Privacy Policy

1. Data Controller

The controller of the personal data of Automio.ai users is ALLEO.NET Tomasz Grzesik, whose address is:

Złota Woda 44
26-025 Łagów, Poland

Tax Identification Number (NIP): 6572714873
REGON: 366265315

For matters concerning privacy and your personal data, you can contact us at contact@automio.ai.

This Policy applies to the Automio.ai website and the applications, integrations and features available through it, collectively referred to as the “Service”.

2. What Data We Process

Depending on how you use the Service, we process account and organisation data, contact and billing details, correspondence, and technical data related to the operation and security of the Service.

Using applications, integrations and AI features may involve processing data from connected accounts, orders, customers, messages, attachments, and content submitted for analysis or generated as part of the Service. The scope depends on the features enabled and the permissions granted.

We receive data from you, from the organisation providing you with an account, from connected services, and through your use of the Service.

Providing data is voluntary, but failing to provide the data necessary for a particular feature may prevent it from working.

3. Purposes and Legal Bases for Processing

We process data to manage your account, provide services and perform our contract with you — on the basis of Article 6(1)(b) of the GDPR. We process data required for billing and compliance with legal obligations on the basis of Article 6(1)(c) of the GDPR.

Handling matters involving representatives of organisations, responding to enquiries unrelated to a contract, maintaining security, and establishing, exercising or defending legal claims are based on our legitimate interests — Article 6(1)(f) of the GDPR. Where a particular activity requires consent, the legal basis for processing is Article 6(1)(a) of the GDPR.

4. Integrations and Artificial Intelligence

We process data from connected services to the extent necessary to carry out tasks arising from the application's configuration.

AI features use OpenAI services and may require the transmission of prompts, documents or other materials, including any personal data they contain.

To the extent that we process other individuals' data solely on behalf of a client, we act as a processor in accordance with the client's documented instructions. This Policy does not replace a data processing agreement or the client's obligations to provide information to data subjects.

Do not submit data that is unnecessary for the task, passwords or access keys to AI features.

5. Service Providers and Data Sharing

We use OVHcloud for infrastructure and OpenAI for AI features.

Cloudflare manages the domain's DNS in “DNS only” mode, without proxying website traffic. DNS management alone does not transmit the contents of forms or documents submitted through the application to Cloudflare.

Data may also be received by providers of email, technical, billing and advisory services — to the extent necessary to provide those services — and by authorities authorised under applicable law.

6. Data Retention

We retain account data for the duration of our services and correspondence for as long as necessary to handle the matter concerned. Once these purposes have been fulfilled, we retain only the data necessary to comply with legal obligations, settle accounts or establish, exercise or defend legal claims, for the period applicable to each purpose.

We retain data from integrations and AI features to the extent necessary to complete a task or provide a requested feature, such as a history of results. Data processed on behalf of a client is also subject to the applicable data processing arrangements.

We do not retain data for longer than necessary to fulfil the purpose for which it is processed.

7. Cookies and Browser Storage

The Service uses browser storage to manage interface settings, including theme selection.

As of the publication date, we do not use Google Analytics or Google Ads.

Technologies necessary to provide a service requested by the user may operate without separate consent in circumstances provided for by law. Optional technologies requiring consent may only be activated after that consent has been obtained. Simply using the website does not constitute the required consent.

You can manage stored website data in your browser settings, including deleting it or restricting its storage.

8. Your Rights

Under the conditions set out in the GDPR, you have the right to access, rectify and erase your personal data, restrict its processing, and receive it through data portability.

You may object to processing based on legitimate interests on grounds relating to your particular situation. For direct marketing, you do not need to provide reasons for your objection.

Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before its withdrawal.

You may also lodge a complaint with the President of the Personal Data Protection Office in Poland if you believe that the processing of your personal data infringes applicable law.

Please send requests to contact@automio.ai. We respond without undue delay, generally within one month of receiving a request. In the circumstances provided for in the GDPR, this period may be extended by a further two months; we will inform you of the extension and the reasons for it within the first month.

9. Changes to This Policy

We publish the current version of this Policy in the Service together with its last updated date.

We will notify users of significant changes concerning the processing of their personal data through a notice in the Service or by email.