1. Data controller
The controller of your personal data is App Services, registered at Podolska 21, 81-321 Gdynia, tax ID 7311926683. Contact for data matters: office@irriforge.com.
2. What data we process
- Computer link: your email address, selected role and language, and technical data needed for delivery and abuse prevention. Sending the link does not create an account or subscribe you to a newsletter.
- Account data: e-mail address, name, Google identifier (when signing in with Google).
- Project content: site plans, placed elements, settings, thumbnails.
- Billing data: payment history and plan — card details are processed solely by Stripe.
- Technical data: IP address, browser type, error information, and aggregate page-view and performance statistics.
- With consent — app usage statistics and session recordings with text masked, to help us improve the service.
- With consent — data about visits, registrations and purchases, plus cookie and ad identifiers, to measure and personalise Meta ads. We do not share email addresses, names or project content for this purpose.
3. Purposes and legal bases
- Providing the service and managing your account — Art. 6(1)(b) GDPR (contract).
- Billing and accounting — Art. 6(1)(c) GDPR (legal obligation).
- Security, error detection and fixing — Art. 6(1)(f) GDPR (legitimate interest).
- Analytics and session recordings — Art. 6(1)(a) GDPR (consent); you can withdraw consent at any time.
- Measuring and personalising Meta ads — Art. 6(1)(a) GDPR (consent to optional cookies).
4. Cookies
Necessary cookies always run. “Accept all” enables analytics and marketing; “Necessary only” leaves them off. Optional cookies require your consent. You can change your choice here: .
Necessary cookies support sign-in, language and your cookie choice. Analytics cookies help us improve the app; marketing cookies help measure and personalise ads. We remember your choice for 180 days. Other necessary cookies last up to one year, analytics cookies up to two years, and marketing cookies up to three months. You can also delete cookies in your browser.
5. Data recipients
We use the following categories of data recipients:
- Providers of hosting, data storage, email delivery, error monitoring and app usage analysis.
- Stripe for payments; Google for sign-in and, with consent, analytics.
- Meta for ad measurement and personalisation, with consent. Meta may combine these data with activity on its services; see the Meta Privacy Policy.
6. Transfers outside the EEA
Some providers process data in the United States. Transfers rely on an adequacy decision (EU–US Data Privacy Framework) or Standard Contractual Clauses (SCCs).
7. Retention
- Computer links are valid for seven days. Expired technical records are deleted when the next send request is processed.
- Account data and projects — until account deletion, then up to 30 days (backups).
- Billing documents — 5 tax years.
- Analytics data — up to 14 months; session recordings — up to 90 days.
8. Your rights
You have the right to access, rectify, and erase your data, restrict processing, data portability, objection, and to withdraw consent at any time (without affecting the lawfulness of prior processing). You may lodge a complaint with your supervisory authority — in Poland, the President of the Personal Data Protection Office (uodo.gov.pl). Requests: office@irriforge.com.
9. Changes to this policy
We will announce material changes in the Service or by e-mail.