/
Log inGet started

This policy explains how ELECTRICODE S.R.L., the operator of Repluxa, collects and uses personal data when you visit the website, create an account, or connect an email address.

1. Data controller

The controller is ELECTRICODE S.R.L., Romanian tax ID 49893781, Trade Register no. J2024001286223, registered at Fundacul Sf. Teodor no. 1, 700117 Iași, Romania. Contact us about personal data at [email protected].

2. Data we process

  • account data: name, email address, password stored only as a hash, and company;
  • company details and reply-style preferences;
  • mailbox connection data: email addresses, identifiers, OAuth tokens, and encrypted IMAP/SMTP credentials;
  • content and metadata of messages fetched at your request, including senders, recipients, subjects, and replies;
  • information submitted through the contact form;
  • technical and security data such as IP address, access logs, browser information, and anti-spam verification results.

3. Purposes and legal bases

  • creating accounts, connecting addresses, fetching and sending email — performance of our contract;
  • answering enquiries and taking pre-contractual steps;
  • security, abuse prevention, diagnostics, and service improvement — legitimate interests;
  • compliance with tax, accounting, and other legal obligations;
  • optional uses that require your permission — consent, which you may withdraw.

4. Email and integrations

Repluxa accesses only connected mailboxes and only within the permissions you grant. Data is used to provide features requested by the customer. For personal data contained in company messages, the customer is normally the controller and ELECTRICODE S.R.L. acts as processor under the customer’s instructions. The customer must have a lawful basis and provide required notices to data subjects. Tokens and credentials are protected through technical measures, including encryption. Disconnecting a mailbox stops future access; deletion of previously imported data may be requested separately.

5. Providers and recipients

We may use providers for hosting, databases, security, anti-spam protection, and message delivery. Our main infrastructure is currently hosted in the European Union through Hetzner, while Cloudflare provides DNS, security, and Turnstile. Google, Microsoft, or your hosting provider processes data when you choose its integration. We do not sell personal data.

6. International transfers

Some providers may process data outside the European Economic Area. Where applicable, we rely on GDPR-recognized safeguards such as adequacy decisions or Standard Contractual Clauses.

7. Retention

Account data is retained during the contractual relationship and afterwards where needed for legal duties or disputes. Imported messages and mailbox data are retained until deleted by the customer, the account is closed, or applicable operational periods expire. Security logs are kept for limited periods proportionate to their purpose.

8. Cookies

We use cookies strictly necessary for authenticated sessions, security, and remembering your language choice. Cloudflare Turnstile may process technical information for abuse prevention. We currently use no advertising or profiling cookies.

9. Your rights

You may request access, correction, deletion, restriction, portability, or object to processing, and may withdraw consent. Email [email protected]. You may also lodge a complaint with the Romanian data protection authority or your local supervisory authority.

10. Security and updates

We use access controls, encryption, password hashing, secure connections, and reasonable backups. No system can guarantee absolute security. We may update this policy when the service or legal requirements change; the current version will appear on this page.