1. Data controller
The controller of your personal data is App Services, registered at Podolska 21, 81-321 Gdynia, tax ID 7311926683. Contact for data matters: office@irriforge.com.
2. What data we process
- Account data: e-mail address, name, Google identifier (when signing in with Google).
- Project content: site plans, placed elements, settings, thumbnails.
- Billing data: payment history and plan — card details are processed solely by Stripe.
- Technical data: IP address, browser type, error logs (Sentry), and aggregated page-view and performance statistics (Vercel) — the latter without cookies and in a form that cannot identify you.
- With consent — analytics data: usage statistics (Google Analytics) and session recordings with text masked (Sentry Session Replay).
3. Purposes and legal bases
- Providing the service and managing your account — Art. 6(1)(b) GDPR (contract).
- Billing and accounting — Art. 6(1)(c) GDPR (legal obligation).
- Security, error detection and fixing — Art. 6(1)(f) GDPR (legitimate interest).
- Analytics and session recordings — Art. 6(1)(a) GDPR (consent); you can withdraw consent at any time.
4. Cookies
Necessary cookies always run; analytics cookies only after you consent in the banner. You can change your choice here: .
| Cookie | Type | Purpose | Duration |
|---|---|---|---|
| better-auth.session_token | Necessary | Keeps you signed in | 7 days |
| irriforge-lang | Necessary | Remembers your language | 1 year |
| irriforge-consent | Necessary | Stores your cookie choice | 180 days |
| _ga, _ga_* | Analytics (with consent) | Google Analytics — usage statistics | up to 2 years |
5. Data recipients
We entrust data to processors that provide services for us:
- Vercel Inc. — application hosting, plus traffic and performance statistics (Vercel Web Analytics / Speed Insights — no cookies and no identifiers that could identify you)
- Neon Inc. — database
- Stripe, Inc. — payments
- Google Ireland Ltd. — Google sign-in and Google Analytics (with consent)
- Resend / Plus Five Five, Inc. — transactional e-mail
- Functional Software, Inc. (Sentry) — error monitoring and session replays (with consent)
6. Transfers outside the EEA
Some providers process data in the United States. Transfers rely on an adequacy decision (EU–US Data Privacy Framework) or Standard Contractual Clauses (SCCs).
7. Retention
- Account data and projects — until account deletion, then up to 30 days (backups).
- Billing documents — 5 tax years.
- Analytics data — up to 14 months (Google Analytics); session replays up to 90 days (Sentry).
8. Your rights
You have the right to access, rectify, and erase your data, restrict processing, data portability, objection, and to withdraw consent at any time (without affecting the lawfulness of prior processing). You may lodge a complaint with your supervisory authority — in Poland, the President of the Personal Data Protection Office (uodo.gov.pl). Requests: office@irriforge.com.
9. Changes to this policy
We will announce material changes in the Service or by e-mail.