Privacy Policy — NLMedia
Last updated: 14 August 2026
Version: 1.2
Languages: Română · Русский · English
1. Controller
Controller: NLMedia (Next Level Media)
Place of business: Chișinău, Republic of Moldova
Phone: +373 79 689 028
Telegram: @nlmMD
Email (privacy and rights): nlmedia.aiagency@gmail.com
Legal entity name, IDNO and street address will be added to Imprint when the company is registered. Until then identification is brand + contacts + city.
NLMedia is a full-cycle digital agency (marketing, production, web, automation and AI integration). Markets: Moldova; second contour — EU. Site languages: RO / RU / EN.
2. What this site does
The site presents agency services and direct contact (phone, Telegram). The «Ask AI» assistant explains the catalogue and FAQ in plain language. Commercial qualification (who you are, niche, budget) happens only by phone or Telegram — not inside the AI chat.
Site content and AI replies are not legal, tax or medical advice and do not replace a signed contract with NLMedia.
3. Legal framework
- Moldova Law 133/2011 (until 22 August 2026)
- Moldova Law 195/2024 (from 23 August 2026), transposing GDPR (EU) 2016/679
- For visitors in the EEA: GDPR-aligned rights as described here
Supervisory authority (MD): CNPDCP — datepersonale.md. EEA visitors may also contact their local authority.
4. Data we process
We do not (v1): user accounts, on-site payments, special-category data, or name / phone / email / niche / budget inside the language model.
Technical (visit): IP, user-agent, URL, time, referrer — hosting. Fonts and animation scripts are served from the same origin (self-host). Purpose: operation and security. Basis: legitimate interest / Art. 6(1)(f) GDPR.
Contact you start: phone, Telegram (@nlmMD), email — number, profile name, message. Purpose: consultation. Footer v1: phone + Telegram only (no WhatsApp/Viber links in the UI).
Ask AI (v1): a catalogue / FAQ guide, not a lead form. Do not type name, phone or email. Qualification is tel:+37379689028 or Telegram @nlmMD. No raw chat storage and no daily PDF in v1. Chats are not used to train models.
The backend (Cloudflare Worker + OpenRouter) is not connected on the live site yet: questions stay in the browser UI. When connected: the Worker may strip pasted phone/email; OpenRouter is a technical inference gateway (we do not claim EU residency). Intended models: x-ai/grok-4.6 and ~deepseek/deepseek-v4-flash-latest, with ZDR, no training, no prompt log.
Cookies: Cookie policy. v1: no GA4 / Meta Pixel. Essential browser storage only (loader, this notice).
5. Recipients
| Recipient | Role | Purpose |
|---|---|---|
| Hosting (intended: Vercel, EU region) | processor | site hosting, technical logs |
| Cloudflare, Inc. | processor | Ask AI Worker — when the API is connected |
| OpenRouter, Inc. | technical gateway | LLM inference — when the API is connected; no EU-residency claim |
| Upstream model providers | inference | catalogue answers, ZDR whitelist |
| Telegram | independent | after you leave the site |
OFL fonts and GSAP are self-hosted on the same origin. We do not use Google Fonts CDN or jsDelivr on the live site.
6. International transfers
Hosting logs may be processed outside Moldova depending on the provider region (intent: EU). When the Ask AI API is connected, OpenRouter inference may involve countries outside MD, including the US. We do not state that data “stays in the EU” and we do not call the LLM gateway GDPR-certified.
Safeguards: minimisation (no personal data in the model), ZDR / no training / no prompt log, self-hosted fonts and scripts.
7. Retention
| Category | Period |
|---|---|
| Server access logs | provider default (intended ≤ 90 days) |
| Tel / TG / email | business relationship + legal archive |
| Ask AI raw chat | not stored in v1 |
| Daily PDF from chats | none in v1 |
| Essential browser storage | see cookie policy |
8. Your rights
Information, access, rectification, erasure, restriction, portability, objection, withdraw consent, complaint to CNPDCP (and an EEA authority where applicable).
Requests: nlmedia.aiagency@gmail.com — reply within 30 days.
9. Security
HTTPS, least-privilege access, reasonable technical and organisational measures. No system is 100% secure.
10. Children
Not directed at children under 16 (EEA) / 13. Contact us to delete data sent by a minor.
11. Changes
Current version on the site with “Last updated”. Material changes may be announced by banner or email.
12. Contact
NLMedia · Chișinău, Republic of Moldova nlmedia.aiagency@gmail.com · +373 79 689 028 · @nlmMD
*Visitor-facing information. Not legal advice. Moldova counsel review is recommended.*