LEGAL / Updated 13 October 2026
Privacy policy
Protecting personal data is part of how we build trusted relationships. This notice explains transparently what information we use, why it is needed and which rights you have.
The data controller responsible for keystudio.md and communications initiated through its services.
- IDNO
- 1026023135485
- Registered office
- 6C Calea Ieșilor Street, Chișinău, MD-2069, Republic of Moldova
- Contact
- salut@keystudio.md
Who processes your data
Glavan Holding SRL is the controller of personal data processed through keystudio.md and contact channels managed by keystudio. We determine the essential purposes and means of processing and seek to use data lawfully, fairly and transparently.
For questions, rights requests or information about specific processing, contact salut@keystudio.md. To protect personal data, we may request reasonable information confirming the identity of the person making the request.
Data we may collect
We may collect identity and contact data such as name, email, telephone number and company; project information such as the objective, website, timing, budget and message; and information you choose to include in a conversation with Kiro.
Depending on the interaction, we may process the selected language and page visited, locally stored preferences and technical data generated by the infrastructure: IP address, browser type, request date and time, technical identifiers and security logs. To measure website functions, we record the event, language, page, service and interaction source without including the question text, name, email, telephone number or profile identifiers in these records. Please do not include passwords, payment details, identity documents or other sensitive information unless we have expressly provided a secure channel.
How the form and Kiro work
The main form temporarily stores information in sessionStorage and prepares a message in your email application; final transmission is completed through your chosen email provider. Data is not automatically sent to keystudio merely by filling in the fields.
The Kiro conversation is stored in sessionStorage for the session and sent to the /api/agent technical endpoint to generate a response. If verified information is insufficient, the system may retain a short anonymous topic summary to improve the website content; the full message, conversation and contact details are not included in this review log. Only when you explicitly select “Send to keystudio” are contact details, consent and project information sent through /api/lead so the team can reply.
Purposes and legal grounds
We process data to answer enquiries, understand a project, prepare a proposal, initiate or perform a contract, provide and improve Kiro functions, measure important interactions, secure the website, prevent abuse and meet legal obligations. We do not use form, Kiro or first-party measurement data for behavioural advertising.
The legal basis depends on context: steps taken at your request before a contract, performance of a contract, legitimate interests in service administration and security, consent where requested, and compliance with a legal obligation. Where we rely on legitimate interests, we assess necessity and the impact on your rights.
Local storage and necessary technology
We use localStorage to remember the selected language and sessionStorage for form state and the Kiro session. These technologies support user-requested functions and are not used here for advertising profiling. You may remove them in browser settings, although preferences and temporary data will be lost.
Conversion measurement uses a first-party endpoint and does not use advertising cookies or identifiers to track people across websites. Fonts are loaded from Google Fonts, and the infrastructure may transmit technical data to Google as required to deliver these resources. If optional analytics or marketing technologies are introduced, we will update this notice and request consent where required by law.
Recipients and transfers
Data may be accessed only by people and providers who need it for the requested service. These may include Cloudflare for hosting, security and serverless functions, email providers and the technical infrastructure used by Kiro. Providers process data within their role and applicable terms.
If you open WhatsApp, Instagram, keypoint.md or another external service, that platform processes data under its own policy. Some providers may operate outside the Republic of Moldova; in such cases we seek an appropriate legal basis and safeguards required by applicable law.
Retention
Data stored locally in the form and Kiro conversation generally remains only for the browser session. Enquiries explicitly sent to keystudio through Kiro are retained for up to 90 days. Anonymous topics from unanswered questions are retained for up to 90 days, while technical conversion events without contact data are retained for up to 180 days, unless the law requires a different period.
Correspondence, proposals and contractual documents may be retained as needed for the business relationship, accounting obligations, legal claims and dispute resolution. Technical logs are retained under infrastructure provider settings and periods. At the end of the applicable period, data is deleted, anonymised or archived as legally required.
Your rights
Subject to legal conditions, you may request information and access, correction of inaccurate data, deletion, restriction, portability, objection and withdrawal of consent. Withdrawal does not affect the lawfulness of processing carried out beforehand.
Send your request to salut@keystudio.md and describe the right you wish to exercise clearly enough. We will respond within applicable legal conditions and deadlines. If you believe your data was handled improperly, you may complain to the National Centre for Personal Data Protection or apply to a competent court.
Security and children
We apply technical and organisational measures proportionate to the nature of the data and processing risks, including access limitation, infrastructure protection and data minimisation. Measures are reviewed when functions or risks change.
No online service can provide absolute security. Do not send passwords, bank information or sensitive documents through the form or chat. The website and presented services are not deliberately directed to people under 18, and we do not knowingly seek to collect their data.
Changes and contact
We may update this notice when website functions, providers, processing practices or the legal framework change. The latest date appears at the top, and material changes will be communicated by an appropriate method.
For further information, rights requests or notification of a possible security issue, contact salut@keystudio.md or the Glavan Holding SRL registered office stated above.
Official legal sources
The official sources below were consulted for the data protection and online services framework. The links allow direct verification of legislation and the competent authority.