BR TEAM PRO SRL, IDNO 1018600004310, Chisinau, Republic of Moldova (“Stars.md”, “we”) is the controller for data processed through stars.md. This policy describes processing under Moldova Law No. 195/2024 on personal data protection. Contact us at info@stars.md.

1. Data, purposes and legal bases

• Strictly necessary technical data — IP address, browser, security logs and session cookie, for operation, fraud prevention and security (legitimate interest/legal obligation).
• Account and service-use data — authentication, entered data and feature history, to provide the service and perform a contract.
• Demo request data — email, plan, timestamp, IP and browser, solely to respond to the request and create demo access, based on explicit consent. The IP address and browser stay in our database only. We retain proof of consent.
• Analytics and external widgets — enabled only after consent; consent may be withdrawn at any time via “Cookie settings” in the footer of every page, or by contacting us.

2. Cookies

Essential cookies support session, security and your cookie choice. Analytics/marketing cookies and external services are not loaded before acceptance. Accepting and refusing are equally easy; refusal does not affect essential functions. Your choice is retained for up to 180 days. You can change it at any time from the “Cookie settings” link in the footer of every page: it re-opens the same banner, withdrawing consent is likewise a single click, and withdrawal deletes analytics identifiers already stored.

3. Recipients and transfers

We share data only with necessary providers: the Stars.md application provider, Cloudflare Turnstile for form security, Telegram for internal demo-request notifications (which carry only the email address and the requested plan) and, after consent, Google Tag Manager/services configured in it and the chat widget. Before enabling a provider outside Moldova, we document the applicable international-transfer safeguards, including standard contractual clauses where required.

4. Retention

Account data is retained while the account is active and as required by law. Demo requests and consent evidence are retained in our database for no more than 12 months and are deleted automatically, unless longer retention is needed to establish, exercise or defend legal claims. The internal Telegram notification (email and plan) remains in the internal working channel until deleted manually. Technical logs are kept for the minimum security period.

5. Your rights

Subject to law, you may request access, rectification, erasure, restriction, objection, portability and withdrawal of consent without affecting earlier lawful processing. Email us using the address above. You may also complain to Moldova’s competent personal-data protection authority.

6. Security and updates

We apply proportionate technical and organisational safeguards, including access controls, encryption in transit and access limitation. We will update this policy when processing or legal requirements change.