Projekt dokumentu — jeszcze nie obowiązuje. Polska wersja prawna zostanie przygotowana i zweryfikowana przez prawnika przed startem. Poniżej robocza wersja angielska.
InventProfit — Privacy Notice (DRAFT — needs legal review, not in force)
Controller: [REGISTERED BUSINESS NAME, ADDRESS, NIP/REGON — TO BE COMPLETED]. Privacy contact: [TO BE CONFIRMED].
Planned support address: support@inventprofit.com (not active yet).
Roles
- InventProfit as controller: account sign-up details, sign-in and security logs, billing and subscription records, support and Enterprise inquiries, optional marketing consent.
- InventProfit as processor: data that customers put into their organization (staff names/emails, role assignments, stock, supplier contacts, counts, waste, sales imports). The customer business is the controller; see the Data Processing Agreement.
What we collect and why (GDPR Art. 6)
| Data | Purpose | Legal basis |
|---|---|---|
| Name, email, password hash | Provide the account | Contract |
| Organization membership, role, locations | Access control | Contract |
| Audit history (who changed what, when) | Security, traceability | Legitimate interest / contract |
| Billing country, currency, subscription status, invoices (via Stripe) | Billing, tax and accounting | Contract, legal obligation |
| Inquiry form contents | Answer your request | Pre-contractual steps / legitimate interest |
| Marketing opt-in (separate checkbox) | Product news | Consent (withdraw any time) |
We do not sell personal data. We do not use customer data to train AI models. No analytics or marketing cookies are used.
Recipients
See the Subprocessor list. Card details are entered on Stripe's pages and never reach InventProfit servers.
International transfers
[TO BE COMPLETED after verifying hosting and provider regions. Do not claim EU-only hosting until verified.]
Retention
See the Retention & account closure policy.
Your rights
Access, rectification, erasure, restriction, portability and objection, and the right to complain to the Polish supervisory authority (Prezes UODO, uodo.gov.pl). Signed-in users can download their account data and submit requests under Plan & billing → My data & privacy. These requests are free.
Subprocessor list (DRAFT — regions to be verified before launch)
| Provider | Purpose | Data | Region / safeguards |
|---|---|---|---|
| Emergent (application hosting and database) | Runs the app, its database and file storage | All customer data | TO BE VERIFIED |
| Resend (via Emergent-managed email) | Invitations, password resets, alerts | Recipient email, message content | TO BE VERIFIED |
| Stripe Payments Europe | Subscriptions, invoices, card and Przelewy24 payments | Billing contact, payment data (held by Stripe) | EU entity; transfers per Stripe DPA |
| PayPal (planned, not active) | Alternative subscriptions | Billing contact | Not yet in use |
| AI/LLM provider (planned, not active) | Optional prepaid AI features | Only the data needed for a request | Not yet in use; retention and training settings to be documented first |
| European Central Bank | Exchange-rate reference data | None (no personal data) | — |
Retention & account closure (DRAFT)
| Data | Retention |
|---|---|
| Business records (stock ledger, receipts, counts, waste, recipes, sales imports) | While the organization is active; after closure, export access for 90 days [proposed], then deletion or anonymization |
| Accounting and billing records (invoices, payments) | As required by Polish tax and accounting law (generally 5 years from the end of the tax year) |
| Audit history | Kept with the organization; staff identities are anonymized on verified deletion requests where retention isn't required |
| Inquiries | 24 months [proposed] |
| Security logs | 90 days [proposed]; no passwords, tokens or document contents in logs |
| Backups | Rolling; deleted data disappears from backups as they expire [period TO BE CONFIRMED]. Restores re-apply recorded deletions |
| Photos, voice recordings, documents | Not collected yet; configurable retention is required before release |
Closing an account: the owner exports the data, then asks for closure. Stock audit and accounting history is anonymized or kept as required, not deleted wholesale.
Data Processing Agreement (GDPR Art. 28) — DRAFT, needs legal review
Between the customer (controller) and InventProfit [DETAILS TO BE COMPLETED] (processor).
- Subject and duration: providing InventProfit for the term of the subscription and the agreed retention period afterwards.
- Data subjects: the customer's staff and users, and supplier contacts.
- Data: names, work emails and phone numbers, role and location assignments, activity and audit records, and supplier contact details. Special categories are not intended to be processed.
- Processor obligations: process only on documented instructions; confidentiality of personnel; Art. 32 security (organization isolation, role and location permissions enforced on the server, TLS in transit, provider encryption at rest, audit trail); assist with data subject requests and DPIAs; notify the controller of a personal data breach without undue delay (target: within 24 hours of becoming aware); delete or return data at the end, subject to legal retention.
- Sub-processors: listed in the Subprocessor list; 14 days' notice of changes, with a right to object.
- Audits: information made available on request; on-site audits by agreement.
- International transfers: [TO BE COMPLETED after the hosting and provider regions are verified; SCCs where required].