Privacy policy
Last updated: 29 October 2026 · Română
Who we are
CyberVSM is a product of InnerBloom Brand SRL, CUI RO47604160, Trade Register no. J23/845/2023, registered office Str. Ciprian Porumbescu nr. 48C, 075100 Otopeni, Ilfov, Romania. InnerBloom Brand SRL is the controller of the personal data described below. Contact: contact@cybervsm.com.
What we collect
- Through the access request form: your work email, your store URL, the plan you prefer and the optional message you write.
- Through the IRIS chat on this site: the messages you write and, if you ask IRIS to pass your request to our team, the details you give it (email, name, store URL, plan, message).
- When you subscribe: company name, billing address, VAT number, email, store URL, and the status of your subscription and payments. You enter card details directly with Stripe; we never see or store them.
- Technical data kept by our hosting provider in server logs (IP address, browser, time of the request), used only for security and to keep the site running.
This site does not use analytics or advertising cookies and does not load third-party trackers. Fonts are served from our own domain. If you use the IRIS chat, your consent and the conversation are saved only in your own browser (local storage), so the chat continues when you come back; “Clear chat” deletes it.
Why we use it
- To answer your questions in the IRIS chat, reply to your request and prepare an offer, at your request, before a contract (GDPR art. 6(1)(b)).
- To provide the subscription, collect payments and install IRIS on your store, under our contract (GDPR art. 6(1)(b)), and to issue invoices as Romanian tax and accounting law requires (GDPR art. 6(1)(c)).
- To protect the site and its infrastructure, our legitimate interest (GDPR art. 6(1)(f)).
We do not sell your data and we do not use it for automated decisions about you.
Who processes it for us
- Vercel Inc. (USA), which hosts this website.
- Resend (USA), which delivers the email that notifies us of your request.
- Stripe Payments Europe, Ltd. (Ireland), which processes subscription payments.
- SmartBill (Romania), which we use to issue invoices and send them to the RO e-Factura system.
- Upstash, Inc. (database in the EU), where we keep the status of your subscription.
- Anthropic, PBC (USA), whose Claude model generates IRIS's answers. Messages are sent to it only to produce the answer; under its commercial terms it does not use them to train its models. We do not keep chat transcripts on our servers.
Transfers outside the European Economic Area rely on the EU–U.S. Data Privacy Framework or on the European Commission's Standard Contractual Clauses, as applicable to each provider.
How long we keep it
Request data is kept for up to 12 months after our last exchange if no contract follows. If you become a customer, it is kept for as long as the contract requires and as Romanian accounting law obliges us.
Your rights
You can ask for access to your data, its correction or deletion, restriction of processing, data portability, and you can object to processing based on legitimate interest. Write to contact@cybervsm.com. You can also complain to the Romanian data protection authority, ANSPDCP (dataprotection.ro).
IRIS on customer stores
When IRIS runs on a customer's store, the store is the controller of its shoppers' data and InnerBloom Brand SRL acts as its processor, under our Data Processing Agreement. IRIS tells shoppers from the first message that they are talking to an AI assistant.