Last updated: 21 October 2026
This policy explains what personal data ElectricalVPF ERP collects, why, for how long, who else may see it, and what rights you have under Regulation (EU) 2016/679 ("GDPR"). The data controller is fully identified in the Legal Notice.
The data controller under GDPR is ION DORU-VALENTIN PERSOANĂ FIZICĂ AUTORIZATĂ — see full identification and contact details in the Legal Notice.
We only collect data strictly necessary to operate the account and the service, verified directly against the application's database structure:
Payments are processed entirely by Stripe. We never store or see your full card details — see section 4.
ElectricalVPF ERP is a management tool for electrical contracting businesses. Data about the clients, work, quotes and invoices you enter into your account (your clients' names, addresses, contact details) is your own business data — you are the controller of that data towards your clients, while ElectricalVPF ERP acts as a processor for its technical storage/processing.
We do not use cookies or tracking technologies for behavioural analytics or advertising — see the Cookie Policy for full detail.
When you create your account from our public website (electricalvpf.app or electricalvpf.eu), we store with your account, once, the source of the visit in which you clicked the account-creation button (for example “Start Free”):
utm_source, utm_medium, utm_campaign, utm_content, utm_term), if present;For this we use no cookies, localStorage, sessionStorage, fingerprinting or any other form of storage on, or identification of, your device: the information travels only through the sign-up link, within the same visit.
If you later pay for your first PRO subscription, we link this source to that first payment as confirmed by Stripe (date, amount, currency, monthly or yearly, whether a discount applied, and the Stripe identifiers of the invoice and of the subscription), to measure which channels bring paying customers (legitimate interest — see section 3). In the administration panel the results appear only as totals per channel. We do not sell this data, use it for advertising or pass it to anyone else; like the rest of your account data, it is stored only with the technical providers listed in section 4.
When you open the payment for your first PRO subscription in the app, we also note what led to that step: the place in the app from which you went to the plans (for example the PRO window of the Contracts module, or Settings → Subscription) and which Free plan limits you had already reached at that moment (for example the number of clients or quotes). This information only travels through the link inside the app, with no cookies or other storage on your device. We keep it with the payment request and, if Stripe confirms the payment, with the record of the first payment, to learn which features convince users to move to PRO (legitimate interest — see section 3). The same retention, deletion and objection rules below also apply to this data.
We keep this data for as long as your account exists. When you delete your account, both the sign-up source and the record of the first payment are deleted from our database together with the account (backup copies are handled as described in section 6). The payment itself remains recorded with Stripe, our payment processor (section 4).
You can object to this processing at any time by email, at the address in the Contact section (sections 7 and 11). We will then delete the sign-up source and the first-payment record linked to it, and we will not record them again for your account, including on a later payment. We keep only a note that you objected (your account and the date), so that we can respect your choice; it is deleted together with your account.
Separately from user accounts, ElectricalVPF contacts electrical installation businesses by email to introduce the app. We only contact companies (legal entities, for example a limited company — Ltd — in the United Kingdom); we do not send such emails to individuals (for example sole traders).
What data and where from: the company's name, the business email address and phone number published on the company's own website, the name of the contact person (if published there), the company's legal form and its details from the public companies register (for example Companies House in the UK). Nothing else.
Why and on what basis: to introduce our service to businesses in the same trade — our legitimate interest (Art. 6(1)(f) GDPR / UK GDPR), in line with the rules for electronic marketing (in the UK, the Privacy and Electronic Communications Regulations — PECR).
How many emails: at most two — the second at least 5 days after the first, and only if you have not replied or created an account. The links in our emails carry a code of the email they come from, so that we know whether a business created an account after our email.
Your choice: every email contains the link “Don't want to receive further emails from us?”. One click on it, a reply asking us to stop, or a message to the address in the Contact section stops our emails permanently. To respect that choice, we keep a minimal do-not-contact record — a cryptographic fingerprint (SHA-256) of the email address, not the address in plain text — for as long as needed to avoid contacting you again.
How long we keep it: the data of a business that has not become a user is deleted automatically at most 12 months after the last contact or change, or immediately on request. The emails are sent through SMTP2GO (section 4) and the data is stored in our database (Neon, EU).
Your rights: access, rectification, erasure, restriction and objection, as in section 7, by email to the address in the Contact section. You may also complain to a data protection authority — in the UK, the Information Commissioner's Office (ICO); in Romania, ANSPDCP.
You can subscribe to ElectricalVPF news from the window on our website or by ticking the optional box in the Contact form. The box is never ticked for you, and creating an account (including a Free one) does not subscribe you.
What data: your email address, language, where you subscribed (the website window or Contact) and, as proof of consent, the exact text you ticked, its version, the date of the request and the date of confirmation.
Confirmation (double opt-in): after the request we send you a single confirmation email, with no advertising. The subscription becomes active only after you click the link in it; the link is unique, single-use and expires after 48 hours. If you do not confirm, we send you no news.
Legal basis: your consent (Art. 6(1)(a) GDPR / UK GDPR), which you can withdraw at any time.
Unsubscribing: every news email contains an unsubscribe link that works without an account or password; unsubscribing takes effect immediately, including for sends already scheduled. You can also ask to unsubscribe by email, at the address in the Contact section.
How long we keep it: while you are subscribed. An unconfirmed request is deleted after at most 30 days. After you unsubscribe we keep the address, marked “unsubscribed”, together with the proof of consent, so that we do not write to you again and can show, if needed, how and when you gave and withdrew consent; we delete them on request. The emails are sent through SMTP2GO (section 4) and the data is stored in our database (Neon, EU).
What data: the name, email address and message you send us, the page language and whether you also asked to subscribe to news. The message reaches the ElectricalVPF team by email, and we reply to your address.
Legal basis: so that we can reply (steps taken at your request, Art. 6(1)(b) GDPR, or our legitimate interest in answering questions, Art. 6(1)(f)). Subscribing to news is separate and optional (section 2.8) — the message is sent either way.
Anti-abuse protection: the form uses the Cloudflare Turnstile anti-bot check (section 4) and a limit on messages per IP address.
How long we keep it: as long as needed to handle your request and at most 24 months after the last message, or less on request.
We do not sell or rent your data to third parties for marketing purposes.
The database (Neon) runs in an EU region. Some providers (Cloudflare, Stripe) are US-headquartered companies that may process data outside the EEA within their global networks. These transfers rely on the safeguards required by GDPR for international transfers (Standard Contractual Clauses), per each provider's own privacy documentation.
Under GDPR, you have the right to:
You may also exercise any of these rights directly by email, at the address in the Contact section below. We respond within the legal 1-month timeframe.
ElectricalVPF ERP is intended exclusively for professionals (sole traders, companies) and is not directed at minors. We do not knowingly collect data from individuals under 18.
We may update this policy periodically. Material changes will be communicated by posting on this page, with the updated date in the header.
For any question about your personal data or to exercise your GDPR rights, contact us at the address in the Legal Notice.