Monolynx Piotr Krych is the controller of your data. We use cookies to run the service, provide helper features, measure visits, and show personalized marketing content. You can accept all categories, reject them, or customize your choice, and change or withdraw consent at any time. See our privacy policy for details.
Recipients by name: Google (analytics, Google Analytics) and Meta and LinkedIn (marketing).
Last updated: April 13, 2026 (version 2.0)
The controller of your personal data within the meaning of GDPR (art. 4(7)) is:
Monolynx Piotr Krych
ul. Brzoskwiniowa 57D, 15-584 Białystok, Poland
Tax ID (NIP): 7591703948, REGON: 142094761
Email: piotrkrych@monolynx.com
Data Protection Officer (DPO):
For matters related to personal data protection, contact our DPO at dpo@lepszesmsy.pl.
This policy applies to both Service Provider brands: AwesomeSMS (awesomesms.com) and LepszeSMSy.pl (lepszesmsy.pl).
During use of the Service, we process the following categories of data:
The LepszeSMSy/AwesomeSMS service is for operational communication between Users and their customers (reminders, cancelled classes, access codes, order status). The Operator is a processor for SMS recipient data, the User is the controller of this data.
Service delivery (GDPR art. 6(1)(b), contract): account registration, dashboard operation, scheduling and sending operational SMS.
Operational communication with SMS recipients (GDPR art. 6(1)(b) or (f)): performance of User's contract with their customer or legitimate interest. Does NOT require separate marketing consent.
Communication with the User: responding to inquiries, technical notifications, and information about Service changes.
Billing (GDPR art. 6(1)(c)): issuing invoices, processing payments, verifying subscriptions.
Operator's own marketing (GDPR art. 6(1)(a), only with SaaS User's consent): newsletters and updates. Does NOT apply to SMS sent by Users to their customers.
Contract (Art. 6(1)(b)): processing necessary for the performance of the Service agreement.
Legitimate interest (Art. 6(1)(f)): fraud prevention, system security, technical analytics.
Consent (Art. 6(1)(a)): direct marketing, you may withdraw consent at any time.
We entrust the processing of your data to the following subprocessors based on Data Processing Agreements (DPA) per art. 28 GDPR:
Full and current list of subprocessors is available at /prawne/podwykonawcy. We notify of any list changes 30 days in advance.
Data is retained for the duration of the Service agreement and for the period necessary to fulfill obligations after its termination.
Invoice and payment data is retained for 5 years from the end of the tax year in which the transaction occurred, in accordance with tax law.
Data processed on the basis of marketing consent is retained until consent is withdrawn.
You have the following rights regarding your personal data:
To exercise your rights, contact us at: kontakt@lepszesmsy.pl
Session cookies: necessary for Service operation. They store the session state of logged-in Users and are automatically deleted when the browser is closed.
Analytics cookies (Google Analytics 4): collect anonymous data on how the site is used to improve the Service.
Marketing cookies (Meta Pixel): used to show relevant ads on social media platforms, only with your consent.
You can manage cookie settings in your browser or through the consent settings on our website.
| Name | Provider | Purpose | Duration | Type |
|---|---|---|---|---|
| Necessary | ||||
| sessionid | this website | Stores session state while you authorize connections to external services, for example the AI assistant integration (MCP) or when connecting Google Calendar. | 14 days | Cookie |
| csrftoken | this website | Protects forms in the dashboard against cross-site request forgery (CSRF) attacks. | 1 year | Cookie |
| access | this website | A short-lived authentication token that confirms you are signed in on every request to the dashboard. | 15 minutes | Cookie |
| refresh | this website | A token used to renew your sign-in session without re-entering your password. It expires after 16 hours, or after 30 days if you selected the remember-me option. | 30 days | Cookie |
| auth_session | this website | Signals to the browser that a sign-in session is active, without storing the token itself. It lasts as long as the refresh token: 16 hours, or 30 days with the remember-me option. | 30 days | Cookie |
| csrf_token | this website | Protects write requests in the dashboard against CSRF attacks when sign-in uses the cookie-based mode. Valid until you close the browser. | session (until the browser is closed) | Cookie |
| impersonation_original_access | this website | Stores the administrator's own temporary access while viewing another user's account, so they can return to their own account. | 15 minutes | Cookie |
| django_language | this website | Remembers the interface language chosen after signing in. Valid until you close the browser. | session (until the browser is closed) | Cookie |
| NEXT_LOCALE | this website | Remembers the language you chose for the site. | 1 year | Cookie |
| lsms_consent | this website | Remembers your cookie consent choices, so we do not ask again on every visit. | 365 days | Cookie |
| auth_access_token | this website | Stores the access token in your browser needed to authenticate your requests in the dashboard. Used only when sign-in does not use the cookie-based mode. | until sign-out or manual deletion | Browser local storage (localStorage) |
| auth_refresh_token | this website | Stores the refresh token in your browser, which extends your session without needing to sign in again. Used only when sign-in does not use the cookie-based mode. | until sign-out or manual deletion | Browser local storage (localStorage) |
| auth_remember_me | this website | Remembers whether you selected the remember-me option when signing in. Used only when sign-in does not use the cookie-based mode. | until sign-out or manual deletion | Browser local storage (localStorage) |
| impersonation_original_* | this website | Temporarily stores your original administrator account data while you view the dashboard as another user. Used only when sign-in does not use the cookie-based mode. | until sign-out or manual deletion | Browser local storage (localStorage) |
| Analytics | ||||
| _ga | Distinguishes unique visitors to the site for Google Analytics statistics. | 2 years | Cookie | |
| _ga_<container> | Stores the state of the current Google Analytics 4 session for this site. | 2 years | Cookie | |
| _gid | Distinguishes users for 24 hours after their last activity, for Google Analytics statistics. | 24 hours | Cookie | |
| Marketing | ||||
| _gcl_* | Google Ads | Links a click on a Google Ads advertisement to a later visit to the site, to measure campaign effectiveness. | 90 days | Cookie |
| _fbp | Meta | Allows Meta (Facebook) to match visits to the site with the ads it shows. | 4 months | Cookie |
| _fbc | Meta | Records information about a click on a Meta (Facebook) ad, to measure advertising campaign effectiveness. | 2 years | Cookie |
| fr | Meta | Contains a unique browser identifier used by Meta (Facebook) to serve personalized ads. | 90 days | Cookie |
| li_fat_id | An indirect identifier used by the LinkedIn Insight Tag for conversion tracking and ad retargeting. | 30 days | Cookie | |
| li_sugr | Helps LinkedIn probabilistically match a user's identity for advertising outside designated countries. | 90 days | Cookie | |
| bcookie | A unique browser identifier used by LinkedIn to track the use of its embedded services. | 1 year | Cookie | |
| bscookie | Secures LinkedIn account access on trusted devices and tracks the use of its embedded services. | 1 year | Cookie | |
| lidc | Routes traffic to the correct LinkedIn data center for its embedded services. | 1 day | Cookie | |
| UserMatchHistory | Enables user matching for LinkedIn ads and for the sign-in and apply-with-LinkedIn features. | session (until the browser is closed) | Cookie | |
| lms_analytics | Identifies LinkedIn members off the LinkedIn platform for analytics tied to the LinkedIn Insight Tag. | 30 days | Cookie | |
For matters relating to personal data protection, please contact our DPO at dpo@lepszesmsy.pl or directly the controller: piotrkrych@monolynx.com.
Complaint to supervisory authority: President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, www.uodo.gov.pl
