Privacy Policy
Last updated: 2026-09-08
This Privacy Policy explains how Umbrela AI ("we") collects and processes personal data when you use our application at umbrela-ai.com, in accordance with the EU General Data Protection Regulation (GDPR).
Data controller: Terra District Consult S.R.L. (CUI 41637370), Str. Nicolae Porumbescu 9A, Cisnădie, Sibiu County, Romania. Contact: contact@umbrela-ai.com.
Data we collect
- Designers (account holders): name, email address, studio name, and the briefing links and briefs you create.
- Billing: when you subscribe, your billing details and subscription status are processed through our payment provider, Stripe. Card details are entered directly with Stripe and are never stored on our servers.
- Clients (briefing respondents): name, email address (optional) and the design preferences submitted in a brief.
- Technical: essential session cookies for login and secure payments; with your consent, analytics and advertising cookies (see our Cookie Policy).
Why we process it (legal basis)
- To provide the service (performance of a contract).
- To process payments and manage your subscription (performance of a contract).
- To send a designer the briefs submitted to their links.
- To keep accounting and invoicing records (legal obligation).
- Analytics and advertising — only with your consent.
Processors we use
- Stripe (payment processing & subscription billing).
- Supabase (database & authentication).
- Vercel (hosting).
- Our email provider (transactional notifications).
- Google (advertising/analytics — only with consent).
Retention
We keep your account data for as long as your account is active. You can delete individual briefs and links at any time, or delete your entire account, which removes all associated data. Billing and invoicing records are kept for the period required by applicable accounting and tax law.
Your rights
You have the right to access, correct, export and erase your data, and to withdraw consent at any time. To exercise these rights, contact contact@umbrela-ai.com. You may also lodge a complaint with your local data protection authority (in Romania, ANSPDCP).