Legal
Privacy Policy
This Privacy Policy explains how S.C. Reinvent Shop Online S.R.L., trading as From Roots to Love ("we", "us"), handles personal information when you use fromrootstolove.com, the love root quiz, the AI voice coach and our courses (the "Services").
The short version: we collect what we need to run the Services, we let you choose what's kept from your coaching conversations, we don't sell your data, we don't use your conversations to train AI models, and you can ask us to delete everything.
1. Who we are
The controller of your personal information is S.C. Reinvent Shop Online S.R.L., a company registered in Romania, 253 A, Chet 415301, Bihor County, Romania. Contact: support@fromrootstolove.com.
Because we are established in the European Union, we follow the EU General Data Protection Regulation (GDPR) for all users, and we also respect the privacy laws of US states that apply to us, such as the California Consumer Privacy Act (CCPA/CPRA).
2. What we collect
Information you give us
- Account: first name, email address, password (stored only in encrypted/hashed form by our authentication provider), your confirmation that you are 18+ and that you accepted our Terms.
- Quiz: your answers, your result, your first name and email, whether you agreed to receive marketing emails, and how you found us (e.g. a campaign tag in the link).
- Coaching conversations: your voice during sessions (processed in real time) and, depending on your choice, a transcript and/or a short summary.
- Purchases: your name, billing address and email, and the products you bought. Card details are handled by Stripe; we never see or store your full card number.
- Messages you send to support.
Sensitive information you may choose to share Coaching conversations can touch on your relationships, family history, emotions, health or sex life. You decide what to share. We process this information only to provide the coaching you asked for, based on your explicit consent given before your first session, which you can withdraw at any time (see section 8).
Information collected automatically
- Usage and technical data: IP address, browser and device type, pages visited, dates and times, and errors — collected by our hosting provider to run and secure the website. We use your IP at sign-up to limit abuse of free minutes.
- Session records: the date and length of each coaching session, needed for your minute balance and billing.
- Cookies and similar technologies: the ones needed to keep you logged in and the site working, and — only if you consent — analytics cookies (Google Analytics) and marketing pixels (Meta, TikTok) that record pages visited, device and browser data, and an online identifier. See our Cookie Policy.
We never send the content of your coaching sessions, your quiz answers or your course activity to analytics or advertising providers. We do not knowingly collect information from anyone under 18.
3. Why we use it (and our legal bases)
| Purpose | Legal basis (GDPR) |
|---|---|
| Creating and running your account, the quiz, courses and coach sessions | Performance of our contract with you |
| Processing sensitive information in coaching conversations | Your explicit consent |
| Keeping transcripts/summaries and using them for continuity | Your consent (your privacy settings) |
| Payments, invoices, tax and accounting records | Legal obligation |
| Sending your quiz result and account emails | Performance of contract / your request |
| Marketing emails | Your consent (opt-in; unsubscribe anytime) |
| Security, fraud and abuse prevention (e.g. free-minute limits) | Our legitimate interests |
| Improving the Services using aggregated, non-identifying statistics | Our legitimate interests |
| Website analytics (Google Analytics) | Your consent (cookie banner) |
| Measuring our social media outreach (Meta and TikTok pixels) | Your consent (cookie banner) |
We do not use your conversations to train AI models, and we do not use them for advertising.
4. Your coaching privacy choices
Before your first session and anytime in My account → Privacy, you choose what we keep after each session:
- Full — the transcript and a short summary;
- Summary only — a short summary (default);
- Nothing — no conversation content is kept after the session.
Separately, you decide whether the coach may use summaries of your recent sessions (and your quiz result) for continuity. We always keep basic usage records (date and length of sessions).
Our voice provider, Retell AI, stores the recording and transcript of each call for operating the service and deletes it automatically after 7 days, regardless of your setting.
5. Who we share it with
We share personal information only with service providers who process it on our behalf, under contracts that require them to protect it:
| Provider | What they do | Location |
|---|---|---|
| Supabase | Database and authentication (account, quiz results, session records, summaries) | United States |
| Vercel | Website hosting and server logs | United States / global edge network |
| Retell AI | Real-time voice processing for coaching sessions (speech-to-text, text-to-speech) | United States |
| OpenAI (via Retell AI) | Generating the coach's replies | United States |
| Stripe | Payments, subscriptions and fraud prevention | United States / EU |
| Brevo | Sending emails (account, quiz result, marketing if you opted in) | European Union |
| Google Workspace | Our support inbox | United States / EU |
| Google Analytics | Website statistics — only with your consent | United States / EU |
Advertising platforms (only with your consent). If you accept marketing cookies, Meta Platforms (Facebook, Instagram) and TikTok can collect data through their pixels on our site — pages visited, device and browser data and online identifiers — to measure our social media outreach. They use this data under their own privacy policies.
We may also disclose information if required by law, to protect someone's safety, or as part of a sale or reorganization of our business (with notice to you).
We do not sell your personal information for money. Allowing advertising pixels may count as "sharing" for cross-context behavioral advertising under California and other US state laws. This happens only if you accept marketing cookies, and you can opt out anytime with Do Not Sell or Share My Personal Information in the footer of every page. We honor the Global Privacy Control (GPC) browser signal as a valid opt-out.
6. International transfers
Some providers process data in the United States. When personal information is transferred outside the European Economic Area, we rely on safeguards recognized under the GDPR, such as the EU–US Data Privacy Framework (for certified providers) or the European Commission's Standard Contractual Clauses.
7. How long we keep it
- Account information: while your account is open. You can delete your account and personal data instantly from My account → Delete my account; requests by email are handled within 30 days.
- Conversation transcripts and summaries: according to your privacy setting, until you delete them or your account.
- Retell AI call data: deleted automatically after 7 days.
- Quiz results: up to 24 months, or until you ask us to delete them.
- Marketing contact: until you unsubscribe.
- Payment, invoice and accounting records: as long as tax and accounting laws require (in Romania, generally up to 10 years).
- Server logs: a short period set by our hosting provider, for security.
8. Your rights and choices
Depending on where you live, you have the right to:
- access your personal information and get a copy;
- correct inaccurate information;
- delete your information ("right to be forgotten");
- restrict or object to certain processing;
- data portability (receive your data in a common format);
- withdraw consent at any time — for example, change your coaching privacy setting, or unsubscribe from marketing emails using the link in every email. Withdrawing consent doesn't affect processing done before;
- opt out of the sale or sharing of personal information — use Do Not Sell or Share My Personal Information in the footer, or turn on Global Privacy Control in your browser — and limit the use of sensitive information (we only use it to provide the Services);
- not be discriminated against for exercising your rights.
To delete your account yourself, use My account → Delete my account. To exercise any other right, email support@fromrootstolove.com from the address on your account. We may need to verify your identity. We respond within 30 days (45 days where US state law allows). You may use an authorized agent where your state law permits.
If you are in the EU/EEA, you can also complain to a data protection authority — in Romania, the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP) — or to the authority where you live. We'd appreciate the chance to address your concern first.
9. Security
We use encryption in transit (HTTPS), access controls that keep each user's data separate, hashed passwords, and providers with strong security programs. No system is perfectly secure, so please use a strong, unique password and tell us right away if you suspect unauthorized access.
10. Children
The Services are for adults 18+. We don't knowingly collect information from minors. If you believe a minor has created an account, contact us and we'll delete it.
11. Changes to this policy
We'll post any changes here and update the date at the top. If changes are significant, we'll notify you by email or on the website before they take effect.
12. Contact
S.C. Reinvent Shop Online S.R.L. (From Roots to Love) 253 A, Chet 415301, Bihor County, Romania support@fromrootstolove.com