PRIVACY POLICY
Wojciech Wróż, operating a business under the name FORMA AI WOJCIECH WRÓŻ, os. Edwarda Raczyńskiego 2/20, 62-020 Swarzędz, Poland
NIP: 9721364263, REGON: 541446748
NIP: 9721364263, REGON: 541446748
This Privacy Policy describes how FORMA AI WOJCIECH WRÓŻ (hereinafter referred to as "We" or "FORMA AI WOJCIECH WRÓŻ") collects, uses, stores, and protects users' personal data in connection with the use of our AI-based visual content generation services.
1. Data Controller
The data controller is Wojciech Wróż, operating a business under the name FORMA AI WOJCIECH WRÓŻ, os. Edwarda Raczyńskiego 2/20, 62-020 Swarzędz, Poland
NIP: 9721364263, REGON: 541446748
NIP: 9721364263, REGON: 541446748
2. What Data Do We Collect?
While using our services, we may collect the following types of data:
a) Data provided by the user
- Name, surname, email address, username (e.g. when creating an account or placing an order)
- Billing information (e.g. credit card number, billing address) for paid services
- User-provided content (e.g. descriptions, instructions, or source code) for generating visual content
b) Data collected automatically
- Technical data: IP address, browser type, operating system, device data
- Behavioral data: usage patterns (e.g. time spent on the site, clicks, content generation history)
- Cookies and similar technologies (see section “Cookies”)
c) Data generated during service use
- Visual content generated (e.g. images, graphics)
- Source code provided by the user or generated during the service
3. Purposes of Data Processing
We process personal data for the following purposes:
- To provide AI-based visual content generation services
- To manage user accounts and process payments
- To provide technical support and customer service
- To analyze and improve our services (e.g. AI algorithm enhancement)
- To prevent abuse and ensure platform security
- To comply with legal obligations (e.g. tax, accounting)
- For direct marketing (with user consent)
4. Legal Basis for Processing
We process data based on:
- Art. 6(1)(b) GDPR – performance of a contract (providing services)
- Art. 6(1)(c) GDPR – compliance with legal obligations
- Art. 6(1)(f) GDPR – legitimate interest (e.g. usage analysis, security)
- Art. 6(1)(a) GDPR – user consent (e.g. for marketing purposes)
5. Data Sharing
Data may be shared with:
- Service providers processing data on our behalf (e.g. hosting, payment, analytics)
- Public authorities when required by law
- Technology partners supporting content generation (e.g. AI infrastructure providers)
We do not sell personal data or share it with third parties for purposes unrelated to the delivery of our services.
6. Data Transfers Outside the EEA
If we use service providers outside the European Economic Area (EEA), we ensure appropriate safeguards such as standard contractual clauses to protect user data.
7. Data Retention
We retain data for the following periods:
- As long as necessary to perform the contract (until claims become time-barred)
- Until consent is withdrawn or an objection is raised (for marketing data), after which for the limitation period
The general limitation period is 6 years, and 3 years for periodic claims or business-related claims (unless a special provision states otherwise).
- As required by law (5 years for tax purposes, 6 years for …)
- Visual content and source code are stored for 30 days unless the user chooses extended storage or deletion
8. User Rights
Users have the right to:
- Access their data
- Correct their data
- Delete their data (“right to be forgotten”)
- Restrict processing
- Data portability
- Object to processing
- Withdraw consent at any time (without affecting the lawfulness of processing based on consent before withdrawal)
9. Cookies
We use cookies to:
- Ensure proper functioning of the platform
- Analyze website traffic
- Personalize content and advertisements (with user consent)
10. Data Security
We use technical and organizational measures, including:
- Data encryption (SSL/TLS)
- Regular security audits
- Restricted access to data for authorized personnel only
11. Children's Data
Our services are not intended for persons under the age of 16. If we become aware that we are processing data of a child without parental/guardian consent, we will promptly delete it.
12. Changes to This Policy
We reserve the right to update this Privacy Policy. Users will be notified of any changes via our website or by email.