Data Deletion Instructions

Your right to data deletion

Under the General Data Protection Regulation (GDPR), you have the right to request the deletion of your personal data ("right to be forgotten"). S.C. NORTEC BLANC S.R.L. ("Contera") is committed to processing your request promptly.

How to request data deletion

You can request deletion of your data in the following ways:

• From the Platform: sign in, go to Settings → Profile and press "Solicită ștergerea contului" (Request account deletion). You will immediately receive a confirmation email; the erasure will be completed within 30 days in line with Article 17 GDPR. You can cancel the request at any point during that window from the same page.
• By email: alternatively, send a request to contact@contera.ro with the subject "Data Deletion Request". Please include your registered email address and company Tax ID (CUI) so we can identify your account.

What data will be deleted

Upon a valid deletion request, we will permanently delete:

• Your account information (name, email, phone number)
• Imported accounting data (CSV files, invoices, balance sheets)
• Banking data obtained through Open Banking connections
• WhatsApp conversation history with our AI assistant (Max)
• ANAF connection tokens and synced data
• Dashboard configurations and saved reports

Exceptions: Certain data may be retained as required by law (e.g. billing records for 10 years under the Romanian Fiscal Code) or on the basis of our legitimate interest in security (the administrative audit log, per our internal policy). This data is deleted when the applicable retention period ends.

Processing timeline

We will acknowledge your request within 48 hours and complete the deletion within a maximum of 30 days, in accordance with GDPR requirements. You will receive a confirmation email once the deletion has been completed.

Third-party data

Upon receiving your request, we will forward the deletion instruction to the relevant processors (our hosting, AI model, payment processing, transactional email and analytics providers), each of which is contractually obliged to honour such requests within their own timelines.

For WhatsApp communications, messages stored by Meta Platforms, Inc. are subject to WhatsApp's Privacy Policy and their own retention and deletion processes. We will delete all WhatsApp data stored on our own servers.