Privacy Policy

The data controller is Activsolar sp. z o.o., registered at Waniliowa 6/3, 51-180 Wrocław, Poland. You can reach our data protection contact at [email protected].

• Identification data: first and last name, company, job title.
• Contact data: email address, phone number, postal address.
• Account data: hashed password, authentication tokens, preferences.
• Billing data: VAT number, billing address, transaction history. Card numbers are processed by our payment providers and never stored on our servers.
• Usage data: pages viewed, features used, credit consumption, model inference logs.
• Technical data: IP address, browser type, device identifiers, timestamps.
• Customer data: any datasets, images or files you upload for processing.

• Contract (Art. 6(1)(b) GDPR) — to provide the platform you have signed up for.
• Legal obligation (Art. 6(1)(c) GDPR) — to issue invoices, comply with tax and accounting laws.
• Legitimate interest (Art. 6(1)(f) GDPR) — to secure the platform, prevent fraud, improve our services and communicate with existing customers.
• Consent (Art. 6(1)(a) GDPR) — for marketing emails and non-essential cookies, which you can withdraw at any time.

We use personal data to operate and secure the Activsolar platform, process payments, provide customer support, comply with our legal obligations, and — only with your consent — send you product news and educational content. We do not sell your data and we do not use your customer data to train shared AI models.

We share data only with vetted processors who help us run the service: cloud hosting and storage providers (in the EEA), payment processors, email delivery, analytics, and customer support tooling. Each processor is bound by a Data Processing Agreement that meets GDPR Art. 28 requirements.

By default your data is stored within the European Economic Area. Where a sub-processor is located outside the EEA, we rely on the European Commission's Standard Contractual Clauses and apply additional safeguards such as encryption in transit and at rest.

We retain account data for the duration of your subscription and up to 12 months after termination. Billing records are kept for 5 years to comply with Polish accounting law. Inference logs and uploaded datasets are retained for 90 days unless you delete them earlier or contractually require a different period.

You have the right to access, rectify, erase, restrict or object to processing of your personal data, the right to data portability, and the right to withdraw consent. You may exercise these rights by contacting [email protected]. You also have the right to lodge a complaint with the Polish supervisory authority (Urząd Ochrony Danych Osobowych, uodo.gov.pl).

We apply technical and organisational measures including encryption at rest and in transit (TLS 1.2+), least-privilege access, audit logging, regular backups, and annual penetration testing. No system is perfectly secure — please report any vulnerability to [email protected].

We will publish updates to this Privacy Policy on this page. For material changes we will additionally notify account holders by email at least 30 days before the change takes effect.