1. Data Controller
This Privacy Policy applies to the Ask4Date platform (askfordate.app), operated by a company registered in Romania (European Union). We are subject to the General Data Protection Regulation (GDPR) — Regulation (EU) 2016/679 — and Romanian Law no. 190/2018. The supervisory authority is ANSPDCP (Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal).
For any privacy-related requests or questions, use our privacy request form. Full legal details of the data controller are available in Section 12.
2. Data We Collect
Account data
- Email address and hashed password (or OAuth provider token)
- Display name, profile photo, date of birth (optional)
- Account creation date and last sign-in timestamp
Proposal data
- Creator name and recipient name you enter
- Personal message, selected activities, time slots
- AI-generated text produced for your proposal
- Recipient's selected slot, activity preference, dress code
- Proposal status and completion timestamp
Technical and anti-abuse data
- IP address (collected at proposal creation for free-plan abuse prevention)
- Browser fingerprint via FingerprintJS (free plan only, for anti-spam)
- Device type, browser, operating system (standard server logs)
- Analytics events: proposal opened, response given, slot selected
Payment data
- Stripe customer ID and subscription/session ID
- Plan purchased, amount, date of transaction
- We never store card numbers — all card data is handled exclusively by Stripe.
Important: Proposal content (names, messages, activities) is processed by Anthropic's Claude API to generate personalized text. No proposal content is stored by Anthropic beyond the API call.
3. Photos You Upload
Only accounts on the Single+ or Pack+ plan can upload a photo for an invitation. Nothing in this section applies to anyone else: no photo is collected on the free invitation, on Single, Pack or Monthly, or from a guest without an account.
A photo you upload is a picture of a person — normally you — so it is handled differently from everything else described here, and this section says exactly how.
Before it leaves your device
Your browser re-encodes the image and removes its metadata. Phone photos routinely carry the GPS coordinates of the place they were taken; those are stripped here, and stripped again on our server for any upload that did not come from our own page.
Automated checking
Every photo is checked automatically before it is stored. A photo that does not pass is never saved at all — we keep only a one-way hash of it, so that the same file is recognised if it is submitted again. That hash is deleted after 24 hours. No person at Ask4Date reviews uploads as a matter of course.
What is done with it
- If you choose AI edited, the photo is sent to OpenAI, which returns two styled pictures. You pick one and it appears on the first page of your invitation.
- If you choose Original, nothing is generated and your photo is shown as you uploaded it.
- Your original photo is kept for 90 days, then deleted automatically. We keep it so that we can answer a complaint about a picture — the question is almost always whether it really shows the person it claims to — and so that we can tell whether the AI editing is still producing a true likeness. If a picture is reported, the original is kept until that report is closed. After that only the generated picture remains; it still shows your likeness, so this is a reduction in what we hold, not anonymisation.
- Deleting the photo does not delete the record of it. Which account uploaded it, when, from which address, and what the automated check decided are kept for as long as the invitation exists. That record is how a report can still be answered after the image itself is gone.
- If you chose Original, your photo is the picture, and it is kept for as long as the invitation exists.
Videos
You can upload a short video (up to 15 seconds, MP4) instead of a photo. It is never edited by AI — it plays on the invitation exactly as you recorded it — and because it is the picture itself, it is kept for as long as the invitation exists rather than for 90 days.
The location your camera recorded into the file is blanked out before it is stored. A video cannot be rewritten the way a photo can without re-encoding it, so the coordinates are overwritten in place; the rest of the camera metadata (make, model, capture time) stays, because touching more of the file risks a clip that no longer plays. Every frame is checked automatically before storage, exactly as a photo is.
Where it is kept
Photos and generated pictures are stored in a private Cloudflare R2 bucket whose storage location is set to Europe. They are never placed at a public or guessable address: each time an invitation is opened, the page creates a signed link that expires.
Legal basis
Performance of the contract (Art. 6(1)(b)) — you asked for a picture on your invitation. The automated check before storage, and keeping the original for 90 days, rest on our legitimate interest (Art. 6(1)(f)) in not hosting illegal or harmful material, in being able to answer a complaint about a picture, and on our obligations as a hosting service provider. During those 30 days the original may be viewed by the site operator for those purposes and for no other.
Upload only a photo of yourself. A photo of somebody else without their agreement, or of anyone under 18, is not permitted — see our Community Guidelines. If a picture of you is being used without your permission, tell us through the safety report form and we will remove it. You do not need an account to report one.
4. Legal Basis for Processing (GDPR Art. 6)
| Data type | Legal basis | Article |
|---|---|---|
| Account creation & management | Performance of a contract | Art. 6(1)(b) |
| Proposal creation and delivery | Performance of a contract | Art. 6(1)(b) |
| Payment processing | Performance of a contract | Art. 6(1)(b) |
| IP address & fingerprint (anti-abuse) | Legitimate interest | Art. 6(1)(f) |
| Analytics events | Legitimate interest | Art. 6(1)(f) |
| Financial record keeping | Legal obligation | Art. 6(1)(c) |
| Email marketing (if opted in) | Consent | Art. 6(1)(a) |
Marketing emails are sent only to people who have ticked the optional opt-in box at signup or in the invitation builder. That box is never pre-ticked, and it is separate from accepting these Terms. Addresses given to us purely to receive notifications about your own invitation are not used for marketing. You can withdraw consent at any time from Account settings, without affecting the transactional emails about your own invitations.
5. How We Use Your Data
- Create and manage your account
- Generate AI-personalized proposal pages through Claude API
- Send confirmation emails and proposal invitations via Resend
- Process payments and manage your subscription plan via Stripe
- Prevent abuse and duplicate free invitations (IP + fingerprint checks)
- Provide real-time proposal analytics to creators
- Comply with legal and fiscal obligations (Romanian accounting law)
- Improve and secure the platform
We do not sell your personal data. We do not use your data for automated individual decision-making with legal effects as defined in GDPR Article 22.
7. International Data Transfers
Several of our processors are located in the United States. Transfers to the US are carried out under Standard Contractual Clauses (SCCs) adopted by the European Commission pursuant to GDPR Article 46(2)(c), ensuring an adequate level of protection.
Stripe processes payments through its Irish entity (Stripe Payments Europe, Limited), which is subject to EU data protection law directly.
8. Data Retention
| Data | Retention period | Reason |
|---|---|---|
| Account & profile data | Until account deletion + 30 days | Contract performance |
| Proposal content | Until account deletion | Contract performance |
| Payment records | 5 years after transaction | Romanian fiscal law (Legea contabilității) |
| IP address logs | 90 days | Security & anti-abuse |
| Browser fingerprint | 90 days | Anti-abuse (legitimate interest) |
| Analytics events | 24 months | Legitimate interest |
| Uploaded photo (AI edited) | 90 days, or until a report about it is closed | Handling complaints & checking output quality (legitimate interest) |
| Upload record (who, when, address, check result) | Until the invitation is deleted | Handling complaints & anti-abuse |
| Uploaded photo (used as-is) | Until the invitation is deleted | Contract performance |
| Generated picture | Until the invitation is deleted | Contract performance |
| Uploaded video | Until the invitation is deleted | Contract performance |
| Hash of a refused photo | 24 hours | Preventing immediate re-submission |
When you delete your account, we delete or anonymize all personal data within 30 days, except where retention is required by law (e.g. financial records).
9. Your Rights Under GDPR
As a data subject you have the following rights, exercisable free of charge:
- Right of access (Art. 15) — request a copy of all data we hold about you
- Right to rectification (Art. 16) — correct inaccurate or incomplete data
- Right to erasure (Art. 17) — request deletion of your data ("right to be forgotten")
- Right to restriction (Art. 18) — restrict processing while a dispute is resolved
- Right to data portability (Art. 20) — receive your data in a structured, machine-readable format
- Right to object (Art. 21) — object to processing based on legitimate interest
- Right to withdraw consent — at any time, where processing is based on consent
To exercise any right, submit our privacy request form. We will respond within 30 days as required by GDPR Article 12.
What we keep after an erasure, and why. When we erase your data we retain a one-way cryptographic hash (SHA-256) of your email address — not the address itself, which is deleted. We cannot read it or recover your address from it. It exists for two reasons: so that we can honour the erasure and never contact you again, and so that the free invitation stays one per person. The free invitation is a one-time offer, and erasing your data does not reset it. This never affects paid plans: you can always purchase, and exercising a data-protection right will never prevent you from doing so. Legal basis: legitimate interest in preventing abuse (Art. 6(1)(f), Recital 47).
Right to lodge a complaint: You have the right to lodge a complaint with the Romanian supervisory authority — ANSPDCP (Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal) at www.dataprotection.ro, or with the supervisory authority of your EU country of residence.
10. Security
We implement appropriate technical and organizational measures to protect your data, including:
- All data transmitted over HTTPS/TLS encryption
- Passwords hashed using bcrypt (managed by Supabase Auth)
- Database access restricted via Row-Level Security (RLS) policies
- Payment data handled exclusively by PCI-DSS compliant Stripe
- API keys and credentials stored as environment variables, never in code
- Rate limiting on all sensitive endpoints
In the event of a personal data breach that poses a risk to your rights, we will notify ANSPDCP within 72 hours and affected users without undue delay, as required by GDPR Article 33-34.
11. Children's Privacy
Ask4Date is not directed to persons under the age of 16. We do not knowingly collect personal data from children under 16. If you are a parent or guardian and believe your child has provided us with personal data, please contact us through our privacy request form and we will delete that data promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify registered users by email and update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.
13. Contact
For any privacy-related questions or to exercise your rights:
- Privacy requests: privacy request form
- General support: support form or the chat on any page
- Supervisory authority: ANSPDCP — www.dataprotection.ro
Ask4Date is a product of Black Keno S.R.L., a company registered in Romania under CUI 46207811, Trade Register no. J2022003445231, with registered office at Str. Tudor Arghezi nr. 7, Mangalia, Constanța, Romania, European Union.