Privacy Policy

1. Who is responsible for your data

For account, billing and service-support data, the controller is Codently Maciej Ziółko, os XX-lecia 4/16 32-340 Wolbrom, Poland. Contact: kontakt@naszdzien.app.

For photos, videos and captions submitted to a couple's event page, the event organiser normally decides why the content is collected. Nasz Dzień processes that content on the organiser's behalf as a service provider.

2. Data we process

• Account details: name, email address, password hash, language and accepted document version.
• Billing details and subscription status received from Stripe. We do not store full card numbers.
• Event content: page settings, optional page-access password hash, locations, schedules, menus, photos, videos, captions and technical upload metadata.
• Security data: shortened or pseudonymised request identifiers, timestamps and server logs.

3. Purposes and legal bases

• Providing the service and managing the subscription: performance of a contract.
• Payments, accounting and legal records: legal obligation.
• Security, abuse prevention and claims: legitimate interests.
• Optional communications or analytics, if introduced: only under the legal basis communicated at that time.

4. Service providers and transfers

We use infrastructure, communication and payment providers such as Vercel, a PostgreSQL hosting provider, Cloudflare R2, Resend and Stripe. They receive only the data required to provide their part of the service. Where data leaves the EEA, applicable safeguards such as adequacy decisions or standard contractual clauses are used.

5. Retention

Account and event data is kept while the subscription or account is active. Event media is deleted when the customer removes it and is scheduled for deletion no later than 30 days after account closure, subject to backup rotation. Billing and legal records may be retained for periods required by law. Security logs are retained only as long as reasonably needed to investigate abuse.

6. Your rights

You may request access, correction, deletion, restriction, portability or object to processing by writing to kontakt@naszdzien.app. You may also complain to the Polish data protection authority (UODO) or your local supervisory authority. Requests concerning an event upload may also be directed to the event organiser.

7. Automated decisions and children

We do not make decisions with legal or similarly significant effects based solely on automated processing. The account service is intended for adults able to enter into a contract.

8. Changes

Material changes will be announced in the service. The date at the top identifies the current version.