Privacy policy
This Privacy Policy explains how Atomatiq sp. z o.o. (“Company”, “we,” “us,” or “our”) collects, uses, stores, and shares personal data when you visit our Website, use our Software or other Services. This Privacy Policy forms part of our Terms and Conditions (https://www.apps.atomatiq.io/terms-and-conditions). Please read this Policy carefully, as well as our Terms and Conditions, which describes the terms under which you use our Services and set out definitions for the terms used herein. If you have any questions, contact us at info@atomatiq.io.
1. Who We Are and How to Contact Us
Atomatiq Sp. z o.o. is the data controller responsible for the personal data collected through the Services. Our registered address is Zygmunta Vogla str., 28/02.63, 02-963 Warsaw, Poland.
If you have any questions or concerns about this Privacy Policy or the way we handle your personal data, please contact us at: info@atomatiq.io.
2. What Personal Data We Collect and Why
We collect personal data for specific, defined purposes. The table below sets out the categories of data we collect, the purposes for which we process them, and our legal basis for doing so.
| Category of Data | Data Points Collected | Purpose of Processing | Legal Basis |
|---|---|---|---|
| Account Registration | Username, email address, telephone number, company name and company details | Creating and managing your user account; enabling access to the Services | Performance of a contract |
| Software Usage Data | Content submitted by the user, usage history, feature interaction logs, calculation history | Providing and improving the Software; product analytics | Legitimate interests; performance of a contract |
| Purchases & Billing | Username, email address, telephone number, company name, company details, order details | Processing Subscription orders; managing your billing account; preventing fraud | Performance of a contract |
| Marketing Communications; Communications about Updates | Username, email address, company name and company details | Sending product and legal updates, newsletters, and promotional communications | Consent; legitimate interests where permitted by law |
Note: We do not collect or store payment card details or other payment information. All payment transactions are handled directly by our payment processor (Stripe). Please refer to their own privacy policy for details of how your payment data is processed: https://stripe.com/en-pl/privacy.
Subject to data anonymization, your personal data may be used by Company for any other purposes. This allows us to both strictly respect the data protection rights of our users, and not to lose the value of the user experience that they have shared within the Services. For example, we may in the future use certain usage data and calculation history – in aggregated and anonymized form – to train and improve internal artificial intelligence and machine learning models aimed at enhancing the Software’s features and accuracy.
If we are legally required to collect Personal data or need it to fulfill a contract with you, and you do not provide the requested information, we may be unable to deliver our services or fulfill our contractual obligations. This could result in the cancellation of Services for you, but we will inform you if this occurs.
We do not not use any other automated decision-making tools in personal data processing. All decisions that may significantly affect you are made with human involvement.
COOKIES
Our Services use cookies to provide you with the best possible service. You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of our Services may become inaccessible or not function properly. For more information about the cookies we use, please see our Cookie Policy (https://www.atomatiq.io/cookie).
CHANGE OF PURPOSE
We will use your personal data only for the purposes for which it was collected, unless we determine that it is necessary for a different but compatible purpose. If you would like to receive an explanation of how the new processing aligns with the original purpose, please contact us. Should we need to use your personal data for an unrelated purpose, we will inform you and explain the legal basis permitting such use. Please note that, where required or allowed by law, we may process your personal data without your knowledge or consent in accordance with these rules.
3. Children’s Data
Our Services are not directed at individuals under the age of 18. To the best of our knowledge we do not knowingly collect personal data from minors. If you believe that a minor has provided us with personal data, please contact us and we will delete it promptly.
4. How We Share Your Personal Data
We do not sell your personal data. While we endeavor to minimize the sharing of your Personal data, there are certain circumstances where it becomes necessary to disclose it to third parties (the “Processors”). Our current Processors are listed below.
| Processor | Role | Data Shared | Location |
|---|---|---|---|
| Google Cloud (Google Cloud Poland Sp. z o.o) | Cloud hosting, database infrastructure, and file storage | All categories of user data stored on our infrastructure | Northern Virginia, USA |
| Resend (Plus Five Five, Inc.) | Transactional and marketing email delivery | Username, email address, company name and company details | California, USA |
| Stripe (Stripe, Inc.) | Payment processing and subscription management | Email address, order information | USA / EEA. |
| Google Analytics (Google Ireland Limited) | Website and product usage analytics | IP address, device and browser information, usage / interaction data, online identifiers (cookies) | USA |
We may also disclose your personal data to law enforcement or regulatory authorities where required to do so by law, or to protect our legal rights. The list of Processors may be updated from time to time.
5. International Data Transfers
Our infrastructure is hosted on Google Cloud in Northern Virginia, USA. As a result, your personal data is transferred to and stored in the United States, which may not provide the same level of data protection as your country of residence.
We ensure that such transfers are carried out in accordance with applicable data protection law. Where the GDPR applies, we rely on the European Commission’s Standard Contractual Clauses (SCCs) as the legal mechanism for transferring data to third countries. By using our Services, you acknowledge that your data may be transferred, stored, and processed in the United States.
For further details, see European Commission: Model contracts for the transfer of Personal data to third countries (https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en).
6. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our general retention periods are as follows:
• Account data: retained for the duration of your account and for 1 year after account closure, or expiration of 3 years from the last log into account, whichever is earlier;
• Usage and calculation data: retained for 3 years from the date of collection;
• Marketing data: retained until you withdraw your consent or unsubscribe;
• Billing records: retained for as long as required to comply with tax and accounting obligations.
After the applicable retention period, your data will be securely deleted or anonymized.
7. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, access controls, and regular security reviews.
However, no method of transmission over the Internet or method of electronic storage is completely secure. While we strive to protect your personal data, we cannot guarantee its absolute security.
8. Your Rights
Depending on your location, you may have the following rights in relation to your personal data:
• Right to access allows you to request access to your personal data stored by us;
• Right to rectification enables you to request the correction or updating of any inaccurate or incomplete personal data we hold about you;
• Right to erasure allows you to request the deletion or destruction of your personal data under specific circumstances, such as when the data is no longer necessary for the purposes for which it was collected or processed (commonly referred to as the "right to be forgotten");
• Right to restrict processing enables you to request the restriction of processing your personal data under certain circumstances, such as when the processing is unlawful, the data is no longer needed, or you have objected to the processing;
• Right to data portability allows you to receive a copy of your personal data in a structured, commonly used, machine-readable format, if technically feasible, and to transfer this data to another controller;
• Right to object enables you to object to the processing of your personal data in certain circumstances, such as when processing is based on legitimate interests or for direct marketing purposes;
• Right to withdraw consent. If we process personal data based on consent, you have the right to revoke this consent;
• Right to lodge a complaint if you believe that the processing of your personal data violates applicable laws.
To exercise any of these rights, please contact us at info@atomatiq.io. We will review your request as soon as possible, but not more than within one (1) month. Please keep in mind that this period may be extended for an additional two (2) months, if necessary, based on the complexity and number of your requests. In that case, we will tell you about the extension within one (1) month of receipt of your request and explain the reasons for the delay.
As we are registered under the laws of the Republic of Poland, the supervisory authority overseeing us is the Personal Data Protection Office. We encourage you to contact us first to allow us the opportunity to address your concerns before reaching out to the Personal Data Protection Office.
If you are a California resident, your rights to the collection and processing of Personal data may be determined in accordance with California Consumer Privacy Act (CCPA). In accordance with CCPA you may have the right to know, right to delete, right to opt-out of sales, right to non-discrimination.
9. Marketing Communications
With your consent, we may send you marketing emails about our products, new features, and updates. You can unsubscribe from marketing communications at any time by clicking the “Unsubscribe” link in any marketing email or by contacting us directly. Opting out of marketing will not affect transactional communications related to your account or active Subscription.
10. Changes to This Privacy Policy
This Privacy Policy may be amended and (or) modified at any time of the Services operation. In this case, a new version of the Privacy Policy and date of its adoption will be published in the Services. If you disagree with amendments and/or additions hereto, you must delete your account in the Services.