Privacy policy.

In this policy, “we” means Karter Labs, the name under which its founder, Plămădeală Cătălin, works as a private individual based in Chișinău, Republic of Moldova. Karter Labs is not a registered company. We decide how the personal data described here is used, and you can reach us about it at hello@karterlabs.dev.

We process personal data under the personal data protection law of the Republic of Moldova and, where it applies to you, the EU General Data Protection Regulation (GDPR).

The site has no accounts, no analytics, no advertising and no tracking pixels. It sets no cookies and stores nothing in your browser. Fonts are served from our own domain, so no font service sees your visit.

Our hosting provider records standard technical data for each request in its server logs: your IP address, browser type, the page requested and the time. This is needed to deliver the site and keep it secure.

The form asks for your name, how you want us to reply (email or WhatsApp) and the matching email address or phone number, and a message about your business and what you need. Please do not include more personal data than the request needs, and no sensitive data such as health information or identity documents.

The form sends your request to the site’s own server code, which runs on our hosting provider, Cloudflare, and hands it to our email delivery provider, Resend, so that it reaches our inbox. The website does not store it, and no third-party form or database service receives it. Like any web server, it also receives your IP address with the request, which we use only to protect the form against abuse and keep only briefly in memory to limit repeated requests. If the form cannot reach that server, it opens your email app with the same request filled in, and nothing is sent until you send that email yourself.

If you choose WhatsApp, we reply to you on WhatsApp, a service operated by Meta under its own terms and privacy policy.

If you write to hello@karterlabs.dev, we receive your name, email address and whatever you choose to put in the message, such as your company and the system you have in mind. Please do not send more personal data than the conversation needs.

We use personal data only for these purposes, each with its legal basis:

• Delivering the website and keeping it secure: our legitimate interest in running a working, safe site.
• Answering your request, from the form or by email, and preparing an offer: steps you ask us to take before a contract, and our legitimate interest in replying.
• Protecting the form against spam and abuse: our legitimate interest in a secure website.
• Running a project we agree on: performance of the contract.
• Keeping invoices and project records: our legal obligations under accounting and tax law.

None of these purposes relies on your consent, so the form has no consent checkbox. Giving us your details is voluntary, but without a way to contact you we cannot reply. Where we rely on legitimate interest, you can object at any time.

We do not sell personal data, use it for advertising, add you to a mailing list, send you marketing, or make automated decisions about you.

Only the service providers the site, our email and your chosen reply channel need, under their own data processing terms:

• Our hosting provider, Cloudflare, Inc., for the server logs and to run the site’s server code.
• Our email delivery provider, Resend, to deliver project form requests to our inbox.
• Our email service provider, for the emails you send us and our replies.
• Meta, as the operator of WhatsApp, if you choose WhatsApp for our reply.
• If a project starts, our accountant and public authorities, only where the law requires it.

Cloudflare and Resend are based in the United States, so server log data and project form requests may be processed there, and WhatsApp messages may also be processed outside Moldova and the EU. Where a provider processes personal data outside Moldova or the EU, the transfer relies on the safeguards that provider applies under the law, such as the European Commission’s Standard Contractual Clauses.

We keep personal data only as long as its purpose needs:

• Server logs: for the short period set by our hosting provider’s retention policy.
• Form requests and inquiry emails: while the conversation is active, and for up to 12 months after the last message if no project follows. Then we delete them.
• Project and invoice records: for the duration of the project, then as long as accounting and tax law requires.

You can ask us to access, correct or delete your personal data, to restrict or object to how we use it, and to receive the data you gave us in a portable format. Some of these rights have legal limits, for example when the law requires us to keep invoices. Write to hello@karterlabs.dev. We reply within one month.

You can also complain to a data protection authority: in Moldova, the National Center for Personal Data Protection (datepersonale.md); in the EU, the authority in your country, such as ANSPDCP in Romania (dataprotection.ro).

This site is meant for businesses. We do not knowingly collect personal data from children under 16.

If what we collect or how we use it changes, we update this page and the date at the top. Changes that affect you apply from the day they are published here.