Last updated: August 20, 2026
This Privacy Policy explains how Danzly collects, uses, stores, protects, shares, and deletes personal data when you use our website, application, and related services.
Danzly is operated by INSTACORP S.R.L., registered office in Deva, str. Dorobanților, bl. 24, sc. A, et. 3, ap. 9, Hunedoara County, Romania, Trade Register no. J2021000029202, CUI 43546007. You can contact us at contact@danzly.ro or +40 743 967 244.
INSTACORP S.R.L. acts as a controller for data needed to create and administer accounts, manage subscriptions and payments, secure the platform, prevent fraud, provide support, comply with legal duties, and manage its own business relationship with users. For client and other third-party data entered by an account user to use Danzly functions, INSTACORP S.R.L. may act as a processor on that user's documented instructions.
Depending on how Danzly is used, we may process:
We process personal data only when an applicable legal basis exists, including:
Account users are responsible for having an appropriate legal basis and providing required notices for the personal data of clients, contacts, invited persons, and other third parties they enter into Danzly.
Online payments are processed through Stripe. Complete payment-card details are collected and processed by Stripe and are not stored on Danzly servers. We may process the Stripe customer, subscription, payment-status, amount, currency, transaction date, and similar metadata needed to administer purchases, renewals, payment recovery, support, and electronic payment confirmations.
We may use email, SMS, push notifications, or other available channels for communications necessary to operate the service, including account, security, support, appointment, payment, renewal, and service-incident messages.
Push notifications are optional and may require device permission. To deliver them, we may process device push tokens, platform information, preferences, and delivery metadata through providers such as Firebase Cloud Messaging and Apple Push Notification service. Push notifications can be disabled from device settings or available Danzly settings.
Promotions, offers, discount codes, and product news are sent only on the basis of separate valid consent or another situation expressly permitted by law. Refusing or withdrawing marketing consent does not prevent use of contracted services. Consent can be withdrawn free of charge through the unsubscribe mechanism, available settings, or by contacting us.
We process technical logs, diagnostics, crash and error information, device or browser information, IP addresses, timestamps, account identifiers, and request metadata as reasonably necessary to operate and secure Danzly, investigate incidents and bugs, prevent abuse, monitor performance, improve reliability, and provide support. We do not use this data to sell personal data or for third-party advertising.
Google Calendar connection is optional and requires the user's OAuth authorization. Danzly uses read-only access to import busy intervals, event start and end times, and event titles for availability display and overlap warnings. Danzly does not create, modify, or delete events in Google Calendar.
An imported event title is visible only to the Danzly profile that connected the calendar; other profiles in the same account see the busy interval without the title. We may store the Google account email address, authorization tokens, connection and synchronization metadata, imported availability data, event timing, and event titles only as needed to provide, secure, troubleshoot, and maintain the integration.
Danzly does not sell personal data or Google user data. We disclose data only when reasonably necessary for the purposes described in this Policy, including to:
Providers acting on our behalf may process data only for the contracted services and subject to applicable confidentiality, security, and data-protection obligations. Where processing involves an international transfer, we use the safeguards required by applicable law, such as an adequacy decision or standard contractual clauses, where relevant.
We apply reasonable technical and organizational measures designed to protect personal data against unauthorized access, loss, alteration, or disclosure, including secure transmission, authenticated access, permission controls, restricted operational access, monitoring, and incident-response processes. No information system can be guaranteed to be completely risk-free.
Danzly Vault is an optional continuity and emergency-recovery function and is not activated automatically for a new account. To activate it, the account owner must open the Danzly Vault page and save a ZIP password of at least 10 characters. Password-protected exports may then be prepared periodically or on request; Vault is not a real-time copy of the entire database and does not guarantee that the latest backup will always be available.
We retain personal data only for as long as reasonably necessary for the purposes described in this Policy and for applicable contractual, legal, accounting, tax, security, fraud-prevention, audit, dispute, and legal-claims requirements. Retention periods vary according to the data and purpose.
Only the account owner may request deletion of the entire Danzly account. After confirmation, the account and all associated profiles are disabled, active sessions can no longer continue, subscription renewal is stopped, and personal data in operational records is irreversibly anonymized so it can no longer be linked to those persons by Danzly. Limited records may be kept separately with restricted access where retention is required or permitted by law.
Existing Vault archives are normally retained exclusively for export for 30 days after the deletion request, using the link and password previously saved by the owner; no new archives are generated during this period. The owner may choose immediate Vault deletion. Otherwise, after 30 days Danzly removes active Vault objects, local copies, and links. Isolated infrastructure recovery copies may remain operationally unavailable for an additional limited retention cycle, currently up to 30 days, before automatic removal.
Subject to applicable law and relevant exceptions, a person may request:
We may request information needed to verify identity and authority before responding. Exercising an individual privacy right is distinct from deleting the entire account: only the account owner can submit the account-level deletion request, while any affected person may contact us about their own personal data.
The account owner may request account deletion in the application or follow the instructions on the Account Deletion page.
Danzly may request a limited permission only when required for a feature the user chooses, such as:
This website may use browser local storage for necessary preferences such as the selected language. Device and integration permissions can be withdrawn through the relevant device, Google account, or Danzly settings, although the related optional feature may then stop working.
Danzly may link to or integrate with third-party services governed by their own privacy notices. This does not remove our responsibilities for providers processing data on our behalf as described in this Policy.
We may update this Policy to reflect legal, technical, security, or commercial changes. Material changes will be communicated through the application, email, or another appropriate channel within a reasonable period before becoming binding, except where urgent changes are required by law, security, or abuse prevention. The effective version is identified by the last-updated date on this page.
For privacy questions or requests, contact INSTACORP S.R.L. at contact@danzly.ro or +40 743 967 244. Please do not send passwords, authentication codes, full card details, the Danzly Vault password, or the private Vault link.