Version 1.0 · Effective from: October 2, 2026

Privacy Policy — SzefPatrzy

The Polish version of this Privacy Policy is legally binding; this English translation is provided for convenience.

1. Scope of this policy

  1. This policy describes how we process the personal data of visitors to the Service and of Customers and their representatives (persons who create and use an Account) — regardless of whether the Customer uses the Service as a business or as a private individual.
  2. This policy does not cover Monitoring Data collected by the Agent on monitored devices. The controller of that data is our Customer — the employer, organization, or private individual who installed the Software (e.g., a parent or guardian). We process it solely on their behalf, as a processor, under the Data Processing Agreement. If you are a Monitored Person (e.g., an employee or household member) and wish to exercise your rights (access, deletion, objection), please contact the person or organization that installed the Software. If you believe you are being monitored without your knowledge or unlawfully, contact us via the contact form.

2. Controller

GBLogic Grzegorz Banaś, ul. Węgrowska 1 m 118, 03-507 Warsaw, Poland, Tax ID (NIP) 6422893874, REGON 240006910. Contact for data protection matters – contact form.

Purpose Data Legal basis (GDPR) Retention
Creating and operating the Account, providing the Service email, password (hashed), Customer Status (consumer/business), login data, IP address Art. 6(1)(b) – contract term of the Agreement + limitation period for claims
Payments and invoicing (collected by Stripe only when a paid Subscription is purchased) company name, Tax ID, billing address, payment history Art. 6(1)(c) – tax and accounting obligations 5 years from the end of the tax year
Handling inquiries, complaints, and contact correspondence data Art. 6(1)(b) and (f) until the matter is closed + limitation period
Proof of acceptance of documents, establishing and defending claims document version, date, IP address Art. 6(1)(f) – legitimate interest limitation period for claims (up to 6 years)
Security, abuse prevention, handling abuse reports logs, IP address, device identifiers Art. 6(1)(f) up to 90 days; until case closure in the event of an incident
Transactional messages (e.g., payment notices, Terms updates) email Art. 6(1)(b) and (f) term of the Agreement
Marketing and conversion measurement (Google Ads) cookie identifiers, event data Art. 6(1)(a) – consent until consent is withdrawn / the cookie expires

Providing data is voluntary but necessary to conclude the Agreement.

4. Recipients of data

We share data only with entities that help us provide the Service: our hosting and cloud provider (Microsoft Azure), email provider (Mailjet), payment processor (Stripe), accounting system (wFirma), Google (advertising – only with consent), our accounting office, our law firm — and authorities entitled by law. We do not sell data.

5. Transfers outside the EEA

Stripe and Google may process data in the USA. Transfers take place on the basis of the European Commission's adequacy decision regarding the EU-US Data Privacy Framework or standard contractual clauses. A copy of the applicable safeguards is available on request via the contact form.

6. Your rights

You have the right to: access your data, rectify it, erase it, restrict its processing, data portability, object to processing based on legitimate interest (including marketing), withdraw consent at any time (without affecting the lawfulness of processing before withdrawal), and lodge a complaint with the President of the Polish Data Protection Authority (UODO) (ul. Stawki 2, 00-193 Warsaw). If you are a Consumer, you also have the right to out-of-court dispute resolution and the EU ODR platform — see Terms of Service § 16.

7. Automated decision-making

We do not make decisions about you based solely on automated processing, including profiling, that produce legal effects.

8. Security

We use connection encryption, access controls, and other measures appropriate to the risk. No system, however, is fully immune to attack — please keep your password confidential and enable two-factor authentication.

9. Cookies

The rules governing our use of cookies are described in our Cookie Policy.

10. Changes

This policy may be updated. We will inform you of material changes via the Service or by email.