Privacy Policy

1. Data Controller

The data controller responsible for your personal data is:

GoAutomate operates under Polish law and is subject to EU data protection regulations, including the General Data Protection Regulation (GDPR — Regulation (EU) 2016/679). Our supervisory authority is the Urząd Ochrony Danych Osobowych (UODO), the Polish Data Protection Office (uodo.gov.pl).

2. What Personal Data We Collect

We collect personal data in the following situations:

2.1 Contact and enquiry data

When you fill in the contact form on our website, we collect:

• Your full name
• Your work or personal email address
• The tools and software you currently use
• A description of the task or problem you want automated
• The service package you are interested in (optional)

2.2 Payment and billing data

When you purchase a service, payment is processed entirely by Stripe, Inc. We never see, receive, or store your card number, CVC, or full payment credentials. Stripe provides us with a limited transaction record containing:

• Transaction ID and amount
• Billing name and country
• Last four digits of the card used
• Payment status and timestamp

Charges appear on your bank statement as GOAUTOMATE.WORK.

2.3 Email correspondence

Once a project is under way, we communicate via email. This correspondence may contain your name, email address, and details about your systems or business processes. We retain project-related emails for the duration of the support period plus any legally required retention period.

2.4 Technical / usage data

Our website does not use analytics services, tracking pixels, or advertising cookies. We do not collect IP addresses, device fingerprints, or behavioural data. The only technical data processed is what is inherently captured in standard web server access logs (IP address, browser type, page requested, timestamp), which are retained for no longer than 30 days and are not used for profiling.

3. How We Use Your Data

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

4. Legal Basis for Processing (GDPR Article 6)

We rely on the following legal bases:

• Article 6(1)(b) — Performance of a contract. Processing your name, email, and project details is necessary to deliver the service you have requested or to take pre-contractual steps at your request.
• Article 6(1)(c) — Legal obligation. We are required by Polish and EU tax and accounting law to retain invoice and payment records for a minimum of five years.
• Article 6(1)(f) — Legitimate interests. We process minimal technical data (server logs) and transaction metadata to protect our infrastructure and prevent fraud. These interests do not override your rights and freedoms.

We do not currently rely on consent as the primary legal basis for any processing. If we introduce email marketing or optional communications in the future, we will request your explicit consent at that time and provide a clear, easy way to withdraw it.

5. Stripe Payments

Our payment processor is Stripe, Inc. (354 Oyster Point Blvd, South San Francisco, CA 94080, USA). When you make a payment, you submit your card details directly to Stripe's secure infrastructure. Stripe processes the transaction and returns a confirmation to us.

Stripe acts as an independent data controller for the payment data you provide to them. Their collection and use of your personal data is governed by Stripe's own Privacy Policy, available at stripe.com/privacy. We encourage you to read it.

The limited payment record Stripe shares with us (transaction ID, last four digits, billing name, amount) is stored securely and used only for order fulfillment, invoicing, and refund processing.

Stripe is certified to PCI DSS Level 1, the highest level of payment security certification. Stripe also participates in the EU–US Data Privacy Framework.

6. Who Sees Your Data

We do not sell, rent, or trade your personal data to third parties. We share it only in the following limited circumstances:

• Stripe, Inc. — processes payment transactions. See Section 5 above.
• Email service providers — we use standard business email services to communicate with you about your project. These providers process email content on our behalf under data processing agreements.
• Legal or regulatory authorities — if required by law, court order, or to protect our legal rights, we may disclose data to Polish or EU authorities (e.g., tax office, police, courts).
• Business transfers — if GoAutomate is sold or merged, personal data held at that time may be transferred to the new owner subject to equivalent privacy protections.

Any third party that processes personal data on our behalf is required to do so only on our documented instructions and in compliance with GDPR.

7. International Data Transfers

GoAutomate is based in Poland (European Union). Some of the third-party services we use — in particular Stripe — are headquartered in the United States. When personal data is transferred outside the European Economic Area (EEA), we rely on one or more of the following safeguards:

• EU Standard Contractual Clauses (SCCs) — contractual commitments approved by the European Commission that impose GDPR-equivalent obligations on the recipient.
• EU–US Data Privacy Framework — Stripe is certified under this framework, which provides an adequacy basis for transfers to participating US companies.
• Adequacy decisions — where the European Commission has determined that a country provides an adequate level of data protection.

You may request a copy of the relevant transfer safeguards by contacting us at support@goautomate.work.

8. How Long We Keep Your Data

After the applicable retention period, your data is securely deleted or anonymised so that it can no longer be linked to you.

9. Your Rights Under the GDPR

As a data subject in the EU/EEA, you have the following rights. You can exercise any of them by contacting us at support@goautomate.work. We will respond within 30 days without charge (unless a request is manifestly unfounded or excessive).

10. Cookies and Similar Technologies

Our website (goautomate.work) uses only strictly necessary cookies. We do not use analytics cookies, advertising cookies, tracking pixels, or social media plugins that collect personal data.

The cookies our site may set are:

• Session state cookies — short-lived cookies set by the browser to maintain your session as you navigate the page. These expire when you close your browser.
• Stripe cookies — when you proceed to payment, Stripe sets its own cookies on their payment pages for fraud prevention and security purposes. These are governed by Stripe's Cookie Policy.

Because we use only strictly necessary cookies, we are not required to obtain cookie consent under Article 5(3) of the ePrivacy Directive. No consent banner is displayed. If we add any non-essential cookies in the future, we will update this policy and display a consent notice before setting those cookies.

11. Children's Privacy

Our services are intended for business use and are directed at adults (18 years and over). We do not knowingly collect personal data from anyone under the age of 18. If we become aware that we have inadvertently collected personal data from a child, we will delete it promptly. If you believe we have collected data from a minor, please contact us at support@goautomate.work.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will update the "Last updated" date at the top of this page.

We encourage you to review this page periodically. If you have an active engagement with us at the time of a material change, we will notify you by email.

Continued use of our website or services after any changes have been posted constitutes your acknowledgement of those changes.

13. Contact Us About This Policy

For any questions, concerns, or requests relating to your personal data or this Privacy Policy, please contact us:

If you are not satisfied with our response, you have the right to lodge a complaint with the Urząd Ochrony Danych Osobowych (UODO):
ul. Stawki 2, 00-193 Warszawa, Poland — uodo.gov.pl