Toate documentele legale

Data Retention

  • Versiunea 1
  • În vigoare din 29 oct. 2026

Last updated: 29 October 2026

This document explains, in plain language, what happens to your data in OptiPit and why some information is kept even after you delete your account. The controller is COURTFIELD CONSTRUCT SRL (CUI 36107980, str. Gării nr. 66, Videle, Teleorman, contact@optiflow.ro). Full context: Privacy Policy.

1. The principle

We keep personal data only as long as needed for the purpose it was collected. But OptiPit is a platform for the technical history of vehicles: a vehicle is an entity in its own right, and technical facts about it (work, findings) must stay verifiable after ownership changes. That is why, when you delete your account, we anonymise the data that identifies you but do not delete the vehicle’s history.

2. What happens when you delete your account

| Data | What happens | Why | |---|---|---| | Account (e-mail, password) | anonymised: the e-mail becomes an identifier unrelated to you, the password becomes unusable; the account can no longer be used | sign-in data is no longer needed | | Person data (name, e-mail, phone) | anonymised | no longer needed after account deletion | | Sessions, reset and verification tokens, unfinished registrations, push tokens, in-app messages | deleted or revoked | operational data with no historical value | | Vehicle ownership | ended (the end date is kept) | historical fact: who owned the vehicle and between which dates | | The vehicle, its specifications, expiry dates and maintenance | kept | the vehicle does not belong to the account; its history stays available to authorised owners and shops | | Technical history (events, interventions, visits) | kept; corrections are made by correction records, not deletion | integrity of the technical history and provenance of facts | | Estimates, estimate approvals, generated documents (PDF) | kept | the shop’s commercial and technical records | | Access grants to shops | revoked (the record remains) | proof of granting and withdrawal | | Record of legal document acceptance | kept (append-only); the IP address is not stored in clear | proof of compliance with legal and contractual obligations | | Audit log | kept, immutable; contains identifiers, not the content of personal data | security and accountability | | Undelivered notifications | cancelled; the e-mail address is replaced in the delivery log | avoid sending to a deleted account | | The deletion request | the request record is kept without the e-mail address (only a cryptographic value) | proof that the request was processed | | The organisation (shop) and its data | remain; your membership of the organisation is revoked | the organisation is a separate business entity |

Shops’ customer records. If a repair shop created a customer record for you, the name in the record becomes “Deleted account” and the e-mail and phone are removed; the shop’s active relationships with the customer may remain linked to the anonymised record for job records. The shop is the controller of its own records; requests about those records can also be addressed to it.

Uploaded documents and photos. Documents and photos you uploaded (for example inspection, insurance, the vehicle photo) are not deleted automatically with the account because they are tied to the vehicle and its history; the original file name may contain personal information. If you want a document or photo removed, write to contact@optiflow.ro before or after deleting the account and we will assess the request individually, respecting legal obligations and third-party rights.

3. Retention periods

We keep each category of data as long as needed for its purpose:

  • active account data – while the account exists;

  • temporary operational data (sessions, tokens, unfinished registrations) – short, then revoked/deleted;

  • technical history, estimates, generated documents – as long as needed for the vehicle’s history and the shop’s records, including the periods required by law for commercial and accounting documents;

  • audit and proof of acceptance – as long as needed for security, proving compliance and defending legal claims;

  • backups – may contain data until they are rotated; data anonymised later may still appear in older backups until they expire.

If you need precise information about a specific category, write to contact@optiflow.ro.

4. Data outside the Platform

Sent e-mails remain in the recipient’s mailbox and in e-mail systems; server technical logs may contain IP addresses for a limited period. This data cannot be deleted through Platform functions.

5. Your rights

Details on access, rectification, erasure, portability, objection and complaint to ANSPDCP: Privacy Policy, section “Your rights”. To delete your account: Account deletion.

Data Retention | OptiPit