") is the data controller of any personal data collected through boostproduction.ro. Contact: service@boostproduction.ro.

1. Data we collect

• Account data: name, email, phone, company name, VAT code and billing address.
• Vehicle data: make, model, year, engine code, VIN, ECU hardware/software ID and the ECU calibration file you upload.
• Transactional data: orders, invoices, payment references (we do not store full card numbers — payments are processed by Stripe).
• Technical data: IP address, browser, device, timestamps, error logs and similar telemetry collected automatically.

2. Purpose & legal basis

• Performance of contract (Art. 6(1)(b) GDPR) — to deliver the Services you ordered.
• Legal obligation (Art. 6(1)(c) GDPR) — invoicing, accounting, fiscal reporting (e-Factura / ANAF), anti-fraud.
• Legitimate interest (Art. 6(1)(f) GDPR) — improving the Service, fraud prevention, securing the platform, ECU-recognition learning database (data is reduced to a technical fingerprint — see Section 5).
• Consent (Art. 6(1)(a) GDPR) — for non-essential cookies and any marketing communication.

3. Retention

Account and vehicle data are retained for the duration of your account plus three (3) years. Invoicing and accounting records are retained for ten (10) years, as required by Romanian fiscal law. Anonymised technical fingerprints used to improve ECU recognition are retained indefinitely. Anonymised analytics may be retained indefinitely.

4. Recipients

We share personal data with: (i) our infrastructure providers (Lovable Cloud / Supabase / Cloudflare); (ii) Stripe (payments); (iii) ANAF (e-Factura, only invoice data required by law); (iv) tuning partners strictly when necessary to deliver your order; and (v) competent authorities where legally required. We do not sell personal data.

5. ECU file learning database

When you upload an ECU file, we extract a technical fingerprint (file format, size bucket, ECU manufacturer, family, hardware and software IDs) plus the vehicle make, model, year and engine you confirm. This fingerprint is stored to improve future automatic recognition. It does not contain your name, contact details or VIN once anonymised, and is not linked to any specific person in the public learning record.

6. International transfers

Some of our processors are established outside the EEA. Where this is the case, transfers are protected by the European Commission's Standard Contractual Clauses or an adequacy decision.

7. Your rights

Subject to the conditions of the GDPR, you have the right to access, rectify, erase, restrict or object to processing of your personal data, the right to data portability and the right to withdraw consent at any time. To exercise any of these rights, write to service@boostproduction.ro. You also have the right to lodge a complaint with the Romanian supervisory authority (ANSPDCP, www.dataprotection.ro).

8. Security

We apply reasonable technical and organisational measures (encryption in transit, access controls, audit logs) to protect personal data. However, no transmission or storage system is fully secure and we cannot guarantee absolute security. Any disclosure of data caused by a third party, a breach of the Client's credentials or events beyond our reasonable control is excluded from our liability, to the maximum extent permitted by law.

9. Changes

We may amend this Privacy Policy at any time by publishing a new version on this page. Where the change is material, we will notify you by email or in-app banner.