Privacy Policy

Effective date:

1) Who we are (Data Controller)

The controller of personal data for the MessAPI website and service is NIROS SOFT SRL.

Legal name: NIROS SOFT SRL
Tax ID (CUI): 39291487
Trade Register No.: J21/231/2018
EUID: ROONRC.J21/231/2018
Registered office: Str. Ștefan cel Mare 6, Bl. O3, Sc. A, Ap. 9, 920080, Slobozia, Ialomița, Romania
Privacy contact: privacy@mess-api.com
Support: support@mess-api.com

2) What data we collect

Account data: name, email address, authentication identifiers, UUID, API tokens.
Usage & technical data: IP address, device/browser information, logs, error reports, analytics in aggregate.
Billing & transaction data: plan, amount, currency, country, tax details, invoice and payment information processed by Gumroad.com (our Merchant of Record). We do not store full card data.
Communications: support requests and their metadata.
Cookies: essential cookies for authentication and functionality; optional analytics/marketing cookies based on consent (if used).

3) Purposes and legal bases (GDPR)

Contract performance: create/manage your account, provide the service, billing, and support.
Legitimate interests: service security, fraud prevention, quality improvement, and statistics in aggregate (balanced against your rights).
Legal obligations: tax and accounting record-keeping.
Consent: optional communications or non-essential cookies. You may withdraw consent at any time.

4) Payments handled by Gumroad.com (Merchant of Record)

We use Gumroad.com as our Merchant of Record (MoR). For purchases, Gumroad.com processes payment information and manages tax/VAT compliance. Receipts and invoices are issued by Gumroad.com. Card/bank statements may display a descriptor set for our store (often including “FS*” plus our name). For buyer assistance regarding charges, invoices, or refunds, please contact us or Gumroad.com Consumer Support.

5) Sharing and international transfers

We share data with service providers (hosting, email, analytics, support, and Gumroad.com for payments) under contracts that include confidentiality and security obligations.
We may disclose data to authorities where required by law.
Where data are transferred outside the EEA/UK, we implement appropriate safeguards (e.g., Standard Contractual Clauses) where necessary.

6) Retention

We keep personal data for as long as needed for the purposes above: for the duration of your account and thereafter as required by applicable law (e.g., tax). Technical logs are retained for shorter periods.

7) Your rights

Subject to law, you have the right to access, rectify, erase, restrict processing, object, and data portability. You also have the right to withdraw consent when processing is based on consent. To exercise your rights, contact privacy@mess-api.com. You may lodge a complaint with the Romanian Data Protection Authority (ANSPDCP) or your local authority.

8) Security

We implement reasonable technical and organizational measures (encryption in transit, access controls, logging). No method is 100% secure; please use strong credentials and keep them confidential.

9) Cookies

Essential cookies are used for core functionality. Non-essential cookies (analytics/marketing) are used only with your consent, where applicable. You can manage preferences via your browser settings or any consent banner provided.

10) Children

MessAPI is not directed to children under the age required by local law to provide valid consent. Do not use the service if you do not meet that age requirement.

11) Changes to this policy

We may update this Privacy Policy periodically. We will post the new version here with the effective date.

Contact

NIROS SOFT SRL
Str. Ștefan cel Mare 6, Bl. O3, Sc. A, Ap. 9, 920080, Slobozia, Ialomița, Romania
Email (privacy): privacy@mess-api.com
Support: support@mess-api.com