Privacy Policy

1. Confidentiality Commitment

We recognize that personal data entrusted to us is confidential.
SocialBite operates under a structured collaboration between INITINVEST CONSULTING SRL (Commercial Operator), NEXT LOGIC SRL (Technical Operator and infrastructure manager). Both entities are contractually bound to strict confidentiality obligations.

We are committed to the following principles:

  • Personal data is accessed only by authorized personnel with a legitimate business need.

  • Access is granted on a role-based, least-privilege basis.

  • All employees, contractors, and service providers are subject to confidentiality obligations.

  • Personal data is protected against unauthorized access, disclosure, alteration, or destruction.

  • Technical and organizational safeguards are continuously reviewed and updated.

We treat all user information as confidential, whether or not it is explicitly marked as such.

Personal data will never be sold. It will not be disclosed to third parties except:

  • Where necessary for service provision (e.g., hosting providers, app stores, payment processors);

  • Where required by law or regulatory authorities;

  • With your explicit consent.

We maintain internal data handling procedures designed to ensure confidentiality throughout the entire data lifecycle, including collection, storage, processing, transfer, and deletion.

Where personal data is shared between the collaborating entities operating the SocialBite platform, such transfers occur under formal contractual safeguards in compliance with applicable data protection legislation.

2. Definitions

For the purpose of this Policy:

“Platform” means the SocialBite mobile application and landing page accessible at https://socialbiteapp.com, domain legally owned and technically managed by NEXT LOGIC SRL.
“User” means any individual using the Platform
“Personal Data” means any information relating to an identified or identifiable natural person.
“Processing” means any operation performed on Personal Data.
“Controller” has the meaning set out in Article 4 GDPR.
“Processor” has the meaning set out in Article 4 GDPR.

3. Who are we?

This Privacy Policy explains how personal data is processed in relation to „The Platform”:

The Platform operates under a structured collaboration between:

  • INITINVEST CONSULTING SRL, CUI: RO23838406 Nr. Reg. Com. : J22/00800/1447224, Registered Office: Șos. Păcurari 92, Iași, Iași County, Romania – Commercial Operator

  • NEXT LOGIC SRL, CUI: RO18213192,Nr. Reg. Com.: J22/00500/3046228, Registered Office: Str. Sarmisegetuza 2A, Iași, Iași County, Romania – Technical Operator, Domain Owner and Store Account Holder

called „ The Company”

The Apple App Store and Google Play developer accounts through which the Platform is distributed are legally owned and managed by NEXT LOGIC SRL.

The SocialBite website accessible via socialbiteapp.com is owned and maintained by NEXT LOGIC SRL as domain registrant and technical host. However, the commercial operation, service offering, user relationship, and commercial obligations are provided by INITINVEST CONSULTING SRL, acting as the exclusive commercial operator under mandate.

For GDPR purposes:

  • INITINVEST acts as Lead Commercial Data Controller

  • NEXT LOGIC acts as Technical Joint Controller for infrastructure

For the purposes of data protection law (EU Regulation 2016/679 – GDPR), the parties act as:

  • Joint Controllers for core user data processing related to app functionality.

  • INITINVEST CONSULTING SRL acts as Lead Commercial Data Controller.

Contact email: dpo@initinvest.ro

4. What Personal Data We Collect

We may collect the following categories of data:

Account Information

  • Name

  • Email address

  • Phone number

  • Profile data

  • Preferences

Event Participation Data

  • Dinner/event registrations

  • Attendance history

  • User interactions

  • Feedback & ratings

Payment Information

  • Subscription status

  • Transaction identifiers

  • Billing country

  • Payment confirmation (processed via Apple / Google)

Note: SocialBites does not store full card details. Payments are processed by Apple and Google as independent payment processors.

Technical Data

  • IP address

  • Device type

  • Operating system

  • App version

  • Log data

  • Usage analytics

5. Legal Basis for Processing

We process data based on:

  • Performance of a contract (app functionality, event participation)

  • Legitimate interest (platform security, fraud prevention, improvement)

  • Consent (marketing communications)

  • Legal obligations (financial reporting)

6. Purpose of Processing

Your data is processed for:

  • Account creation and management

  • Matching users for events

  • Managing reservations and participation

  • Subscription management

  • Improving user experience

  • Customer support

  • Marketing communications (where consent is provided)

  • Fraud prevention and security

7. Revenue & Platform Management Structure

Due to the partnership structure:

  • App distribution and financial store flows are managed technically by NEXT LOGIC SRL.

  • Commercial strategy and data governance are directed by INITINVEST CONSULTING SRL.

The domain socialbiteapp.com is owned and hosted by NEXT LOGIC SRL.

Technical server logs and infrastructure-level data may be processed by NEXT LOGIC.

All processing activities are governed by internal data processing agreements between the partners to ensure GDPR compliance.

8. Data Sharing

We may share data with:

  • Apple App Store / Google Play (payment processing)

  • Hosting providers such as Amazon

  • Database providers such as MongoDB

  • Analytics providers such as Firebase Analytics

  • Marketing service providers

  • Legal and accounting advisors (where required)

  • Payment Service providers

All third parties are bound by contractual confidentiality and data protection obligations.

9. International Transfers

If data is transferred outside the EU/EEA (e.g., cloud services), appropriate safeguards such as Standard Contractual Clauses are applied or we rely on existing Adequacy decisions.

10. Data Retention

We retain personal data:

  • As long as the user account is active

  • As required for financial/legal obligations

  • For up to 5 years after account closure for legal purposes

  • Until consent withdrawal

Inactive accounts may be anonymized.

11. Security Measures

We implement:

  • Encrypted communications (SSL/TLS)

  • Role-based access control

  • Secure cloud infrastructure

  • Restricted administrative access

  • Logging and monitoring systems

Access to financial data is limited to authorized personnel within The Company.

12. Your Rights

Under GDPR, you have the right to:

  • Access your data

  • Rectify inaccurate data

  • Erase your data

  • Restrict processing

  • Object to processing

  • Data portability

  • Withdraw consent

  • Lodge a complaint with your local supervisory authority

Requests may be sent to: https://dataprotection.ro/

13. Marketing Communications

You will only receive marketing communications if:

  • You have provided explicit consent

  • You are an existing user and communications relate to similar services (where legally permitted).

You may unsubscribe at any time.

14. Automated Decision-Making

SocialBite may use algorithmic logic to match users for events.
This does not produce legal effects or similarly significant consequences.
Users may request human review.

15. Changes to This Policy

We may update this Privacy Notice periodically.

Material changes will be communicated via the application.

? Ask for Help App Store Google Play