Legal / Privacy and website use

Clear terms for a limited public service.

This page describes the current Tandemora website, its email-only project-enquiry path, the technologies involved, and the terms that apply when you browse or submit an enquiry.

Privacy 2026-08-05-r1 · Terms 2026-08-05-r1

Current operating version for the live website. Optional analytics and call recording are not active.

Privacy Notice

This notice applies to the public website, project enquiries submitted through the form or public Tandemora aliases, and the related business-hours response. A later client engagement, SaaS product, analytics system, or recorded-call workflow requires its own reviewed terms and data schedule.

Controller and contact

Tandemora is the public brand of TOGETHER SOFTWORKS CORPORATION S.R.L., CUI 45485712 (not registered for VAT), Trade Register J40/683/2022, EUID ROONRC.J40/683/2022, subscribed share capital RON 200, registered at Municipiul București, Sector 6, Drumul Valea Cricovului, nr. 58C. The company is the controller for this processing. Contact us rapidly and directly through [email protected] or the project-enquiry form. Privacy questions, rights requests, and security reports may be sent to [email protected]. Postal communications may be sent to the registered address. If you lose electronic access after contacting us, request an appropriate non-electronic contact method. No Data Protection Officer has been appointed.

Information we collect

The project-enquiry form requires your full name, email address, company or organization, closest solution family, a 40–2,000-character project description, Privacy Notice acknowledgment, Website Enquiry Terms acceptance, locale, and an anti-bot token. Phone and the indicative investment range are optional. The service creates a submission identifier and records the exact Privacy and Terms identifiers displayed to you. Please provide only necessary business context and only necessary details about another person that you are authorized or otherwise legally permitted to provide.

Purposes and legal grounds

When you act personally or as a sole trader, we use enquiry information for steps you request before a possible contract: receiving, assessing, clarifying, and answering the enquiry; arranging or confirming a meeting; and preparing a possible scope or proposal. When you contact us for an organization, and for B2B qualification, service security, spam and fraud prevention, continuity, and limited evidence of communications and legal claims, we rely on legitimate interests subject to your rights and a balancing assessment. If you voluntarily supply a phone number, we use it only to discuss the enquiry or confirm an agreed meeting, not for unrelated marketing.

Required information and choices

The fields marked as required are necessary for this enquiry channel to verify the request, understand who is contacting us, assess the problem, and respond safely. If you do not provide them, the form cannot be submitted. Phone and investment range are optional. Submitting an enquiry does not subscribe you to marketing, authorize recorded calls, or require optional analytics. You may contact [email protected] about privacy rights without submitting a project enquiry.

Named providers and recipients

Microsoft Azure hosts the website and stores runtime secrets. Cloudflare provides authoritative DNS, Turnstile anti-bot verification, and inbound email routing. Resend sends the transactional enquiry email and retains sent-message history under its account limits. Google provides the temporary Tandemora destination mailbox and meeting account and processes account, message, meeting, security, and service metadata under Google's terms. Information may also be disclosed to professional advisers under confidentiality duties, necessary specialist partners under appropriate safeguards, and authorities where legally required or needed for legal claims. Specialists receive only the minimum necessary information, preferably anonymized technical context.

International transfers

Microsoft, Cloudflare, Resend, Google, and their subprocessors may process information outside Romania or the EEA. Where required, transfers must rely on an applicable adequacy decision, a recognized data-privacy framework, approved standard contractual clauses, or another lawful mechanism. The provider, role, processing location, safeguard, and deletion limitation are maintained in Tandemora's internal provider register. You may request information about applicable safeguards at [email protected].

Retention and deletion

An unsuccessful legitimate enquiry is retained for no longer than 12 months after the last meaningful two-way interaction and is deleted earlier when no longer necessary. Tandemora's unanswered reminders do not restart that period. Obvious spam, irrelevant, or withdrawn enquiries are removed from accessible Tandemora systems within 30 days, except for minimum active security evidence. Resend currently keeps sent-message content in active history for up to 30 days and does not document self-service per-message deletion for the current plan; that provider copy therefore expires under Resend's retention instead of immediate Tandemora deletion. We delete accessible Google mailbox copies from inbox, sent, archive, attachments, and trash. Provider backup or security copies may expire later under documented limits. A client engagement follows its signed contract and data schedule.

Rights-request records and exceptions

We may retain a minimal record of a privacy request for up to three years after closure to demonstrate how it was handled, without keeping unnecessary identity documents. We may retain only the minimum information required by law, for an active security or abuse investigation, or to establish, exercise, or defend legal claims. These exceptions do not permit unrelated reuse.

Your rights

Subject to applicable law, you may request access, correction, erasure, restriction, portability, or information about processing; object to processing based on legitimate interests; and withdraw consent where a future operation relies on consent. We use proportionate identity verification, normally through a known address or targeted questions, and request identity documents only when reasonably necessary. We respond without undue delay and normally within one month, with legally permitted extensions explained. Requests are normally free unless the law permits a reasonable charge or refusal.

Complaints

Please contact [email protected] first so we can investigate. You may also complain to the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) or another competent EEA supervisory authority where applicable. Contacting us first does not remove that right.

Sensitive, confidential, and third-party information

The public form is not designed for credentials, access tokens, source code, regulated data, criminal-offence information, special-category personal data, or unnecessary details about other people. If such information arrives accidentally, we restrict access, do not use it for ordinary qualification, assess applicable duties, request a safer summary where practical, and delete it unless law or legal claims require limited retention. Credentials should be revoked or rotated and are deleted promptly, with only minimum incident evidence retained where necessary.

Security, incidents, and access

The form uses HTTPS, strict origin and schema checks, body limits, anti-bot verification, idempotent delivery, managed secret references, and an independent intake kill switch. Access is currently limited to the authorized operational owner and necessary providers; another founder receives named least-privilege access only after joining operations and completing access review. Either founder may take urgent containment action, while material notification decisions receive joint review when practicable. No security measure can guarantee absolute protection.

Automated decisions and children

A human evaluates legitimate enquiries. The anti-bot service may reject automated or abusive traffic, but Tandemora does not use automated decision-making that produces legal or similarly significant effects for project enquiries. The current consultancy enquiry path is intended for adults acting in a business or professional context and is not directed to children.

Changes to this notice

The effective version is shown above and the acceptance version is included with submitted enquiries. We normally publish changes on this page. If a material change affects information already held or your rights, we will provide direct notice where applicable law or fairness requires it. We do not apply incompatible new purposes retroactively without a lawful basis and appropriate notice or choice.

Website Technologies

The current website deliberately avoids advertising, behavioral analytics, visitor uploads, marketing subscriptions, a lead database, and call recording. New tracking, recording, or processors require a separate review before activation.

Cloudflare Turnstile

The contact route loads Cloudflare Turnstile only when the live form is available. Cloudflare processes the challenge token, IP address, browser and device signals, timing, interaction, hostname, and other technical indicators needed to detect automated abuse. Cloudflare also uses Turnstile data for security and service improvement under its Turnstile privacy terms. Tandemora verifies the token server-side and does not use it for marketing.

Microsoft Azure hosting

Microsoft Azure hosts the website and protects runtime secrets. Tandemora application logging, HTTP logging, failed-request tracing, diagnostic settings, and Application Insights are currently disabled. Azure and network systems may still process unavoidable service and security metadata. Any future Tandemora request-level logging requires an approved field list, purpose, access boundary, and retention period before activation.

Resend, Cloudflare Email Routing, and Google

A successful form submission becomes one plain-text transactional email sent by Resend, routed through Cloudflare Email Routing, and delivered to the temporary Tandemora Google mailbox. These services process the enquiry content, sender/recipient metadata, delivery status, account information, and security metadata. Resend's active history currently retains sent-message content for up to 30 days. The website itself stores no separate lead record. Google and provider backup or security copies may expire later than deletion from the accessible mailbox.

Cookies and similar storage

Tandemora does not currently set first-party analytics, advertising, personalization, or cross-visit tracking identifiers. The anti-bot provider may use cookies or similar technical storage necessary to provide security and challenge functionality. No optional analytics script is loaded. If optional analytics is introduced later, it will remain off before a valid choice, refusal will not block the form, and this page and the consent controls will be updated first.

Calls and recordings

Calls are not currently recorded or transcribed by Tandemora, and no call audio or transcript is sent to an AI service. A future recording workflow would require advance notice, an equivalent unrecorded option, affirmative permission from every participant, controlled storage, provider and transfer review, deletion controls, human review, and an updated notice before activation.

Public demonstrations

The public Proof Systems use precomputed outputs and open or purpose-built non-sensitive data. They do not run visitor data through a model, accept uploads, or process visitor documents, camera feeds, order histories, or other private datasets.

Website Enquiry Terms

These terms govern access to this public website and the limited pre-contract enquiry service. They do not govern a future SaaS product or replace the signed agreement required for paid work.

Acceptance and intended audience

By submitting an enquiry, you affirmatively accept these Website Enquiry Terms and confirm that you are an adult acting for a business, organization, professional activity, or business project. Anyone may browse the public content, but the current enquiry and consultancy service is B2B. The Romanian version controls only the contractual Website Enquiry Terms if its English translation differs, subject to mandatory law. The English and Romanian Privacy Notices each provide statutory information directly and neither is subordinated to the other.

Electronic submission steps and correction

To submit, complete the required fields, optionally add phone and investment range, review your entries, accept the current Privacy Notice and Website Enquiry Terms, complete Turnstile, and select Send enquiry. Browser validation and server validation identify errors before acceptance; you may edit any field and resubmit. The enquiry is transmitted in English or Romanian. Tandemora stores no separate website contract record, but the delivered email records the submission ID, locale, and exact legal identifiers. The success screen provides a downloadable receipt containing those identifiers and canonical legal links, which you may store and reproduce.

No service or client relationship

Website content is informational and an enquiry is an invitation to discuss possible work, not an offer, acceptance, quote, professional opinion, fiduciary relationship, or commitment to provide services. No client relationship, reserved capacity, service level, exclusivity, or project starts until authorized representatives sign a separate written agreement. Email or call discussions do not modify that rule unless the signed agreement expressly allows a particular written change method.

Initial-response target

Tandemora aims to send a human initial reply to complete, legitimate enquiries within two Romanian business days, measured in Europe/Bucharest time and excluding Romanian public holidays. This is an operating target, not a guaranteed deadline, service level, acceptance of a project, or promise of a proposal. Availability, qualification, security review, and exceptional closures may affect timing.

Reasonable confidentiality

Tandemora treats non-public enquiry information with reasonable confidentiality, limits its use to assessment, response, security, legal compliance, and possible contracting, and restricts disclosure to the recipients described in the Privacy Notice. This limited website obligation is not a negotiated NDA, legal privilege, exclusivity promise, or secure data-room service. It does not cover information that is public without breach, already lawfully known, independently developed without use of the submission, lawfully received from another source, approved for release, or required by law. Use an agreed NDA and approved channel before sending material that requires stronger or specialized protection.

Your authority and submissions

You retain ownership of your submission and give Tandemora only the limited rights needed to receive, secure, evaluate, respond to, and keep lawful evidence of it. You confirm that the information is lawful, accurate to the best of your knowledge, and that you have authority or another valid legal basis to provide any necessary third-party business details. Do not send credentials, malware, unlawful material, unnecessary personal data, or content that infringes another person's rights.

Independent development

Receiving an enquiry does not prevent Tandemora from using general skills and know-how or independently developing similar ideas, systems, or products, provided it does not misuse your personal data, breach the limited confidentiality obligation above, copy client-owned deliverables, or use information protected by a later NDA or services contract. Project-specific ownership, background IP, reusable components, licenses, assignment, source code, data, and portfolio rights are decided only in the signed project agreement.

Acceptable website use

Do not attack, disrupt, overload, probe without authorization, bypass access or anti-abuse controls, introduce malicious code, impersonate Tandemora or another person, scrape contrary to machine-readable instructions, use the site unlawfully, or interfere with other visitors. Tandemora may proportionately restrict abusive access, preserve security evidence, and seek legal remedies.

Technical material and estimates

Articles, demonstrations, architectures, illustrative metrics, indicative investment ranges, and other technical material are general information, not legal, tax, financial, security, or client-specific professional advice. Precomputed examples are not client results or live inference. We do not warrant that public content is complete, error-free, continuously available, or suitable for a particular project. A signed agreement controls all project commitments and acceptance criteria.

External services and links

Links and third-party services are provided for convenience or to operate a disclosed function. Tandemora does not control or endorse third-party content, availability, security, terms, or privacy practices merely by linking to or using them. Review their applicable terms and notices.

Liability

To the maximum extent permitted by mandatory law, Tandemora excludes liability arising solely from free website access for indirect, consequential, special, punitive, or business losses, including lost profit, revenue, opportunity, goodwill, data, or anticipated savings. Nothing excludes liability that cannot lawfully be excluded, including liability arising from fraud, willful misconduct, gross negligence where non-excludable, death or personal injury caused by negligence where applicable, or mandatory data-protection rights.

Governing law and disputes

These terms are intended to be governed by Romanian law, with disputes submitted to the competent courts of Bucharest, while preserving any mandatory rights, laws, supervisory powers, or jurisdiction that cannot legally be excluded. Please contact Tandemora first where practical so the issue can be investigated.

Changes and severability

The version shown on this page applies when you submit. Material changes are prospective unless lawfully agreed otherwise. If one provision is invalid or unenforceable, the remaining provisions continue to apply to the extent permitted by law. A delay in enforcing a provision does not waive it.

Content and AI Use

Tandemora retains its rights in the website, brand, original writing, design, demonstrations, code, and other material it owns. Public availability does not transfer ownership or grant a general model-training license.

Ordinary use

You may browse the site, quote short extracts where permitted by law, and share links to public pages. You may not republish substantial content, remove legal or attribution notices, imply endorsement, use Tandemora marks without permission, sell copies, or create a confusingly similar service or identity.

Automated access

Automated systems must respect robots.txt, technical access controls, reasonable rate limits, and applicable law. Permission to crawl for ordinary search indexing does not by itself authorize dataset creation, model training, fine-tuning, retrieval corpora, substantial extraction, or commercial republication.

AI and model training

Training, fine-tuning, evaluating, or grounding an AI or machine-learning system on Tandemora-owned public content requires prior written permission from Tandemora unless applicable law clearly allows the specific use without permission. Any permission will define scope, attribution, source links, rate limits, security, model or dataset documentation, brand use, duration, and termination. Permission never extends to personal data, enquiries, meetings, non-public material, client information, third-party assets, trademarks, or content Tandemora does not have authority to license.

Feedback

If you voluntarily provide general feedback about the public website or Tandemora services, Tandemora may use that feedback without payment or attribution, provided it does not disclose your personal data or confidential submission and does not override a signed NDA or project agreement.

Permission requests

Requests to reuse substantial Tandemora content, create a dataset, train or evaluate a model, publish a translation, or use the brand should describe the material, purpose, model or product, audience, commercial status, storage, attribution, and distribution. Send the request through [email protected] before use.