Privacy policy
Last updated: 10 October 2026
This is a translation of the Polish Polityka prywatności. In the event of any discrepancy, the Polish version prevails.
1. Data controller
The controller of your personal data is Jerzy Sawiński, a sole trader, ul. Spławie 63, 61-312 Poznań, Poland, NIP (tax ID) 7822489982, REGON 369460572 (“vibe4you”, “we”). For any matter concerning personal data, you can write to jerzy.sawinski@vibe4you.pl or call +48 730 674 064.
2. What data we collect
We only process data that you provide to us yourself, together with the technical data needed for the website to work:
- Enquiry form (multi-step): first name and surname, email address, optionally a telephone number, company name, industry, company size, website address, the areas your enquiry relates to, tools you use, budget, timeframe, preferred contact method and a description of the problem. If you choose to use them, also a voice recording (recorded only after you click and allow your browser to access the microphone) and uploaded files.
- Process X-ray (the diagnosis page): first name and surname, email address and a description of the process, either as text or as a voice recording. On this basis we automatically prepare a preliminary report, which is displayed to you on the page.
- Tools that run in your browser (operational maturity test, ISO 9001:2026 gap analysis): your answers are calculated only in your browser and are not sent to us. We do not process them as a controller.
- Email and telephone contact: data contained in correspondence, including where the form, instead of sending directly, opens your email program with a pre-filled message.
- Technical data: IP address and basic information about your browser and the request, processed when delivering the website, for spam protection and, when forms are submitted, to limit the number of submissions from a single address (for this purpose the IP address may be stored for up to one hour).
3. Purposes and legal bases of processing
- responding to your enquiry, preparing for a conversation, preparing a preliminary diagnosis and, at your request, a proposal: taking steps at your request prior to entering into a contract (Article 6(1)(b) GDPR),
- transcribing recordings and processing your enquiry and process description with the help of AI tools, to the extent set out in the consent given in the form: your consent (Article 6(1)(a) GDPR),
- handling enquiries sent by email or telephone, protecting the forms against spam and abuse, and keeping the website secure: our legitimate interest (Article 6(1)(f) GDPR).
4. Use of AI tools
Voice recordings are automatically converted into text (transcription). Based on the description and the transcript, AI tools prepare an internal summary of an enquiry submitted through the form and, in the Process X-ray, a preliminary report that you see on screen. We do not make decisions about you based solely on automated processing, including profiling, that would produce legal effects concerning you or similarly significantly affect you. The report is for information only, and any next steps are decided by a person after talking to you.
5. Who we share data with
We entrust data to providers who help us run the website and handle enquiries, only to the extent needed for them to provide their services:
- Cloudflare: website hosting (Cloudflare Workers), spam protection for the forms (Turnstile), automatic transcription of recordings (Workers AI) and, where enabled, cookieless visitor statistics (Cloudflare Web Analytics),
- Anthropic: summarising enquiries and preparing the preliminary process diagnosis (Claude API),
- Google: storing enquiries, recordings and uploaded files (Google Sheets, Google Drive) and email (Gmail), which receives correspondence sent to jerzy.sawinski@vibe4you.pl,
- Resend: sending enquiry notifications and email confirmations.
We do not sell personal data. If, as part of a project, data were to be processed using AI tools, the rules for such processing are agreed separately before work begins.
6. Transfers outside the EEA
Some of the providers listed above are based in the USA or use infrastructure outside the European Economic Area, so data may be processed there. Such transfers take place on the basis of a European Commission decision finding an adequate level of protection (including the EU-US Data Privacy Framework) or standard contractual clauses approved by the European Commission. You can ask us for information about the safeguards applied.
7. How long we keep data
- enquiries, descriptions, transcripts, summaries and reports: until talks about working together have ended and, if we do not go on to work together, no longer than 12 months from the last contact,
- voice recordings and uploaded files: for the same period as the enquiry they relate to,
- recordings passed to Cloudflare Workers AI for transcription: not stored once transcription is complete,
- if we enter into a contract: for the duration of the contract and thereafter for the period required by law,
- data processed on the basis of consent: until consent is withdrawn, but no longer than the periods stated above.
8. Your rights
You have the right to:
- access your data and receive a copy of it,
- rectification of your data,
- erasure of your data,
- restriction of processing,
- data portability,
- object to processing based on legitimate interest,
- withdraw consent at any time, without affecting the lawfulness of processing carried out before its withdrawal,
- lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, Poland).
To exercise these rights, write to jerzy.sawinski@vibe4you.pl.
9. Whether providing data is required
Providing data is voluntary. However, without your name, email address and the consent given in the form, we cannot accept your enquiry or prepare a preliminary diagnosis. Voice recordings and files are always optional.
10. Cookies and similar technologies
The website does not use analytics or marketing cookies. Fonts are hosted on our own server, so visiting the website does not connect to Google Fonts. The forms are protected by Cloudflare Turnstile, which may process technical browser data solely to tell humans apart from bots. To measure traffic we may use Cloudflare Web Analytics, which does not set cookies or track users across websites. If we add tools that require consent in the future, we will update this section.
11. Data security
The website is served only over an encrypted HTTPS connection. Only the controller has access to enquiries, recordings and files, and access keys for external services are kept as protected environment variables, outside the website code. We also use spam protection and limits on the number of submissions.
12. Changes to this privacy policy
We update this policy whenever the way the website works or the list of providers changes. The current version is always available on this page, and the date of the latest change is shown at the top.