Privacy Policy

This Privacy Policy explains how nxtweb. Mateusz Lisowski NIP: 6793303074, based in Poland, Gromadzka 22c, 30-714 Kraków ("we", "us", or "our") collects, uses, and shares information about you when you use our website and services (collectively, the "Service"). By using the Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

We collect the following categories of information:

• Account information — name, email address, and password (hashed) when you create an account.
• Content — links, signatures, UTM configurations, and other data you create within the Service.
• Usage data — pages visited, actions taken, approximate location, device and browser information, via first-party analytics (Umami).
• Payment data — processed by our payment provider; we do not store card numbers.

2. How We Use Information

We use your information to:

• Provide, maintain, and improve the Service.
• Authenticate you and protect your account from unauthorized access.
• Send transactional emails (verification, password reset, billing notices).
• Monitor and analyze usage trends to improve reliability and performance.
• Comply with legal obligations.

3. Legal Basis (GDPR)

If you are located in the European Economic Area or United Kingdom, we process your personal data on the following legal bases: performance of a contract, legitimate interests, compliance with legal obligations, and, where applicable, your consent.

4. Sharing & Third Parties

We share information only with service providers that help us operate the Service, including:

• Hosting and database providers
• Email delivery (Resend)
• Anti-abuse (Cloudflare Turnstile)
• Asset storage (DigitalOcean Spaces)
• Payment processing

We do not sell your personal data. We may disclose information if required by law or to protect our rights and users.

5. Data Retention

We retain account data for as long as your account is active. You may request deletion at any time; residual data may remain in backups for up to 30 days before being purged.

6. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data, restrict or object to processing, and lodge a complaint with a supervisory authority. To exercise these rights, contact us at the email below.

7. Security

We use industry-standard safeguards (encryption in transit, hashed passwords, access controls). No system is perfectly secure, so we cannot guarantee absolute security.

8. International Transfers

Your information may be processed in countries other than your own. Where required, we rely on Standard Contractual Clauses or equivalent safeguards.

9. Children

The Service is not directed to children under 18, and we do not knowingly collect personal data from them.

10. Changes to This Policy

We may update this Policy from time to time. Material changes will be announced via email or in-app notice. Continued use of the Service after changes constitutes acceptance.

11. Contact

Questions about this Policy? Contact us at privacy@nxtweb.dev.