Privacy Policy

01

Data controller

The controller of your personal data is OTW ([[FORMA_PRAWNA]], [[PODMIOT]], tax no. [[NIP]], REGON [[REGON]], address: [[ADRES]]), operating the site otw-dev.com. For any matter concerning personal data, contact us at otw.integrations@gmail.com. We have not appointed a Data Protection Officer; direct all correspondence to that address.

02

What data we collect

We collect only data you provide to us or that is technically necessary to run and protect the site:

• Email address — when you join the waitlist or write to us.
• Content of your messages to the AI assistant — the text you type in the chat and any files you choose to attach (image, PDF, text file).
• Technical data — IP address and basic request metadata, processed transiently for security and abuse limiting (rate limiting).

03

Legal bases and purposes (Art. 6 GDPR)

We process data on the following bases:

• Waitlist and contact — your consent (Art. 6(1)(a)) or steps taken at your request prior to a contract (Art. 6(1)(b)). You may withdraw consent at any time.
• Security, server logs and rate limiting — our legitimate interest in protecting the site from abuse (Art. 6(1)(f)).
• AI assistant — our legitimate interest in offering a help feature and demonstrating our service (Art. 6(1)(f)); you use it voluntarily.

04

Recipients and processors

We do not sell your data. We use trusted providers that process data on our behalf (processors, Art. 28 GDPR):

• Vercel Inc. (USA) — site hosting and technical logs.
• Anthropic PBC (USA) — the language-model provider (Claude) that generates the assistant's replies. Your conversation is sent to Anthropic solely to produce a reply. Under Anthropic's API terms, API data is not used to train models.

05

Transfers outside the EEA

Because our providers (Vercel, Anthropic) operate in the USA, your data may be processed outside the European Economic Area. Transfers rely on Chapter V GDPR mechanisms: Standard Contractual Clauses (SCC) or certification under the EU-US Data Privacy Framework. We will provide a copy of, or reference to, the safeguard on request.

06

How long we keep data

• Waitlist email — until you withdraw consent or the contact ends, no longer than necessary for the purpose.
• Technical logs (including IP) — short term, typically up to 90 days.
• Assistant conversations — we do not store them persistently on our servers; they live in your browser during the session. At the model provider (Anthropic) they may be subject to limited retention under its policy (as a rule about 30 days).

07

Your rights (Art. 12–22 GDPR)

You have the right to: access and a copy of your data, rectification, erasure (the 'right to be forgotten'), restriction of processing, data portability, objection to processing based on legitimate interest, and withdrawal of consent at any time (without affecting the lawfulness of prior processing). To exercise these rights, write to otw.integrations@gmail.com. We respond without undue delay, within one month at the latest.

08

Complaint to a supervisory authority

If you believe we process your data unlawfully, you may lodge a complaint with the President of the Personal Data Protection Office (PUODO), ul. Stawki 2, 00-193 Warsaw, Poland (uodo.gov.pl).

09

Data breaches

In the event of a personal-data breach likely to result in a risk to your rights, we will notify the supervisory authority within 72 hours (Art. 33 GDPR) and, where the risk is high, also inform you (Art. 34 GDPR).

10

US residents (CCPA/CPRA and state law)

If you are a resident of California or another US state with a privacy law (e.g. Virginia, Colorado): we do not sell or 'share' (as defined by the CPRA) your personal information, and have not done so in the past 12 months. You have the right to know what we collect, to request deletion or correction, and not to be discriminated against for exercising these rights. We honor the Global Privacy Control (GPC) signal. The categories and purposes match those described above. Send requests to otw.integrations@gmail.com.

11

Changes to this policy

We may update this policy. The last-updated date is shown at the top; we will flag material changes on the site.