Privacy Policy

During use of the Service, we process the following categories of data:

• Email address — required to create an account, log in, and communicate with you.
• Phone number — optional, provided as part of the User profile.
• Full name — provided during registration to personalize communication.
• Company details — VAT ID, name, address — required for issuing VAT invoices.
• Activity logs — login dates, IP address, list of sent SMS messages.

Service delivery (GDPR art. 6(1)(b) — contract) — account registration, dashboard operation, scheduling and sending operational SMS.

Operational communication with SMS recipients (GDPR art. 6(1)(b) or (f)) — performance of User's contract with their customer or legitimate interest. Does NOT require separate marketing consent.

Communication with the User — responding to inquiries, technical notifications, and information about Service changes.

Billing (GDPR art. 6(1)(c)) — issuing invoices, processing payments, verifying subscriptions.

Operator's own marketing (GDPR art. 6(1)(a) — only with SaaS User's consent) — newsletters and updates. Does NOT apply to SMS sent by Users to their customers.

Contract (Art. 6(1)(b)): processing necessary for the performance of the Service agreement.

Legitimate interest (Art. 6(1)(f)): fraud prevention, system security, technical analytics.

Consent (Art. 6(1)(a)): direct marketing — you may withdraw consent at any time.

We entrust the processing of your data to the following subprocessors based on Data Processing Agreements (DPA) per art. 28 GDPR:

• Contabo GmbH (Germany) — application server and database hosting. DC: Munich / Nuremberg (EEA).
• Amazon Web Services EMEA SARL (region eu-central-1, Frankfurt) — database backups, invoice PDF storage, APK files.
• OpenAI Ireland Ltd (Ireland) — AI Assistant service (GPT-4o); technical transfer to USA based on Data Privacy Framework (DPF) and Standard Contractual Clauses (SCC).
• iFirma SA (Poland) — issuing and storing sales invoices.
• Stripe Payments Europe Ltd (Ireland) — card payments and subscription handling.
• EasyTools sp. z o.o. (Poland) — alternative payment handling.
• Google Ireland Ltd — Google Calendar API synchronization for Booking module users.
• Bitrix24 (EU entity) — CRM synchronization for Bitrix24 integration users.
• Usercentrics A/S (Cookiebot, Denmark) — cookie consent management.
• Meta Platforms Ireland Ltd — Meta Pixel (analytics and remarketing); Joint Controller (per CJEU C-210/16 Fashion ID); USA transfer based on DPF + SCC.

Full and current list of subprocessors is available at /prawne/podwykonawcy. We notify of any list changes 30 days in advance.

Data is retained for the duration of the Service agreement and for the period necessary to fulfill obligations after its termination.

Invoice and payment data is retained for 5 years from the end of the tax year in which the transaction occurred — in accordance with tax law.

Data processed on the basis of marketing consent is retained until consent is withdrawn.

You have the following rights regarding your personal data:

• Right of access — you may request a copy of your personal data.
• Right to rectification — you may correct inaccurate or incomplete data.
• Right to erasure — you may request deletion of data when it is no longer needed.
• Right to restriction — you may limit how your data is used in certain cases.
• Right to data portability — you may receive your data in a machine-readable format.
• Right to object — you may object to processing based on legitimate interest.

To exercise your rights, contact us at: kontakt@lepszesmsy.pl

→ Submit a formal GDPR request via online form

Session cookies — necessary for Service operation. They store the session state of logged-in Users and are automatically deleted when the browser is closed.

Analytics cookies (Google Analytics 4) — collect anonymous data on how the site is used to improve the Service.

Marketing cookies (Meta Pixel) — used to show relevant ads on social media platforms, only with your consent.

You can manage cookie settings in your browser or through the consent settings on our website.