Version 1.0 · Effective from: October 2, 2026
The Polish version of this Privacy Policy is legally binding; this English translation is provided for convenience.
GBLogic Grzegorz Banaś, ul. Węgrowska 1 m 118, 03-507 Warsaw, Poland, Tax ID (NIP) 6422893874, REGON 240006910. Contact for data protection matters – contact form.
| Purpose | Data | Legal basis (GDPR) | Retention |
|---|---|---|---|
| Creating and operating the Account, providing the Service | email, password (hashed), Customer Status (consumer/business), login data, IP address | Art. 6(1)(b) – contract | term of the Agreement + limitation period for claims |
| Payments and invoicing (collected by Stripe only when a paid Subscription is purchased) | company name, Tax ID, billing address, payment history | Art. 6(1)(c) – tax and accounting obligations | 5 years from the end of the tax year |
| Handling inquiries, complaints, and contact | correspondence data | Art. 6(1)(b) and (f) | until the matter is closed + limitation period |
| Proof of acceptance of documents, establishing and defending claims | document version, date, IP address | Art. 6(1)(f) – legitimate interest | limitation period for claims (up to 6 years) |
| Security, abuse prevention, handling abuse reports | logs, IP address, device identifiers | Art. 6(1)(f) | up to 90 days; until case closure in the event of an incident |
| Transactional messages (e.g., payment notices, Terms updates) | Art. 6(1)(b) and (f) | term of the Agreement | |
| Marketing and conversion measurement (Google Ads) | cookie identifiers, event data | Art. 6(1)(a) – consent | until consent is withdrawn / the cookie expires |
Providing data is voluntary but necessary to conclude the Agreement.
We share data only with entities that help us provide the Service: our hosting and cloud provider (Microsoft Azure), email provider (Mailjet), payment processor (Stripe), accounting system (wFirma), Google (advertising – only with consent), our accounting office, our law firm — and authorities entitled by law. We do not sell data.
Stripe and Google may process data in the USA. Transfers take place on the basis of the European Commission's adequacy decision regarding the EU-US Data Privacy Framework or standard contractual clauses. A copy of the applicable safeguards is available on request via the contact form.
You have the right to: access your data, rectify it, erase it, restrict its processing, data portability, object to processing based on legitimate interest (including marketing), withdraw consent at any time (without affecting the lawfulness of processing before withdrawal), and lodge a complaint with the President of the Polish Data Protection Authority (UODO) (ul. Stawki 2, 00-193 Warsaw). If you are a Consumer, you also have the right to out-of-court dispute resolution and the EU ODR platform — see Terms of Service § 16.
We do not make decisions about you based solely on automated processing, including profiling, that produce legal effects.
We use connection encryption, access controls, and other measures appropriate to the risk. No system, however, is fully immune to attack — please keep your password confidential and enable two-factor authentication.
The rules governing our use of cookies are described in our Cookie Policy.
This policy may be updated. We will inform you of material changes via the Service or by email.