Privacy Policy

1. Data we collect

• Account data: email address, password hash, and — if you sign in with Google — your Google account name, email and profile picture.
• Profile settings: display name, interface language, default persona and audience preferences.
• Content you create: personas, audience definitions and generated members, post drafts, uploaded images, test settings and results.
• Billing data: credit balance, credit transactions, Stripe customer and payment identifiers. We never see your full card number.
• Technical data: IP address, browser and device information, and application logs generated when you use the Service.

2. Why we use it and on what legal basis

• To provide the Service and your account — performance of a contract (Art. 6(1)(b) GDPR).
• To process payments and keep accounting records — contract and legal obligation (Art. 6(1)(b) and (c) GDPR).
• To secure the Service, prevent abuse and debug faults — our legitimate interest (Art. 6(1)(f) GDPR).
• To send service messages about your account, purchases and material changes — contract and legitimate interest.
• To send optional product news — your consent (Art. 6(1)(a) GDPR), withdrawable at any time.

3. AI processing of your content

When you generate an audience, enrich its members or run a test, the relevant content — post text, uploaded images, audience descriptions — is sent to third-party AI model providers so that a result can be produced. It is processed only to return that result to you and is not used to train our models.

Please do not put sensitive personal data or confidential third-party information into post drafts or persona descriptions.

4. Who we share data with

We do not sell personal data and we do not share it for advertising purposes.

• Hosting, database, authentication and file storage providers that run the application.
• AI model providers that process the content described above.
• Stripe, which handles payments as an independent controller for payment processing.
• Email delivery providers used for account and transactional messages.
• Public authorities where we are legally required to disclose data.

5. International transfers

Some providers operate outside the European Economic Area, primarily in the United States. Such transfers rely on the European Commission's Standard Contractual Clauses or an adequacy decision, together with additional safeguards where required.

6. How long we keep data

• Account and content data: for as long as your account exists, and up to 30 days after deletion in backups.
• Billing and accounting records: 5 years from the end of the accounting year, as required by Polish tax law.
• Technical logs: normally up to 12 months.

7. Your rights

Under the GDPR you have the right to access your data, rectify it, erase it, restrict or object to its processing, and to data portability. Where processing is based on consent, you may withdraw it at any time without affecting prior processing.

To exercise any of these rights, write to info@opinome.ai. We respond within one month.

You also have the right to lodge a complaint with the Polish supervisory authority: Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa.

8. Cookies and local storage

We use only technically necessary storage: a session cookie/token that keeps you signed in, and browser local storage that remembers your interface language and selected persona. We do not use advertising or third-party tracking cookies.

9. Security

Data is transmitted over HTTPS, stored in access-controlled databases with row-level security so that each account can only reach its own records, and uploaded images are served through private, signed URLs. Passwords are stored as salted hashes.

10. Children

The Service is not intended for people under 18. We do not knowingly collect their data; if you believe a minor has an account, contact us and we will remove it.

11. Changes to this policy

We may update this Privacy Policy. Material changes will be announced in the application or by email before they take effect. The date of the current version is shown at the top of this page.

12. Contact

Konri Software, Dąbrowskiego 20 LU1, 30-532 Kraków, Poland

NIP: 9372306450 · REGON: 072929470

Contact: info@opinome.ai