Privacy Policy

Last updated: April 2026

1. General Information

This Privacy Policy explains how personal data is collected, used, and protected in connection with the use of the Sell.AI website, WooCommerce plugin, and SaaS services (the "Service").

2. Data Controller

The controller of your personal data is:

• creatywniwsieci.pl Joanna Nowak
• ul. Armii Krajowej 17/7
• 76-100 Sławno, Poland
• Email: biuro@creatywniwsieci.pl
• VAT ID: PL4990681945

3. Scope of Data Processing

3.1 Account and Purchase Data

When you create an account or purchase a license, we may collect:

• Email address
• Full name
• Company name (optional)
• Country
• Billing address and details

Payment data is processed by external payment providers. We do not store full credit card details.

3.2 License and Technical Data

• License key
• Activated domain(s)
• License status
• Server requests and basic technical logs (e.g. IP, timestamps)

3.3 Anonymised Usage Data

We may collect anonymised and aggregated data such as feature usage, performance metrics, and error logs. These data cannot be used to identify individuals.

3.4 Data We Do NOT Collect

We do not collect or store:

• Customer conversations or chatbot messages
• WooCommerce store data (products, orders, customers)
• Your OpenAI API key
• End-customer personal data

All such data remains fully under your control.

4. Roles in Data Processing

• We act as a data controller for account, billing, and license data
• You act as a data controller for your store customers and end-users
• The plugin operates primarily on your own infrastructure

5. Legal Basis for Processing (GDPR)

We process personal data based on:

• Contract performance — to provide the Service
• Legal obligation — accounting and tax regulations
• Legitimate interest — security, fraud prevention, system monitoring, and product improvement
• Consent — where required (e.g. cookies)

6. Purpose of Processing

We process data to:

• Provide and maintain the Service
• Manage licenses
• Process payments
• Provide customer support
• Ensure security and prevent abuse
• Improve and develop the product

7. AI and Automated Processing

The Service uses artificial intelligence technologies to generate responses and improve performance. This may involve automated processing of user inputs.

We do not make legally binding decisions based solely on automated processing within the meaning of Article 22 GDPR.

8. Third-Party Services

We use trusted third-party providers:

• Stripe, Inc. — payment processing (Privacy Policy)
• Hosting providers — infrastructure and data storage
• Email service providers — communication

OpenAI Integration

The plugin uses your own OpenAI API key. Data is sent directly from your server to OpenAI. We do not access, store, or process this data.

OpenAI may act as an independent data controller or processor depending on your usage. You are responsible for compliance with OpenAI's terms and policies.

9. Data Transfers Outside the EEA

Some service providers may process data outside the European Economic Area (EEA), including in the United States. In such cases, we ensure appropriate safeguards, including Standard Contractual Clauses (SCCs) approved by the European Commission.

10. Data Retention

We retain personal data only as long as necessary:

• Account data — while your license is active, plus 30 days
• Billing data — as required by applicable law
• Technical and anonymised data — up to 90 days

11. Your Rights

Under GDPR, you have the right to:

• Access your data
• Rectify inaccurate data
• Request deletion of data
• Restrict processing
• Data portability
• Object to processing
• Withdraw consent at any time

To exercise your rights, contact us at: biuro@creatywniwsieci.pl

12. Supervisory Authority

You have the right to lodge a complaint with a supervisory authority. In Poland, this is the President of the Personal Data Protection Office (UODO).

13. Cookies

We use cookies to ensure proper functioning of the Service.

• Essential cookies — required for functionality and security
• Optional cookies — analytics or marketing (used only with your consent)

Where required by law, we obtain your consent before using non-essential cookies.

14. Security

We implement appropriate technical and organisational measures, including encryption, access control, and secure infrastructure, to protect personal data against unauthorized access, loss, or misuse.

15. Children's Data

The Service is not intended for individuals under the age of 16. We do not knowingly collect personal data from children.

16. Changes to this Policy

We may update this Privacy Policy from time to time. Any changes will be published on this page. Continued use of the Service constitutes acceptance of the updated Policy.

17. Contact

• Email: biuro@creatywniwsieci.pl
• Address: creatywniwsieci.pl Joanna Nowak, ul. Armii Krajowej 17/7, 76-100 Sławno, Poland

For information on how we process data as a processor on your behalf, see our Data Processing Agreement (DPA).