Privacy Policy

The data controller is TNV NETWORKING S.R.L., registered office at 36 Minerilor Street, Sector 2, Bucharest, Romania, tax ID (CUI) RO51448174, Trade Register no. J2025018170000.

Contact for any data question: [email protected].

Launch signup (on the website, no account)

• If you fill in the "Notify me at launch" form on nodplace.com: your name, email address, the page language and the signup date. We use your email address only to send you the launch email.
• Optionally, your phone number, only if you tick the separate consent box next to it: we may call you or message you (SMS or WhatsApp) about the launch, NodPlace news and feedback. We also keep the time you gave your consent. WhatsApp messages go through the WhatsApp service (Meta), under its own terms.

Your account

• Your email address and, if you sign in with email and password, your password. The password is stored only as an irreversible hash; nobody on our team can see it.
• If you sign in with Google: Google sends us your name, email address, a link to your profile picture and a Google identifier. We use your name and email for your account. We never receive your Google password and have no access to other data in your Google account.
• If you sign in with Apple: Apple sends us an identifier, your email address (your real one, or a relay address if you choose "Hide My Email") and, only on your first sign-in, your name, if you choose to share it. Emails sent to the relay address reach you through Apple.
• Same address, same account. If you sign in with Google or Apple using the same email address as an existing NodPlace account, you get into that same account: the sign-in methods are linked automatically. With "Hide My Email", Apple uses a relay address, so that account is separate.
• The language you chose in the app (so we email you in your language).

Your profile

• Name, profile picture, description, phone number and the role you chose (vending operator, location owner, supplier, HoReCa venue, visitor).
• Depending on your role: company details (tax ID, name, address and status, checked with ANAF, the Romanian tax authority), the counties you work in, the type and number of machines, and venue details (address, opening hours, menu, photos, facilities, links to your website and social media).

What you publish and do in the app

• Posts (text, photos, videos), comments, likes, mentions, saves and follows.
• Listings, locations (address, price, photos) and offers in the Mărunt (small change) section.
• Chat messages you send to other users.
• Reviews you write and receive, and the documents attached to a review as proof.
• Content reports, moderation decisions about your content and Pro subscription requests.
• Feedback you send from the app (Profile → menu → Send feedback): the text, a screenshot if you choose to add one, the app version, your phone's operating system and model, and the app language, linked to your account. Before sending, the app scales the screenshot down and removes its metadata (for example the location or the date it was taken). A screenshot can also contain other people's data, such as a message or a profile on the screen: only send what we need to understand the issue.
• In-app notifications.

On your phone and technical data

• The app uses the camera, your photos and the microphone only when you choose to add a photo or record a video. We do not use your phone's location.
• Your phone keeps your sign-in session, your language, a copy of your profile (so the app works offline) and, temporarily, the files of a post that is still being published.
• Our providers' servers log technical request data (IP address, date, request type) for security and troubleshooting.
• The button in account emails opens the app or the page nodplace.com/auth/cod. Your code and address are in the part of the link that stays on your device (after "#") and never reach our servers.
• Phone notifications (push), if you turn them on: we keep a notification identifier for your phone (a code generated for the app, not your number or other phone data), the phone type (Android or iPhone) and the app language, linked to your account. A notification only says who did what (for example "New message from Ion Popescu"), without the text of messages or comments. You can turn them off at any time in your phone settings.

What we do NOT do: no advertising, no tracking or behavioural analytics tools, and we do not sell data.

• Public, in the app: your profile (name, picture, description, role, the company details shown), posts, comments, listings, available locations, Mărunt offers and reviews.
• Your phone number is visible to signed-in users, so they can contact you.
• Your email is not shown to other users.
• Chat messages are visible only to you and the person you are talking to.
• Documents attached to reviews are not public: only their author and our moderation team can see them.
• Feedback and screenshots are not public: only the NodPlace team sees them. The screenshot is kept in private storage, with no public address.
• Published photos and videos have public web addresses: anyone with the direct link can open them, even after the content is hidden in the app (for example, a location that is no longer available). They are removed when the content or the account is deleted.

Web pages for links

• When you share a post, listing, location or profile, the link (nodplace.com/…) opens in the app or, without it, as a web page. Anyone with the link can see the page, even without an account.
• The page shows less than the app: no phone number, email, tax ID, comments or review text (only their number and average). Locations and listings appear without the street (only the town / county); for a HoReCa venue, the venue's address appears, as in the app.
• Visitor profiles have no web page. A visitor's public posts appear with their name and picture, without a link to the profile.
• The pages are marked not to be indexed by search engines (noindex).
• When content is deleted or hidden, its page disappears within a few minutes at most. Previews already created in other apps (for example WhatsApp) are kept by those apps.

We use providers that process data only on our behalf, under contract (processors):

Other recipients, as independent controllers:

• Google and Apple, only if you choose to sign in with them: they learn that you use NodPlace, under their own privacy policies.
• ANAF: when checking a company, we send only the tax ID to ANAF's public service.
• Google Play and the App Store, which distribute the app, under their own policies.
• Public authorities, only when the law requires it.

Transfers outside the EU. When data reaches the US (Cloudflare, Resend, Expo, Google, Apple), the transfer relies on the EU-US Data Privacy Framework, where the provider is certified, or on the Standard Contractual Clauses approved by the European Commission.

• For as long as you have an account. Content you delete disappears from the app and from storage right away.
• When you delete your account (in the app: Profile → menu → Delete account), we immediately delete your profile, posts, comments, likes, listings, locations, Mărunt offers, conversations, notifications, the feedback you sent (with screenshots), photos and videos. If you signed in with Apple, we revoke the app's access to your Apple account. If you signed in with Google, we also remove its access to your Google account, from the phone where you are signed in with Google (you can remove it at any time in your Google account settings).
• The notification identifier is deleted when you sign out on that phone, when you delete your account, when you turn notifications off in your phone settings (the next time you open the app), when the notification service tells us it is no longer valid, or after 90 days without opening the app.
• Exception — reviews: reviews you wrote and received stay, but no longer linked to you: the author is shown as "Deleted user". The reason: other users make decisions based on them (for example, whether a location is worth the investment).
• Automatic database backups and technical logs delete themselves after a limited period (up to 7 days).
• Moderation decisions (which of your content we removed, the reason and the date): 12 months from the decision, so we can handle an appeal or an authority request; deleted together with your account.
• Feedback: 12 months from when you send it. The screenshot is deleted when we mark the feedback as resolved or, at the latest, 90 days after you send it, because it can also contain other people's data. Feedback and screenshots are deleted right away together with your account.
• Launch signups: your email address until we send the launch email, then we delete it within 30 days at the latest (with the whole signup, if you didn't also leave your phone number). Your name and phone number for as long as your consent stands; once you withdraw it, we delete them within 30 days. Sooner if you ask us at [email protected].
• Billing data for subscriptions, for as long as accounting law requires.

You have the right to access, rectification, erasure, restriction of processing, data portability, to object to processing based on legitimate interest, and not to be subject to a decision based solely on automated processing. You can exercise many of them directly in the app (editing your profile, deleting content and your account). For the rest, write to [email protected]; we reply within one month.

If you do not want your profile or content to appear on the web pages for links, write to [email protected]. We remove them from the web pages within one month; they stay in the app.

You can lodge a complaint with the Romanian data protection authority, ANSPDCP, 28-30 G-ral. Gheorghe Magheru Blvd., Bucharest, www.dataprotection.ro.

The app is intended for people aged at least 18. We do not knowingly process children's data; if you learn that a child has created an account, write to us and we will delete it.

All app traffic is encrypted (HTTPS). Access to data is restricted by server-side rules: each user can change only their own data. Passwords are stored only as irreversible hashes and are checked against public lists of compromised passwords. When you change your password, you are signed out on your other phones, and you get an alert email when your password or email address changes.

If we change this policy, we publish the new version here with its effective date and let you know in the app when the change is significant.