Legal
Privacy Policy
Short and without a smokescreen: what we collect, why, how long we keep it and who we entrust it to.
Last updated: 21 August 2026
Who is the controller
The data controller is Custom Service Arleta Marczyńska, ul. Bielska 107, 32-652 Bulowice, NIP (tax identification number) 5492373228. Contact for personal data matters: arlets@yesfor.ai.
What we collect and why
| Data | Source | Purpose | Legal basis |
|---|---|---|---|
| Name, email, optionally company and phone number | Request form | Replying to the request and agreeing the scope | Consent and, once a contract is concluded, its performance |
| Content of the request: subject, purpose, type of data, description | Request form | Assessing what can be checked, and pricing | Consent and, once a contract is concluded, its performance |
| Irreversible hash of the IP address | Automatically when the form is submitted | Limiting abuse | Legitimate interest |
| Information about the browser and the page you came from | Automatically when the form is submitted | Diagnostics and knowing which channels work | Legitimate interest |
We do not store your IP address. We store a hash of it computed with an application secret, which cannot be reversed. It is used solely to count how many requests came from one place within a short time.
What we do not do
- We do not sell data or share it for marketing purposes.
- We do not profile you or make automated decisions based on your data.
- We do not send the content of requests to language models.
- We do not put personal data into analytics tools.
How long we keep it
- A request that did not lead to working together: 12 months from the last contact.
- A request that led to a contract: for the duration of the cooperation and for the period required by accounting laws.
- IP address hash: 90 days.
Who we entrust it to
The current list of entities that process data on our behalf is on the subprocessors page.
Your rights
You have the right to access your data, to rectification, erasure, restriction of processing and data portability, and the right to object to processing based on legitimate interest. You can withdraw consent at any time, which does not affect the lawfulness of what we did before.
Write to arlets@yesfor.ai. We reply within 30 days. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes UODO).
Data you give us as part of an audit
If during an assessment you give us access to a system or documents containing personal data, you are their controller and we are the processor. The rules are set out in a separate data processing agreement.