Skip to content
Estimate

Privacy policy

In short: on this website we only collect what you send us through the form. For the businesses that use Casîr CRM we process their Facebook, Instagram and WhatsApp messages only on their behalf. We never hand any of it to anyone for marketing.

Last updated: 5 October 2026

Who we are

The casir.agency website is operated by Casîr Agency SRL (“we”). We are the controller of the personal data you send us through the site. The full company details are shown in the site footer and on the contact page.

For any question about your data, write to us at the email address in the site footer.

What data we collect

We collect personal data only when you fill in the estimate or contact form. There you can send us:

  • your name and email address (required);
  • your phone number and company name (optional);
  • what you want us to build, your budget, timeline, your current website address and your message (optional);
  • the channel you prefer us to reply on.

Alongside what you fill in, we automatically save the page you sent the form from, any campaign parameters in the link (utm type), the date it was sent, your browser type and an encrypted form (hash) of your IP address, used only to protect against spam. We do not store your IP address in plain form.

The site has no user accounts and we do not collect data from children.

Why we use it and on what basis

  • To reply to you and prepare a quote, at your request. The legal basis is Article 6(1)(b) GDPR: steps taken at your request before a possible contract.
  • To protect the form from spam and abuse. The legal basis is our legitimate interest, Article 6(1)(f) GDPR.

We do not use your data for newsletters, advertising or profiling, and we do not sell it to anyone. If we ever have a newsletter, we will ask for your consent separately.

How long we keep it

We keep form data for 24 months from our last conversation, so we can pick up where we left off if you write again. After that we delete it. If you become a client, the data needed for the contract and invoicing is kept for as long as accounting law requires.

Who else sees it

Only we see your data. To run the site we use a few providers, who process data on our behalf and only for that purpose:

  • the hosting provider, whose servers run the site and the database;
  • the email provider, through which we receive notice of your request and reply to you;
  • Cloudflare, through which the site’s traffic passes for speed and protection.

If a provider processes data outside the European Economic Area, it does so under the safeguards set out in the GDPR, for example the European Commission’s standard contractual clauses.

Your rights

You have the right to ask for:

  • access to the data we hold about you;
  • correction, if it is wrong;
  • erasure;
  • restriction of processing;
  • portability of your data to another controller;
  • and to object to processing based on our legitimate interest.

Write to us at the email address in the site footer and we will reply within 30 days at most. For erasure, simply write “delete my data” from the address you used in the form.

If you are unhappy with our reply, you can complain to the Romanian data protection authority, the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP, dataprotection.ro). If you are in the Republic of Moldova, you can contact the Centrul Național pentru Protecția Datelor cu Caracter Personal (CNPDCP, datepersonale.md).

Data processed through Casîr CRM (Facebook, Instagram, WhatsApp)

Besides this website, we build and operate Casîr CRM, a customer management system used by the businesses we work with (for example massage salons and schools). Each business connects its own Facebook Page, Instagram professional account and WhatsApp Business number to its CRM through our Meta app “Casir CRM”.

For this data, the business you talked to is the controller and Casîr Agency is the processor: we process it only on the business's behalf, under a data processing agreement, and only to provide the CRM service.

What data reaches the CRM

  • the messages you send to the business's Facebook Page (Messenger), Instagram account (Instagram Direct) or WhatsApp number, including attached images and files;
  • the comments you write on the business's Facebook and Instagram posts;
  • your name and profile picture, the identifier of your conversation with the business (assigned by Meta) and, on WhatsApp, your phone number;
  • the replies of the business's team and the confirmations or reminders of appointments you booked.

What we use it for

Only so that the business's team can reply to you from one place, see the conversation next to your appointments or enrolments, and send you confirmations and reminders of the appointments you booked. We do not use this data for advertising or profiling, we do not sell it, and we do not share it between businesses: each business has its own CRM with a separate database.

Where and how long we keep it

The data is stored on the server of that business's CRM. Only the business's team members, with their own accounts and passwords, and we as technical administrators can see it. Access tokens received from Meta are kept only in the server configuration, never in the database. We keep the data while the business uses the CRM or until you ask us to delete it; when the service ends, the business's data is deleted or handed over to it, as set out in the contract.

How to request deletion of your data from Casîr CRM

You can ask at any time for your data (conversations, messages, comments, name, phone number) to be deleted from a CRM we operate:

  1. tell the business you talked to (on Messenger, Instagram, WhatsApp or through its contact details) that you want your data deleted; or
  2. email us at support@casir.agency with the name of the business and the name or phone number you used to write to it.

Within 30 days we delete your contact record, conversations, messages and attached files, stored comments and related requests, and confirm it to you on the channel you used. Only what the business is legally required to keep (for example invoices) remains. The messages also remain in your own app (Messenger, Instagram, WhatsApp), where you can delete them yourself.

If you manage a Page connected to Casîr CRM, you can remove the app's access at any time in Facebook: Settings → Business Integrations → Casir CRM → Remove.

Cookies

The public pages of the site do not use tracking or analytics cookies. The details are on the cookies page.

Security

The site only runs over an encrypted connection (HTTPS). Only people on our team, with a password, can access the requests we receive.

Changes

If we change anything important in this policy, we update the date at the top and, where needed, announce it on the site.