Privacy Policy

1. The data controller is Fundacja Promocji Badań nad Węchem i AI, KRS: 0001201057, NIP: 8361891220, REGON: 543082380 (hereinafter: "Controller").

2. Contact the Controller regarding data protection matters: [email protected].

3. On behalf of the Controller, technical support is provided by Ulhub sp. z o.o., ul. Pamiątkowa 2, 61-512 Poznań, Poland, KRS: 0001191282, NIP: 7831935926, REGON: 542561523 (data processor).

1. We process personal data only to the extent necessary to provide services within the BSI platform.

2. Data we may collect:

• Email address — for registration and login
• Name — for interface personalization
• Industry preferences — for contextualizing AI results
• Analysis history — for saving results to the User's account
• Contact details (contact form) — for responding to inquiries

3. Processing purposes:

• Service delivery (Art. 6(1)(b) GDPR)
• Handling contact inquiries (Art. 6(1)(f) GDPR — legitimate interest)
• Billing and payments (Art. 6(1)(b) GDPR)
• Marketing communication — only with explicit consent (Art. 6(1)(a) GDPR)

1. Content entered by the User into analytical and generative modules is transmitted to the AI system to fulfill the query.

2. This data is not retained by the AI provider after the query is processed.

3. Analysis results may be saved to the User's account (if logged in) — solely to provide access to history.

4. The Foundation strives to minimize the scope of data transmitted to AI — we use it only where it delivers real value to the User.

1. Data may be shared with the following entities only to the extent necessary for service delivery:

• Stripe — payment processing (payment data)
• GetResponse — email communication
• Zanfia (mailingr) — newsletter service (email, with consent)
• Webinarkit — video webinar hosting

2. Data is not sold, rented, or shared for third-party marketing purposes.

3. Data may be disclosed to government authorities in cases required by law.

Under GDPR, you have the following rights:

• Right of access to your personal data
• Right to rectification
• Right to erasure ("right to be forgotten")
• Right to restriction of processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time
• Right to lodge a complaint with the supervisory authority (UODO in Poland)

To exercise your rights, contact us at: [email protected]

1. The Service uses cookies only for technical purposes (login session, language preferences, theme selection).

2. We do not use advertising or tracking cookies.

3. Users can manage cookies in their browser settings.

4. We collect basic technical data (IP address, browser type, visit time) solely for security and diagnostics.

1. Account data is stored until the User or Administrator deletes the account.

2. Analysis history is retained for the duration of the account.

3. Contact data (from the contact form) is retained for the period necessary to respond, no longer than 12 months.

4. Billing data is retained in accordance with applicable tax law (5 years).

1. The Controller implements appropriate technical and organizational measures to protect personal data.

2. User passwords are encrypted (hashed) and are not stored in plain text.

3. Communication with the Service is conducted via encrypted connections (HTTPS/TLS).

1. The Controller reserves the right to amend this Privacy Policy. Users will be informed of changes.

2. This Privacy Policy comes into effect on May 27, 2025.

3. For data protection matters, please contact: [email protected].