Privacy Policy

The controller of your personal data is Aliaksandr Zhyburtovich, działalność gospodarcza, ul. Szosa Chełmińska, nr 105, 87-100 Toruń, Polska, NIP 5291833798, REGON 388000491.

For anything related to your data — questions, corrections, deletion, complaints — write to checkbusiness.pl@gmail.com. The same address handles ordinary support requests, so you do not have to guess which one to use.

Your account. Username, e-mail address, a hash of your password (we never store the password itself), the interface language you registered in, and whether your address has been confirmed.

Google sign-in. If you sign in with Google, we receive your e-mail address, your name as Google reports it and your Google account identifier. We do not receive your Google password and have no access to anything else in your Google account.

Purchases. Payment metadata from our payment provider: identifiers of the checkout session, subscription and plan, the state of the purchase, the paid period and the moment of payment. We never receive or store your card details — they are handled by the payment provider on their own pages.

The payment provider's event log. Every notification the provider sends us is stored whole, as it arrived, so that a purchase can be reconstructed if something goes wrong. It contains the identifiers above and no card data.

Messages you send us. If you use the contact form, we store your name, e-mail address, subject, the text of your message, the interface language, the page you sent it from and the moment you accepted these documents. The message text is free-form, so please do not put anything there that you would not want stored — including other people's personal data. A copy is also e-mailed to us.

Technical logs. Our web server records the IP address, the requested address, the time and the browser's user-agent string. This is what lets us notice an attack or an outage. The contact form is a deliberate exception: the address it was sent from is not stored with the message, it only lives in memory for up to an hour to limit how often the form can be submitted.

Analytics. Google Analytics, and only if you agree to it — see the Cookie Policy.

The analysis engine is compiled to WebAssembly and runs inside your browser. When you pick an XLSX file, it is read by your own device, the calculation happens there, and the report is rendered there. The file, its contents and the results are not sent to our servers, and we cannot see them.

Practical consequences worth knowing:

• we cannot recover an analysis for you, because we never had it;
• we cannot tell whether you ran an analysis at all — which is also why our refund rules do not depend on usage (see the Terms of Use);
• what you export as a report is written by your browser, not by us.

• To provide what you asked for (performance of a contract): your account, access to the analyses, purchases and invoices.
• On the basis of your consent: analytics, and messages you choose to send through the contact form.
• Because we have a legitimate interest: keeping the service secure and available, preventing abuse of the forms, and answering your enquiries.
• Because the law requires it: accounting and tax records for payments.

We do not sell your data and do not share it for advertising. It is processed on our behalf by:

• the hosting provider that runs our servers;
• Google — for sign-in and, with your consent, analytics;
• our payment provider — for purchases, invoices and refunds;
• the mail relay we use to send confirmation, password-reset and notification e-mails.

Google and the payment provider may process data outside the European Economic Area. Those transfers rely on the standard contractual clauses and, where applicable, on an adequacy decision of the European Commission.

• Account data — while the account exists, and up to 30 days after you ask us to delete it.
• Payment and accounting records — 5 years, as Polish tax law requires.
• The payment provider's event log — 12 months.
• Messages from the contact form — 12 months after the matter is closed.
• Technical logs — 90 days.

These periods are current practice rather than an automated mechanism: deletion is performed on request and during periodic review, not by a background job.

You can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or object to processing based on our legitimate interest. You can also ask for your data in a portable form, and you can withdraw a consent you gave — withdrawal does not affect what we did before it.

Write to checkbusiness.pl@gmail.com and we will answer within one month. If our answer does not satisfy you, you may complain to the Polish supervisory authority — Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa.

At the moment these requests are handled by a person reading e-mail; there is no self-service button for them in the account yet.

Nothing in the service makes an automated decision that affects your rights, and we do not profile you. The recommendations the engine produces are statements about the goods in your spreadsheet, calculated in your browser — not about you.

We use cookies and your browser's local storage to keep you signed in, to remember your choices and — with your consent — for analytics. What exactly is stored, why and for how long is listed in the Cookie Policy.

We update this policy when the service changes. The date of the current version is shown at the top of this page. If a change materially affects you, we will say so on the site or by e-mail rather than quietly replacing the text.