Privacy and Cookie Policy

This policy explains how we process personal data when you use InfoDome at infodome.si, in line with the GDPR (Regulation (EU) 2016/679). Last updated: 2026-10-06.

1. Controller

Larysa Danyuk, ul. Jana III Sobieskiego 1/49, 02-957 Warszawa (Mazowieckie), Poland, NIP 5214137319, REGON 543026074, phone +48 532 875 937.

2. What we process and why

• Account data from Google sign-in (e-mail, name, profile picture, Google account ID): to create and run your account — contract, Art. 6(1)⁠(b) GDPR.
• Subscription and billing data (Stripe customer ID, subscription status and periods, invoices); card data is processed only by Stripe: to perform the contract and meet tax and accounting obligations — Art. 6(1)⁠(b) and (c).
• Your materials and outputs (uploaded files, descriptions, simulation data, reports, chats): to provide the Service — Art. 6(1)⁠(b).
• Usage data (amounts of AI processing per account): to apply allowances and prevent abuse — Art. 6(1)⁠(b) and (f).
• Technical data (IP address, browser data, server logs, security events): to keep the Service secure — legitimate interest, Art. 6(1)⁠(f).
• Consent records (cookie choice, acceptance of the Terms and the withdrawal acknowledgement): to prove compliance — Art. 6(1)⁠(c) and (f).

Please do not upload special categories of data (e.g. health, political opinions) or personal data of other people unless you have a legal basis for it.

3. Recipients

• Hosting: Hostinger (servers in the EU).
• AI providers we select (e.g. OpenAI, Google, Anthropic): they process the text of your materials and simulations to generate outputs, as our processors, and under their API terms do not use it for training.
• Zep: knowledge-graph memory built from your materials.
• Stripe: payments. Google: sign-in and, only with your consent, Google Fonts and Google Translate.

We do not sell personal data and do not use it for advertising profiles.

4. Transfers outside the EEA

Some providers are based in the USA. Transfers rely on the EU-US Data Privacy Framework or on Standard Contractual Clauses.

5. Retention

Account data: while the account exists. Materials and outputs: until you delete them or your account (removed within 30 days, from backups within 90 days). Billing records: 5 years from the end of the tax year. Server logs: up to 90 days. Consent records: as long as needed to demonstrate them.

6. Your rights

You have the right to access, rectify and erase your data, to restrict processing, to data portability, to object to processing based on legitimate interests, and to withdraw consent at any time. You can complain to a supervisory authority: in Poland the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warszawa, or the authority of your country.

We do not take automated decisions that have legal or similarly significant effects on you.

7. Cookies and similar technologies

Necessary (no consent required):

• gw_session — sign-in session and security token (CSRF), 30 days.
• idc_consent — your cookie choice, 6 months.
• idt_lang, locale (browser storage) — your language.

Functional (only with your consent):

• Google Fonts — fonts loaded from Google servers; your IP address is sent to Google.
• Google Translate — machine translation into 130+ languages; the page text and your IP address are sent to Google; the googtrans cookie stores the chosen language.

Payment pages are provided by Stripe on its own domain with its own cookies. We use no analytics or advertising cookies. You can change your choice at any time via “Cookie settings” in the footer.

8. Changes

We publish updates of this policy on this page with the date of the change.