Privacy Notice

1. Controller

The controller of your personal data is Konrad Ciurkiewicz, conducting business under the name Konrad Ciurkiewicz - Web Solutions, registered in the Polish Central Register and Information on Economic Activity (CEIDG), NIP 7952583478, REGON 529617426, place of business: ul. Przemyska 13A, 37-750 Dubiecko, Poland, correspondence address: ul. Małopolska 1/192, 35-620 Rzeszów, Poland, operating the KnownAt service.

Privacy requests may be sent to privacy@knownat.com.

2. Data we process

• account data, including email address, display name, user identifier and authentication provider;
• account and legal records, including document versions accepted, optional consents granted or withdrawn, and their timestamps;
• technical and security data, including session, request, device, IP and diagnostic information generated when the Service is used;
• product usage data, including API requests, queried datasets, exports, quotas and billing events;
• communications sent to support, privacy or other KnownAt contact channels.

3. Purposes and legal bases

4. Recipients and processors

We disclose data only where needed to operate the Service, comply with law or protect legal rights. Current service categories include database and authentication infrastructure (Supabase), website hosting and delivery infrastructure (OpenAI Sites and Cloudflare), transactional email infrastructure (Cloudflare), and professional advisers or public authorities where legally required.

Processors act under contractual and data-protection obligations. We do not sell personal data.

5. International transfers

Some providers may process data outside the European Economic Area. Where required, transfers rely on an adequacy decision, the European Commission’s Standard Contractual Clauses or another mechanism permitted by Chapter V GDPR.

6. Retention

Account data is retained while the account remains active and is deleted or anonymized after account deletion unless continued retention is required by law or necessary for legal claims. Transaction and accounting records are retained for periods required by Polish law. Security and diagnostic records are retained only for the period reasonably necessary to protect and operate the Service. Consent evidence may be retained as necessary to demonstrate compliance.

7. Your rights

Subject to the conditions in applicable law, you may request access, rectification, erasure, restriction, portability or objection. You may withdraw consent at any time without affecting processing performed before withdrawal. Optional marketing consent can be granted and withdrawn at any time in Dashboard → Settings → Email preferences, and each grant and withdrawal is recorded with its timestamp. Account deletion is available in Dashboard → Settings.

You may lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych) or another competent supervisory authority.

8. Automated decision-making

KnownAt does not currently make decisions producing legal or similarly significant effects about users solely through automated processing.

9. Cookies and local storage

KnownAt currently uses storage necessary for authentication, security and user-requested preferences such as color theme. We do not currently use optional advertising cookies. If non-essential analytics or marketing technologies are introduced, they will be controlled through a separate consent mechanism where required.

10. Security

We use access controls, encrypted connections, restricted administrative access and provider security controls appropriate to the nature of the Service. No system can guarantee absolute security; suspected incidents should be reported to security@knownat.com.

11. Changes

We may update this notice as the Service or legal requirements change. The current version and effective date appear at the top. Material changes will be communicated through the Service or by email where appropriate.