Privacy Policy.

Last updated: January 5, 2026

This Privacy Policy describes how Sapsan Krystian Hutyra ("Company", "we", "us", or "our") collects, uses, and shares information about you when you use SAPSAN TERMINAL ("Service"). We are committed to protecting your privacy and processing your personal data in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Information We Collect

We collect information in the following categories:

2.1 Information You Provide Directly

• Account Information: When you create an account, we collect your email address and (optionally) the name you provide. Passwords are hashed with bcrypt before storage.
• Payment Information: When you subscribe to Premium, payment details are processed securely by Stripe, Inc. We do not store complete credit card numbers on our servers
• Script Content: Scripts and code you create, edit, and store using our Service
• Communication Data: Information you provide when contacting our support team

2.2 Information Collected Automatically

• Usage Data: Information about how you interact with our Service, including features used, pages visited, and actions taken
• Device Information: Browser type, operating system, device type, and screen resolution
• Log Data: IP address, access times, and referring URLs
• Cookies: Session cookies for authentication and preference cookies for user experience

3. Legal Basis for Processing (GDPR)

We process your personal data based on the following legal grounds:

• Contract Performance (Art. 6(1)(b) GDPR): Processing necessary to provide the Service you requested, including account management and subscription services
• Legitimate Interests (Art. 6(1)(f) GDPR): Processing for our legitimate business interests, such as fraud prevention, security, and service improvement, where these interests are not overridden by your rights
• Legal Obligation (Art. 6(1)(c) GDPR): Processing required to comply with legal obligations, such as tax and accounting requirements
• Consent (Art. 6(1)(a) GDPR): Where you have given explicit consent, such as for marketing communications

4. How We Use Your Information

We use the information we collect for the following purposes:

• Provide, operate, and maintain the Service
• Process transactions and manage your subscription
• Authenticate your identity and secure your account
• Respond to your inquiries and provide customer support
• Send transactional emails (account confirmations, payment receipts, service updates)
• Detect, prevent, and address fraud, abuse, and security issues
• Analyze usage patterns to improve and optimize the Service
• Comply with legal obligations and enforce our Terms of Service

5. Marketing Communications

We will only send you marketing communications if you have explicitly opted in. You can withdraw your consent at any time by:

• Clicking the "unsubscribe" link in any marketing email
• Updating your preferences in your account settings
• Contacting us at [email protected]

6. Data Sharing and Disclosure

We do not sell your personal information. We may share your information with:

• Service Providers: Third parties that help us operate our Service:
  • Stripe, Inc. (payment processing)
  • Resend (transactional email delivery)
  • Cloud hosting providers (data storage)
  • AI service providers (for AI features)
• Legal Requirements: When required by law, court order, or governmental authority, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others
• Business Transfers: In connection with any merger, acquisition, or sale of assets, your data may be transferred as a business asset

8. Data Retention

We retain your personal data for as long as necessary to:

• Provide the Service and maintain your account
• Comply with legal obligations (e.g., tax records retained for 5-7 years)
• Resolve disputes and enforce our agreements

When you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law or for legitimate business purposes.

10. Cookies and Tracking Technologies

We use cookies and similar technologies for the following purposes:

• Essential Cookies: Required for authentication and core functionality
• Preference Cookies: Remember your settings and preferences
• Analytics Cookies: Help us understand how users interact with the Service

You can control cookies through your browser settings. Disabling essential cookies may affect the functionality of the Service.

11. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA), including the United States. When we transfer data internationally, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions by the European Commission
• Other legally recognized transfer mechanisms

12. Children's Privacy

Our Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a minor, please contact us immediately, and we will take steps to delete such information.

13. Third-Party Links

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy on our website
• Updating the "Last updated" date at the top
• Sending an email notification for significant changes

Your continued use of the Service after changes become effective constitutes acceptance of the updated Privacy Policy.

15. Supervisory Authority

If you are not satisfied with our response to your privacy concerns, you have the right to lodge a complaint with your local data protection authority. For users in Poland, this is:

16. Contact Us

If you have any questions about this Privacy Policy, your personal data, or wish to exercise your rights, please contact us:

By using SAPSAN TERMINAL, you acknowledge that you have read and understood this Privacy Policy.