Privacy Policy

1. Information we collect

Personal information

We may collect personal information that you voluntarily provide to us when you:

• Fill out a contact form
• Subscribe to our newsletter
• Request a quote or consultation
• Engage with our services
• Communicate with us via email or phone

This information may include:

• Name and contact information (email address, phone number, mailing address)
• Company name and job title
• Project details and requirements
• Payment information (processed securely through third-party payment processors)

Automatically collected information

When you visit our website, we may automatically collect certain information about your device and browsing activity, including:

• IP address and browser type
• Operating system and device information
• Pages visited and time spent on pages
• Referring website addresses
• Clickstream data

2. How we use your information

We use the information we collect for various purposes, including:

• Providing and maintaining our services
• Responding to your inquiries and requests
• Sending you updates, marketing communications, and promotional materials (with your consent)
• Improving our website and services
• Analyzing usage patterns and trends
• Preventing fraud and enhancing security
• Complying with legal obligations

3. Legal basis for processing (GDPR Article 6)

We process your personal data on the following legal bases:

• Contact form and inquiries — legitimate interest (Art. 6(1)(f) GDPR): responding to your request is in our mutual interest and does not override your privacy rights
• Website analytics — consent (Art. 6(1)(a) GDPR): we process browsing and behavioral data only with your explicit consent provided via the cookie consent banner
• Accounting and legal records — legal obligation (Art. 6(1)(c) GDPR): Polish law requires us to retain certain financial records for 5 years
• Service delivery — contract performance (Art. 6(1)(b) GDPR): where you engage us for services, we process data as necessary to fulfil our contractual obligations

4. Data retention

We retain your personal data only as long as necessary for the purposes described in this policy:

• Contact form submissions — up to 3 years from the date of last contact, or until you request deletion
• Analytics data via PostHog — up to 1 year; error logs via Sentry — up to 90 days
• Accounting and financial records — 5 years, as required by the Polish Accounting Act (Art. 74)
• Marketing communications data — until you withdraw your consent

5. Information sharing and disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

Service providers

We may share your information with third-party service providers who perform services on our behalf, such as:

• Hosting and infrastructure providers
• Email service providers
• Analytics services
• Payment processors

Named subprocessors

We use the following third-party data processors. Each operates under its own privacy framework and a Data Processing Agreement (DPA):

• PostHog Inc. (posthog.com) — product analytics and usage tracking. Data stored in EU region. Retention: up to 1 year.
• Sentry (sentry.io, Functional Software Inc.) — error tracking and performance monitoring. Retention: up to 90 days.

Legal requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, government agencies).

Business transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

6. Data security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

7. Cookies and tracking technologies

We use cookies and similar tracking technologies to enhance your browsing experience and analyze website traffic. You can control cookies through your browser settings or our cookie consent banner. Types of cookies we use include:

Analytics, functional, and marketing cookies are only activated with your explicit consent. You can manage your preferences at any time via the cookie settings on this website.

• Essential cookies: Required for the website to function properly
• Analytics cookies: Help us understand how visitors use our website
• Functional cookies: Remember your preferences and settings
• Marketing cookies: Track your activity across websites to deliver relevant advertisements — require your explicit consent before activation

8. Your rights and choices

Under GDPR and applicable Polish data protection law, you have the following rights regarding your personal information:

• Access: Request access to the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Restriction: Request restriction of processing your personal data in certain circumstances (e.g., while we verify the accuracy of the data)
• Objection: Object to our processing of your personal information
• Data portability: Request a copy of your information in a portable format
• Withdraw consent: Withdraw your consent for marketing communications at any time
• Complaint: You have the right to lodge a complaint with the Polish Data Protection Authority (Urząd Ochrony Danych Osobowych — UODO) at uodo.gov.pl if you believe your personal data is being processed in violation of applicable law

9. Third-party links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

10. Children's privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information.

11. International data transfers

Some of our subprocessors (PostHog, Sentry) may process data outside the European Economic Area. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, to protect your data in accordance with GDPR requirements.

12. Changes to this privacy policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on our website and updating the "Last Updated" date. Your continued use of our services after such changes constitutes your acceptance of the updated policy.

13. Contact us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us: