Resonalia.com
Privacy policy
Last updated: 16 October 2026
What data we process when you visit resonalia.com, contact us or use the Resonalia platform, why we process it and what rights you have. For people who speak with our agents on behalf of our clients (for example a clinic's patients), see also GDPR and data protection.
01Who we are
Resonalia.com ("Resonalia") is a platform that automates phone calls with AI voice agents. The service is operated by Setcod Solutions S.R.L. ("we", "us").
For any question about personal data, write to [email protected].
02When we are the controller and when we act for someone else
We process personal data in two different capacities; this policy covers the first:
- Controller — for website visitors, people who contact us or ask for a demo, contact persons and users at client companies, and our partners and suppliers.
- Processor — when Resonalia agents make or answer calls, or send SMS or messages, on behalf of a client (a clinic, notary office, courier, pharmacy chain, etc.). The client decides why and how the data is used and is the controller; we process it only on its instructions. That organisation's privacy notice applies and data requests go to it — we help it handle them.
03What we process, why, and on what legal basis
- You visit the website
- DataIP address, browser and device type, pages visited, date and time (technical logs)
- Purposerunning and securing the website, preventing abuse
- Legal basis (GDPR)legitimate interest — Art. 6(1)(f)
- You contact us or ask for a demo (email, phone, WhatsApp)
- Dataname, company, role, email, phone, the content of your message
- Purposereplying, arranging the demo, sending an offer
- Legal basis (GDPR)steps before entering a contract — Art. 6(1)(b); legitimate interest — Art. 6(1)(f)
- You are a client or a platform user
- Datacontact details of designated people, user account, access and activity logs, billing data
- Purposeproviding the service, support, security, invoicing
- Legal basis (GDPR)contract — Art. 6(1)(b); legal obligation (accounting) — Art. 6(1)(c); legitimate interest (security) — Art. 6(1)(f)
- You take part in a demo call
- Datathe phone number you give us for the test call and the conversation on that call
- Purposerunning the demonstration
- Legal basis (GDPR)consent — Art. 6(1)(a), which you can withdraw at any time
- Updates about our services
- Databusiness email and phone
- Purposeproduct news for clients and business contacts
- Legal basis (GDPR)legitimate interest, or consent where the law requires it; you can unsubscribe at any time
| Situation | Data | Purpose | Legal basis (GDPR) |
|---|---|---|---|
| You visit the website | IP address, browser and device type, pages visited, date and time (technical logs) | running and securing the website, preventing abuse | legitimate interest — Art. 6(1)(f) |
| You contact us or ask for a demo (email, phone, WhatsApp) | name, company, role, email, phone, the content of your message | replying, arranging the demo, sending an offer | steps before entering a contract — Art. 6(1)(b); legitimate interest — Art. 6(1)(f) |
| You are a client or a platform user | contact details of designated people, user account, access and activity logs, billing data | providing the service, support, security, invoicing | contract — Art. 6(1)(b); legal obligation (accounting) — Art. 6(1)(c); legitimate interest (security) — Art. 6(1)(f) |
| You take part in a demo call | the phone number you give us for the test call and the conversation on that call | running the demonstration | consent — Art. 6(1)(a), which you can withdraw at any time |
| Updates about our services | business email and phone | product news for clients and business contacts | legitimate interest, or consent where the law requires it; you can unsubscribe at any time |
We don't ask for sensitive data through the website — please don't send it to us through contact channels.
05Who we share data with
We don't sell personal data. We share it only with providers that help us deliver the service, under contract and only as far as needed:
- our cloud infrastructure provider (servers in the European Union) and Cloudflare (security and content delivery);
- telephony and SMS (Twilio) and voice technology (ElevenLabs) providers, for demo calls and for the service we deliver to clients;
- our email provider and internal work tools;
- accountants, legal advisers and auditors bound by confidentiality;
- public authorities, only where the law requires it.
If you message us on WhatsApp, Meta Platforms also processes those messages as an independent controller under its own terms. The full list of sub-processors used for the service we deliver to clients is on GDPR and data protection.
06Transfers outside the European Economic Area
Data is hosted in the European Union. Some providers (for example Twilio, ElevenLabs, Cloudflare, Meta) are US-based companies and may access data from outside the EEA. In those cases we rely on the European Commission's adequacy decision for the EU–US Data Privacy Framework or on the Commission's standard contractual clauses, together with additional security measures.
07How long we keep data
- Website technical logs
- Periodup to 30 days, then deleted automatically
- Contact and demo requests that don't lead to a contract
- Period24 months from the last contact
- Contract relationship data
- Periodfor the duration of the contract plus 3 years (the general limitation period)
- Accounting records
- Periodas long as accounting law requires (currently 5 or 10 years, depending on the document)
- Demo calls
- Periodup to 30 days after the demonstration
| Data | Period |
|---|---|
| Website technical logs | up to 30 days, then deleted automatically |
| Contact and demo requests that don't lead to a contract | 24 months from the last contact |
| Contract relationship data | for the duration of the contract plus 3 years (the general limitation period) |
| Accounting records | as long as accounting law requires (currently 5 or 10 years, depending on the document) |
| Demo calls | up to 30 days after the demonstration |
08Your rights
Under the GDPR (Articles 15–22) you have the right to:
- find out whether we process your data and get a copy (access);
- have inaccurate data corrected (rectification);
- have your data erased (the "right to be forgotten"), within the limits of the law;
- restrict processing;
- receive your data in a structured format or have it sent to another controller (portability);
- object to processing based on legitimate interest, and to marketing at any time;
- withdraw consent, without affecting processing carried out before.
Write to [email protected]. We reply free of charge within one month (extendable by two further months for complex requests, in which case we'll tell you). We may ask for information to confirm your identity.
You also have the right to lodge a complaint with the Romanian data protection authority, ANSPDCP (Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal), 28–30 G-ral. Gheorghe Magheru Blvd., Sector 1, Bucharest, www.dataprotection.ro, or with the authority in your EU country of residence.
09Data security
We use encryption in transit and at rest, separate each client's data, issue separate access keys per client, and apply role-based access and audit logs. Details are on GDPR and data protection.
10Artificial intelligence and automated decisions
Resonalia agents introduce themselves as automated assistants at the start of the conversation. We don't make decisions about you based solely on automated processing that produce legal or similarly significant effects (Art. 22 GDPR). We don't train general AI models on conversation data; when a client asks us to, we analyse its recordings only to configure that client's own agent — see GDPR and data protection.
11Children
Our website and services are aimed at businesses and professionals, not children. We don't knowingly collect data from anyone under 16 through this website.
12Changes
We may update this policy when the service or the law changes. The current version is published on this page with its last-updated date. Clients are told about significant changes by email.