Privacy policy
Effective date:
1. Data controller
The controller of your personal data is Inference Works sp. z o.o., registered office: Sadurki 122A, 24-150 Nałęczów, Poland, entered in the National Court Register (KRS) under no. 0001229979, NIP (tax ID) 7162851708, REGON 544296692 (“we”). For any data protection matter, write to [email protected] or to our registered address.
2. What data we process and why
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Replying to a contact form message or email | email, shop address, message (and any other data you include in it) | Art. 6(1)(f) GDPR (our legitimate interest in replying) or Art. 6(1)(b) when you ask about a contract | until the conversation ends, then up to 12 months |
| Concluding and performing a cooperation agreement | contact and company details | Art. 6(1)(b) GDPR | for the term of the agreement |
| Accounting and tax obligations | invoice data | Art. 6(1)(c) GDPR | 5 years from the end of the tax year |
| Establishing and defending legal claims | correspondence and contract data | Art. 6(1)(f) GDPR | until claims become time-barred |
| Website security and operation, including protecting the contact form from bots (Cloudflare Turnstile) | IP address, browser and device data, server logs | Art. 6(1)(f) GDPR | per the hosting provider’s settings, usually a few days |
| Visit statistics | aggregated visit data, without cookies and without identifying individuals | Art. 6(1)(f) GDPR | in aggregated form |
Providing data is voluntary, but we cannot reply without an email address.
3. Who receives the data
Data may only be shared with companies that help us run the website and the company, and only to the extent their service requires:
- website hosting, protection and analytics provider (Cloudflare, Inc.),
- provider of the server that handles the contact form (Hetzner Online GmbH, Germany),
- email provider (webh.pl),
- our accounting office,
- public authorities, where required by law.
Cloudflare may process data outside the European Economic Area, including in the USA, on the basis of the European Commission’s EU-US Data Privacy Framework decision and standard contractual clauses. The website’s fonts are hosted with the website, so we do not connect to Google Fonts servers.
4. WordPress plugins and the Inference Works Cloud service
This section covers WordPress/WooCommerce plugins published by Inference Works (the Plugins), their paid Pro editions and the Inference Works Cloud service (Cloud). The data controller, contact details and your rights are the same as in the rest of this policy.
4.1. Data we process
| Source | Data | When |
|---|---|---|
| Free edition of a Plugin | none – the Free edition does not send data to Inference Works | – |
| Freemius SDK in the Plugin | administrator’s email address and first name, website address, WordPress, PHP and Plugin versions, installation and license information; the scope depends on the consent given in the Plugin | after consent (opt-in) or when activating a Pro license |
| Pro license purchase | buyer and payment data – processed by Freemius as the seller (Merchant of Record); we receive license and contact data | upon purchase and renewal |
| Inference Works Cloud | installation and license identifier, store address, software versions, data submitted to AI features (such as product names, descriptions, categories and attributes), usage counters and API call costs | when the store administrator enables a Pro feature that uses Cloud and gives consent in the Plugin dashboard |
| Technical support | correspondence, email address and store data you provide | when you contact us |
Cloud does not store content sent to AI models or the content of their responses in logs or billing data. We retain the results of bulk tasks only until they are downloaded by the Plugin.
Cloud is not intended to process your store customers’ data. The Plugins do not send orders or buyer data to Cloud. Integrations with external services (such as Allegro orders) connect directly from the store, without involving our servers.
4.2. Purposes and legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Performance of the Pro license, operation of Cloud and AI features, usage limits | Article 6(1)(b) – performance of a contract |
| Technical support and handling complaints | Article 6(1)(b) and (f) – contract and legitimate interest |
| Cloud security, preventing abuse, accounting for service costs | Article 6(1)(f) – legitimate interest |
| Plugin usage statistics (Freemius) | Article 6(1)(a) – consent given in the Plugin, which may be withdrawn |
| Establishing, exercising and defending legal claims | Article 6(1)(f) |
| Legal obligations, such as tax and accounting obligations | Article 6(1)(c) |
4.3. Recipients of data
| Recipient | Role | Location |
|---|---|---|
| Freemius, Inc. | sales and licensing (Merchant of Record), SDK in the Plugin | USA |
| Hetzner Online GmbH | hosting Inference Works Cloud | Germany / Finland |
| OpenRouter, Inc. (EU routing) | intermediary providing access to AI models; we use EU-region routing, with no data collection and zero retention by model providers | content processing in the EU; account billing data may be stored in the USA |
| Cloudflare, Inc. | DNS, protection and access to dashboards | globally |
| webh | Poland | |
| Accounting firm | company accounting | Poland |
Transfers of data to the USA are based on a European Commission adequacy decision (EU–US Data Privacy Framework) for certified entities or on standard contractual clauses. You may request a copy of the safeguards.
4.4. Data retention
| Data | Period |
|---|---|
| License and installation data | for the duration of the Pro license, then until the limitation periods for claims expire |
| Cloud AI usage and API call cost data | 13 months |
| Results of bulk tasks in Cloud | 7 days |
| Cloud technical logs | 30 days |
| Support correspondence | up to 3 years after the matter is closed |
| Freemius statistical data | until consent is withdrawn or in accordance with Freemius rules |
After uninstalling the Plugin, you may request deletion of installation data from Cloud; the Pro Plugin may also trigger this deletion automatically. You may withdraw consent to Freemius statistics in the Plugin settings.
4.5. Data in your store
You process data stored in your store, including customer and order data, as its controller. Inference Works has no access to it. Some Plugins store technical information in your store customers’ browsers (such as an A/B test identifier or a list of recently viewed products) – this is described in the text suggested by the Plugins in the WordPress privacy policy generator, which you can add to your store’s policy.
If, in your case, data sent to Cloud includes personal data (such as details of a manufacturer or responsible person who is an individual), we may enter into a data processing agreement – write to the contact address provided in this policy.
4.6. Security
Connections to Cloud are encrypted (TLS). AI provider keys are stored exclusively on the Cloud server. Access to administrative dashboards is protected by multi-factor authentication.
5. Your rights
You have the right to access, rectify and erase your data, to restrict its processing, to data portability, and to object to processing based on our legitimate interest. To exercise these rights, write to [email protected]. We will reply within one month.
You may also lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (Prezes UODO, ul. Stawki 2, 00-193 Warsaw).
6. Profiling
We do not make decisions about you based solely on automated processing, including profiling.
7. Our products
This policy covers the inferenceworks.eu website. The use of Asellio is governed by separate documents available at asellio.eu.
8. Cookies and changes
Our use of cookies is described in the cookie policy. We will announce changes to this policy on this page together with a new effective date.