STRIPTU PRIVACY POLICY
Privacy policy
1. Personal Data Controller
The controller of personal data is FREELANCE Kamil Jabłoński with its registered office in Łódź (91-850), ul. Marysińska 88/38, NIP: 7262639899, REGON: 367010238, contact e-mail address: [email protected] (hereinafter: "Controller").
2. Purposes and Legal Bases for Data Processing
We process personal data for the following purposes:
| Processing Purpose | Scope of Data | Legal Basis | Retention Period |
|---|---|---|---|
| Account creation | first name, last name, e-mail, password, NIP, company data | art. 6(1)(b) GDPR (contract) | for the duration of the contract |
| Providing the Stripe + Fakturownia integration service | transaction data, API keys, invoice data | art. 6(1)(b) and (f) GDPR | for the duration of the contract |
| Issuing invoices | billing data | art. 6(1)(c) GDPR (legal obligation) | for the period required by law (e.g. 5 years) |
| Communication and inquiry handling | e-mail, correspondence content | art. 6(1)(f) GDPR | up to 3 years for evidentiary purposes |
| Marketing (if consent was given) | e-mail, preferences | art. 6(1)(a) GDPR | until consent is withdrawn |
3. Data Recipients and Analytical and Marketing Tools
Personal data may be shared with trusted third parties, including service providers necessary for the proper functioning of Striptu and analysing its usability.
These include:
- Stripe, Inc. (USA) – online payment processing,
- Fakturownia Sp. z o.o. – invoice issuance,
- OVH Sp. z o.o. - hosting and IT infrastructure provider,
- Accounting office – for billing purposes,
- Facebook Ads (Meta Platforms Ireland Ltd.) – for marketing, retargeting and advertising statistics purposes (based on consent),
- Google Ads and Google Analytics (Google Ireland Ltd.) – for measuring ad effectiveness, conversion tracking, user behaviour analytics (based on consent),
- Mixpanel Inc. (USA) – analysis of Striptu application usage to improve UX and system performance,
- Piwik PRO (Piwik PRO GmbH or Piwik PRO Sp. z o.o.) – a local alternative to Google Analytics used for behavioural analytics (if active),
- Mailing system and CRM – for contact and communication automation (if implemented; e.g. MailerLite, Sendinblue).
4. User Rights
You have the right to:
- access your data,
- rectify your data,
- request erasure of your data ("right to be forgotten"),
- restrict processing,
- object to processing,
- data portability,
- lodge a complaint with the President of the UODO (Polish Data Protection Authority).
5. Consent and Withdrawal of Consent
If we process data based on consent (e.g. marketing), you may withdraw it at any time -- simply write to us at [email protected].
6. Obligation/Voluntariness of Providing Data
Providing data is voluntary but necessary for concluding and performing the contract (account creation, service provision). Failure to provide data results in the inability to use the service.
7. Cookies
Our website uses cookies -- more information can be found in the Cookie Policy https://striptu.com/polityka-cookies.
8. Security
We care about data security -- we use, among others, SSL encryption, access control, strong password hashing, and security monitoring.
9. Policy Changes
We reserve the right to change this policy. The current version is always available at https://striptu.com/polityka-prywatnosci.