Privacy policy

Who We Are

Controller:Brezium Maciej Brzeziński
EU VAT ID PL5222700746
Registered in Poland, European Union ("we," "our," "us").

Contact Email:pptxmailmerge@gmail.com

What Data We Process & Why

Category	Examples	Purpose	GDPR Legal Basis
Account / Billing Data	Email, name, subscription tier, VATID, invoices (via Stripe)	Account creation, contract fulfilment, billing	Art. 6 (1)(b) Contract necessity
Uploaded Files	PPTX templates & data sources you supply	Generate merged output file(s)	Art. 6 (1)(b) Contract necessity
Metadata	File names, upload & processing timestamps, output metrics	Debugging, rate-limiting, fraud prevention, audit logs	Art. 6 (1)(f) - Legitimate interests
Technical Logs	IP address, user-agent, error traces	Security monitoring, statistics	Art. 6 (1)(f) - Legitimate interests
Cookies	Session cookies		Art. 6 (1)(f) - Legitimate interests
Analytics Data	Google Analytics Client-ID, page views	Usage analytics (with consent)	Art. 6 (1)(a) - Consent

We never retain the file contents beyond the processing event; they are purged automatically after download.

Sub-Processors & International Transfers

Sub-Processor	Role	Location & Safeguards
Hetzner Online GmbH	EU based hosting & storage (Sub-processor)	Germany GDPR compliant Data Processing Agreement (DPA)
Stripe Payments Europe	Payment processing	EU & USA Standard Contractual Clauses (Art. 46)
Google LLC (Analytics)	Usage analytics (optional)	USA Standard Contractual Clauses (Art. 46)

Your Rights

You may access, rectify, erase, restrict, or object to processing of your personal data, and receive a portable copy at any time. Submit requests via privacy@pptxmailmerge.com. You may lodge a complaint with your local supervisory authority (e.g., the Polish UODO or any EU authority of your choice).

Retention

• Metadata & logs: up to 12 months unless required longer for dispute resolution or legal obligations.
• Invoices & accounting records: 7 years (Polish & EU accounting rules).
• Cookies: see Cookie Policy.

Security

• End-to-end TLS 1.3 encryption.
• Data isolated per customer job; files deleted on job completion.
• Least-privilege access controls, multi-factor authentication.

Automated Decision‑Making

None no profiling or automated decisions producing legal effects.

Policy Updates

Material changes will be announced inside the app and by email. The “Last Updated” date appears at the top of this page.