Privacy policy

paynoramic.com is an information site. The personal data it handles is what you choose to send us through the contact form or a job application, and, only if you allow it in the cookie banner, data about how you use the site. This notice explains what happens to it.

Who is responsible

The controller of your data is Paynoramic, with offices at Calea Mosilor 229, Bucharest, Romania, and in Dubai, United Arab Emirates. Questions about this notice: privacy@paynoramic.com.

What we collect, and why

When you submit the contact form, or sign a blueprint in Paynoramic Studio, we receive the name, email address, project type and message you enter. For a blueprint you may also give a phone number, if you would rather we called; the message is the build itself, with your company if you add it, and a launch date, budget and notes you add afterwards are kept with the blueprint. We use them for one purpose: to reply to your enquiry and prepare a proposal. The legal basis is taking steps at your request before entering into a contract (GDPR Art. 6(1)(b)). A logo you add to a blueprint stays in your browser and is never sent to us.

A blueprint is saved as you build it, from the first step, so that its link and QR code can open it: the name you give the platform, its modules, providers and colour, and no personal details. Anyone with the link can open it; only the browser tab that made it can change it, with a key that tab keeps until you close it, and a change made anywhere else saves a copy. A blueprint nobody signs is deleted automatically 12 months after its last change; a signed one is kept, and deleted, with your enquiry.

With an enquiry, and with a blueprint you sign, we also receive where your visit came from: the name of the site that linked you to ours (google.com or chatgpt.com, for example, never the page on it), the first page you opened here, and the campaign tags of the link you followed, if it had any (such as utm_source). If you came by clicking one of our Google ads, we note only that you did, as google / cpc, never the click identifier Google adds to the link. Your browser holds them only in the open page while you browse, and a link to Paynoramic Studio carries them over in its address; nothing is stored on your device for this, and they reach us only with an enquiry you send. We use them to learn which channels bring enquiries, on the basis of our legitimate interest in knowing how people find us (GDPR Art. 6(1)(f)), and they are kept, and deleted, with your enquiry.

When you email one of our paynoramic.com addresses, or we email you, we keep the emails and their attachments in our backoffice, on infrastructure operated by Cloudflare, Inc., to answer you and keep track of our conversations; they also reach our founders' inboxes. We keep them for 12 months after the last email in the conversation, or delete them sooner if you ask. The legal basis is taking steps at your request before a contract (GDPR Art. 6(1)(b)), or our legitimate interest in answering the people who write to us (Art. 6(1)(f)).

Alongside the message we record the IP address, browser identifier and time of submission. These protect the form against abuse and automated spam, on the basis of our legitimate interest in keeping the service secure (GDPR Art. 6(1)(f)).

Job applications

When you apply for a role on our careers pages we receive the name, email address, phone number, profile links, CV and message you send, and the role you applied for. We use them to assess your application and to contact you about it. The legal basis is taking steps at your request before entering into an employment contract (GDPR Art. 6(1)(b)). Keeping your application to consider you for other roles as well, including an open application, is based on the consent you give in the form (GDPR Art. 6(1)(a)), which you can withdraw at any time by writing to privacy@paynoramic.com.

Applications and CVs are stored privately on infrastructure operated by Cloudflare, Inc., and only the people at Paynoramic who handle hiring can open them. Our email provider delivers us a notification with your name and the role, never your CV. Your IP address is used only to limit abuse of the form and is not stored with your application. Applications are deleted automatically 12 months after you send them, or earlier if you ask, unless you join us, in which case they become part of your employment record.

Analytics and cookies

We count visits with Cloudflare Web Analytics. It sets no cookies, stores nothing on your device and does not identify you, so it runs for every visitor.

With your consent we also use Google Analytics and Microsoft Clarity to understand how the site is used. These set cookies and receive an online identifier and your IP address.

With your consent we use the LinkedIn Insight Tag to measure whether our advertising led to an enquiry, and to show our ads to people who have visited the site.

Nothing in this section loads until you accept it in the cookie banner. The legal basis is your consent (GDPR Art. 6(1)(a)), which you can withdraw at any time from the cookies page; withdrawing also deletes the cookies they set. That page lists exactly which tools are active, what each one stores and for how long.

Where it is stored and for how long

Submissions are stored on infrastructure operated by Cloudflare, Inc., and the notification email to us, and our replies to you, are delivered by our email provider. Enquiries are kept for 12 months from submission and then deleted automatically, unless a project has started in the meantime, in which case the correspondence becomes part of the project record.

Who else sees it

Our processors: the hosting and email-delivery providers named above, acting on our instructions under data-processing agreements, and, if you consent to them, Google, Microsoft and LinkedIn for the purposes described above. We do not sell personal data, and we share it for advertising only with the providers you have consented to. Providers may process data outside the European Economic Area under the EU Standard Contractual Clauses.

When you open one of our articles that has a YouTube video, the video's player loads from YouTube (Google), which then receives your IP address and may store data in your browser under its own privacy policy. Articles without a YouTube video send nothing to YouTube.

Your rights

• Access the personal data we hold about you, and receive a copy.
• Have inaccurate data corrected, or data deleted.
• Restrict or object to processing based on legitimate interest.
• Withdraw your consent at any time, without affecting what was done before.
• Receive the data you gave us in a portable format.
• Lodge a complaint with a supervisory authority: in Romania, the ANSPDCP (dataprotection.ro), or the authority in your country.

To exercise any of these, write to privacy@paynoramic.com. We answer within one month.

Changes

We update this notice when our processing changes. The date at the top is the date of the current version. Last updated 27 October 2026.