osiedlo.app privacy policy

Who is responsible for your data

The controller of your data is the entity that runs osiedlo.app:

Binitive Karol Binkowski, jednoosobowa działalność gospodarcza (JDG), ul. Władysława Jagiełły 14 lok. 40, 32-020 Wieliczka, NIP 6832143687, kontakt: hello@osiedlo.app

What we collect and why

• Email address - to sign you in and contact you about the service. Basis: performance of the contract (art. 6(1)(b) GDPR).
• Name and Google id - if you sign in with Google. Used to run your account and sign you in.
• Session IP address and browser info (user-agent) - for security and to run the service. Basis: our legitimate interest (art. 6(1)(f) GDPR).
• Your interview answers - the free text you type or the options you pick, used to build your report. Basis: performance of the contract. Please do not enter personal data we do not need.
• Your own checklist notes - the items you add to the viewing checklist on your report. Basis: performance of the contract. Erased when you delete your account.
• Purchase data - needed to grant access and settle the purchase. Basis: performance of the contract and legal obligations (art. 6(1)(b) and (c) GDPR).
• Waitlist email - if you sign up to get one notification when we launch your city. Basis: your consent (art. 6(1)(a) GDPR). We keep it until that city launches or you withdraw your consent, then delete it. The controller is the entity named at the top of this page.

Who processes your data

We work with trusted providers who process data only on our instructions:

• Anthropic (USA) - the artificial intelligence provider that analyses your conversation and writes the report. This involves a transfer of data to the United States.
• Polar - handles payments and issues receipts and invoices.
• Resend - sends emails, such as your sign-in link.
• Cloudflare - hosting and protection of the service, plus Cloudflare Zaraz, which loads the analytics tools and asks you for cookie consent.
• Google (USA) - Google Analytics 4 (GA4): usage statistics for the service. This involves a transfer of data to the United States.
• PostHog - product analytics: how you use the service.
• Sentry (Functional Software, USA) - application error monitoring, so we catch failures quickly. It runs without consent under our legitimate interest (GDPR Art. 6(1)(f)): we report errors only, with data that could identify you stripped out (tokens in URLs, query parameters, form content) and no session recording. Session replay (with text, inputs and media masked) and performance monitoring are switched on only after you accept analytics. This involves a transfer of data to the United States.

Analytics (Google Analytics 4 and PostHog) only run after your consent. We collect it through a cookie banner; your choice is remembered and applied to all analytics tools. You can change it at any time. Until you consent, PostHog runs in browser memory only and stores no durable cookie or identifier on your device - it starts remembering data across visits only once you accept.

When data leaves the European Economic Area (for example to the USA), we rely on the safeguards required by the GDPR, such as standard contractual clauses or an adequacy decision.

Cookies and similar technologies

Below we list every cookie and browser-storage entry we use. On a default first visit, before you make a choice, we set none of them. The strictly necessary entries are written only when you use the consent banner - their sole job is to remember your choice. Analytics entries (Google Analytics 4 and PostHog) run only after you consent; on refusal we run none of them.

How long we keep data

• Account and session report - until you delete your account.
• Your own checklist notes - kept until you delete your account.
• Purchase data - for as long as the law, including tax law, requires.
• Technical data (IP address, user-agent) - briefly, for security.

Your rights

You have the right to access your data, and to its rectification, erasure, restriction, portability, and to object. You can withdraw any consent you gave at any time.

You can download a copy of your data and delete your account yourself on the Accountpage. You also have the right to complain to the Polish data protection authority (UODO).

Decisions and profiling

The report helps you decide - it does not decide for you. We do not make decisions that produce legal effects about you solely by automated means.

Contact

For any data-protection matter, write to the contact address in the controller details at the top of this page.