Privacy Policy

Effective date: 23 July 2026 · Version 1.0

1. Data controller

The controller of your personal data is the operator of the wujec.ai service (contact: contact@wujec.ai). We process personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Polish data protection law.

2. What data we process and why

• Account data (e-mail, display name, password hash, registration and consent timestamps) — to create and maintain your account. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
• Your activity(ratings, reviews) — to provide the Service's core features. Legal basis: Art. 6(1)(b) GDPR.
• Technical logs (IP address, browser data, timestamps) — for security and abuse prevention. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). Retained up to 12 months.

Passwords are stored only as salted bcrypt hashes — we never store or see your plaintext password. We do not profile you, we do not sell your data, and we do not use advertising trackers.

3. Where data is stored

Personal data is stored in a database hosted in the European Union (Render, Frankfurt region, Germany). If any service provider processes data outside the EEA, this only happens under safeguards provided by GDPR Chapter V (adequacy decisions or Standard Contractual Clauses).

4. Retention

Account data is kept as long as the account exists. When you delete your account, your account data, ratings and reviews are permanently deleted without undue delay. Security logs are retained up to 12 months.

5. Your rights

• access to your data (Art. 15) — available in your account;
• rectification (Art. 16);
• erasure — "right to be forgotten" (Art. 17) — the "Delete my account" button;
• restriction of processing (Art. 18);
• data portability (Art. 20) — the "Download my data" button exports your data as JSON;
• objection to processing based on legitimate interest (Art. 21);
• lodging a complaint with a supervisory authority — in Poland: Prezes Urzędu Ochrony Danych Osobowych (uodo.gov.pl).

Requests can be made at contact@wujec.ai and are handled within one month.

6. Recipients of data

Data is processed by our hosting provider (Render) acting as a processor under a data processing agreement. We do not share personal data with other third parties unless required by law.

7. Cookies

We use only strictly necessary cookies (session, security, language preference). Details are described in the Cookie Policy.

8. Changes

We will announce material changes to this Policy on the Service and, for registered users, by e-mail, at least 14 days in advance.