osiedlo.app privacy policy

Who is responsible for your data

The controller of your data is the entity that runs osiedlo.app:

Binitive Karol Binkowski, jednoosobowa działalność gospodarcza (JDG), NIP 6832143687, kontakt: hello@osiedlo.app

What we collect and why

• Email address - to sign you in and contact you about the service. Basis: performance of the contract (art. 6(1)(b) GDPR).
• Name and Google id - if you sign in with Google. Used to run your account and sign you in.
• Session IP address and browser info (user-agent) - for security and to run the service. Basis: our legitimate interest (art. 6(1)(f) GDPR).
• Your interview answers - the free text you type or the options you pick, used to build your report. Basis: performance of the contract. Please do not enter personal data we do not need.
• Purchase data - needed to grant access and settle the purchase. Basis: performance of the contract and legal obligations (art. 6(1)(b) and (c) GDPR).

Who processes your data

We work with trusted providers who process data only on our instructions:

• Anthropic (USA) - the artificial intelligence provider that analyses your conversation and writes the report. This involves a transfer of data to the United States.
• Polar - handles payments and issues receipts and invoices.
• Resend - sends emails, such as your sign-in link.
• Cloudflare - hosting and protection of the service, plus Cloudflare Zaraz, which loads the analytics tools and asks you for cookie consent.
• Google (USA) - Google Analytics 4 (GA4): usage statistics for the service. This involves a transfer of data to the United States.
• PostHog - product analytics: how you use the service.
• Sentry (Functional Software, USA) - application error and performance monitoring, so we catch failures quickly. This involves a transfer of data to the United States.

Analytics (Google Analytics 4 and PostHog) only run after your consent. We collect it through a cookie banner; your choice is remembered and applied to all analytics tools. You can change it at any time.

When data leaves the European Economic Area (for example to the USA), we rely on the safeguards required by the GDPR, such as standard contractual clauses or an adequacy decision.

How long we keep data

• Account and session report - until you delete your account.
• Purchase data - for as long as the law, including tax law, requires.
• Technical data (IP address, user-agent) - briefly, for security.

Your rights

You have the right to access your data, and to its rectification, erasure, restriction, portability, and to object. You can withdraw any consent you gave at any time.

You can download a copy of your data and delete your account yourself on the Accountpage. You also have the right to complain to the Polish data protection authority (UODO).

Decisions and profiling

The report helps you decide - it does not decide for you. We do not make decisions that produce legal effects about you solely by automated means.

Contact

For any data-protection matter, write to the contact address in the controller details at the top of this page.