Privacy Policy

1. Controller

XYZ Sp. z o.o. — getassist24@gmail.com, ul. Przykładowa 1, 00-001 Warszawa, Polska.

Support chat messages processed for Customers: processor role — DPA.

2. Data

Account data (email, organisation), support chat message text and metadata, authentication, billing, and technical logs needed to operate the service.

3. Purposes and legal bases (GDPR)

Purpose	Legal basis
Provide the service	Art. 6(1)(b) GDPR
Billing and legal obligations	Art. 6(1)(c) GDPR
Security and abuse prevention	Art. 6(1)(f) GDPR
Analytics cookies	Consent — Cookie Policy

4. Recipients

Subprocessors (hosting, authentication, payments).

5. Location

Primarily AWS eu-central-1 (Frankfurt) in the EEA. Transfers outside the EEA only with appropriate safeguards and subprocessor updates.

6. Retention

Support chat message rows are marked for deletion 730 days (two years) after each message is created using DynamoDB TTL. TTL deletion is asynchronous, so an expired message may remain stored and visible until DynamoDB removes it. This period applies only to message rows; conversation/inbox metadata, idempotency records, and billing records are not expired by this TTL and follow their separate lifecycles. Account closure does not trigger immediate chat-message deletion. Payments are processed by Stripe.

7. Rights

Access, rectification, erasure, restriction, objection, complaint to your authority — getassist24@gmail.com.

8. Changes

Current version on this page (date in header).