Privacy
Privacy Policy
Last updated: July 8, 2026
1. Data controller
The controller of your personal data is:
- Damian Klimarczyk MDGA
- VAT ID: PL7812019335
- Email: damian@euailabel.app
- Websites: aiact.solutions · euailabel.app · aiacticon.com · euaiicon.com
2. Scope
This policy covers the marketing website at aiact.solutions and, where you interact with them through this hub, the associated products EU AI Label, AI Act Icon and EU AI Icon (collectively, the “Service”). Each product site may publish its own more detailed policy.
3. What we collect
- Contact & demo requests: email address and any details you share when booking a demo via Calendly.
- Account & billing (in the apps): merchant email, store domain, plan and billing metadata handled by the Shopify Billing API or the WordPress plugin’s licensing flow.
- Support: messages you send us by email.
- Operational logs: IP address, user agent, request timestamps and error traces used to keep the Service reliable and secure.
- Analytics & product insight: with your consent, pseudonymised data from Google Analytics 4 and Microsoft Clarity (see §6).
4. Legal bases (GDPR art. 6)
- Contract — to provide the tools you install or use.
- Legal obligation — invoicing, VAT and accounting.
- Legitimate interest — securing the Service and preventing abuse.
- Consent — non-essential cookies and analytics.
5. Subprocessors
We use the following providers to run the Service. Each acts as a processor or independent controller and has their own privacy terms.
| Provider | Purpose | Region |
|---|---|---|
| Shopify Inc. | App hosting on Shopify, OAuth, billing | Canada / EU |
| Automattic / WordPress.org | Plugin distribution | USA |
| Cloudflare, Inc. | CDN, DNS, edge hosting | Global |
| Supabase (Lovable Cloud) | Database, auth, storage backend | EU |
| Calendly LLC | Demo scheduling | USA |
| Google LLC — Analytics 4 | Website analytics (with consent) | USA / EU |
| Microsoft Corporation — Clarity | Heatmaps & session replay (with consent) | USA / EU |
| Google LLC — Fonts | Web font delivery | USA / EU |
| GitHub, Inc. | Open-source plugin releases | USA |
Where a provider is based outside the EEA, transfers rely on the EU-US Data Privacy Framework and/or Standard Contractual Clauses.
6. Cookies & analytics
We set strictly necessary cookies to operate the site. With your consent we may also load:
- Google Analytics 4 — aggregated traffic, IP-anonymised.
- Microsoft Clarity — heatmaps and session recordings; sensitive input fields are masked by default.
- Google Tag Manager / gtag.js — loader for GA4.
- Google Fonts — served from fonts.googleapis.com.
7. Retention
- Merchant account data: for the life of the installation, then deleted within 30 days of uninstall.
- Invoices & VAT records: 5 years, as required by Polish tax law.
- Operational logs: up to 90 days.
- Analytics data: per GA4 default retention (14 months).
8. Your rights
Under GDPR you have the right to access, rectify, erase, restrict, port, and object to processing of your personal data, and to withdraw consent at any time. To exercise any of these rights, email damian@euailabel.app. You may also lodge a complaint with the Polish supervisory authority (UODO, uodo.gov.pl).
9. Security
Data is transmitted over TLS. Access to production systems is restricted and logged. We do not sell your data and do not share it with advertisers.
10. Changes
We will post material changes to this policy on this page and update the “Last updated” date above.