Who is responsible
The controller of your personal data is DOLLABROS spółka z ograniczoną odpowiedzialnością (Dollabros sp. z o.o.), which operates AppFor.ai.
DOLLABROS spółka z ograniczoną odpowiedzialnością
ul. Stanisława Wyspiańskiego 26B/238, 60-751 Poznań, Poland
District Court for Poznań – Nowe Miasto and Wilda in Poznań, VIII Commercial Division of the National Court Register, KRS 0000918078
NIP (tax ID) 7831841993 · REGON 389772190 · Share capital PLN 50,000
Privacy questions and requests: [email protected], or by post to the address above.
We have not appointed a data protection officer. Please contact us directly with any question about your data.
At a glance
| When | Data | Purpose | Legal basis | How long |
|---|---|---|---|---|
| Visiting the site | IP address, date and time, requested address (including search terms), browser and device details, referring page | Delivering and securing the site, stopping abuse, fixing errors | Our legitimate interests (Art. 6(1)(f) GDPR) | Server logs 14 days |
| Analytics, only with consent | Pseudonymous identifiers, pages viewed and interactions, approximate location, device and browser details | Understanding which pages are useful | Your consent (Art. 6(1)(a) GDPR) | 2 months in Google Analytics; cookies up to 13 months or until you withdraw |
| Emailing us | Email address, name, message and attachments | Replying and handling your request | Our legitimate interest in answering (Art. 6(1)(f) GDPR); a contract where your message concerns one (Art. 6(1)(b)) | Up to 2 years after the conversation ends |
| Editorial team | Name, email address, role, password hash, session, editorial actions; Google account identifier, verified email and connection date if an administrator connects Google | Running and securing the private editorial workspace | Contract and our legitimate interests (Art. 6(1)(b) and (f) GDPR) | While the account exists; editorial history with its content |
Visiting the site
When you open AppFor.ai, your browser connects to Cloudflare, which protects and delivers the site, and then to our server. Like any website, they receive the technical data your browser sends: your IP address, the date and time, the address you request (including any search terms, because search uses the page address), the response, your browser and operating system, and the page that referred you.
We use this data only to deliver the site, keep it secure, detect and stop abuse, and investigate errors. This is our legitimate interest. Our server keeps access logs for 14 days. Cloudflare processes the same connection data on our behalf, for as long as it needs to provide and secure its service. We do not use logs to build profiles of visitors.
You do not need an account to read AppFor.ai, and we never ask for your name or email address to browse. If you switch between the light and dark theme, your browser remembers the choice locally; it is not sent to us. See the cookie policy for details.
Analytics
To learn which pages are useful, we may use Google Analytics 4, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It runs only after you select “Accept analytics” in our consent banner. Until you accept, and if you reject, we do not load Google Analytics at all. If you have not seen the banner, analytics is not active on the site.
With your consent, Google Analytics sets cookies on our domain and collects pages viewed and interactions, approximate location derived from your IP address, device, browser and screen details, and the referring page. Google Analytics 4 does not log or store IP addresses. We keep event data for 2 months, disable Google signals and ad personalisation, do not use advertising features and do not send names, email addresses or other information that identifies you directly. Google processes this data on our behalf under its data processing terms.
The legal basis is your consent (Art. 6(1)(a) GDPR and Art. 399 of the Polish Electronic Communications Law). You can withdraw it at any time under “Cookie settings” at the bottom of every page; withdrawal does not affect processing before it. We then remove the analytics cookies from your browser and stop loading Google Analytics. Google explains how it uses data from sites that use its services at policies.google.com/technologies/partner-sites.
Advertising
We plan to support AppFor.ai with advertising, for example through Google AdSense. No ads are shown at the moment and no advertising cookies are used. Before we enable advertising, we will update this policy and the cookie policy and ask for your consent through a certified consent tool where the law requires it. Ads will be clearly labelled and never influence our reviews; see the editorial policy.
Contacting us
If you write to [email protected], we process your email address, your name if you give it, the content of your message and any attachments to reply and handle your request. Messages are forwarded by Cloudflare Email Routing to a mailbox hosted by Google. We keep correspondence for up to 2 years after the conversation ends, or longer where needed to establish, exercise or defend legal claims.
Public submissions
Public submissions are currently closed, so the submission form does not collect any data. Before we reopen submissions, we will update this policy to explain what the form collects, why and for how long.
Editorial team and trusted agents
Members of our editorial team sign in to a private workspace. For them we process name, email address, role and permissions, a hashed password, a session cookie and a record of editorial actions, such as who drafted or approved a revision. AI agents that contribute content use credentials issued by an administrator; we store the agent’s name, a hash of its credential, its permissions and an audit trail.
An approved administrator may connect Google to their existing account. We receive and store the verified Google email address, a stable Google account identifier and the connection date, and use them to verify access to that account. We request only identity and email information, not access to Gmail, Drive or other Google services, and do not retain Google access or refresh tokens. Choosing this option redirects you to Google, which handles its sign-in under its privacy policy. Google sign-in does not create reader accounts or activate analytics.
We use this information to run the workspace, keep it secure and maintain an accountable editorial history. Account data is kept while the account exists. Editorial records are kept for as long as the content they describe, because they document how it was reviewed.
Service providers
We do not sell personal data or share it for anyone else’s marketing. We use these service providers:
- Cloudflare, Inc. (United States) and its affiliates: content delivery, security, DNS and email forwarding.
- MVPS LTD (Cyprus): hosting of our server in the European Union.
- Google Ireland Limited and Google LLC: Google Analytics, only with your consent, the email service behind our inbox, and optional Google sign-in for an approved administrator.
We may also disclose data where the law requires it, for example to courts or public authorities, and to professional advisers who are bound by confidentiality.
Transfers outside the EEA
Cloudflare and Google may process data in the United States and other countries outside the European Economic Area. These transfers rely on the EU–U.S. Data Privacy Framework, in which both companies participate, and on the European Commission’s Standard Contractual Clauses. Contact us if you would like more information about these safeguards.
How long we keep data
- Server access logs: 14 days.
- Google Analytics event data, with consent: 2 months. Analytics cookies: up to 13 months, or until you withdraw consent or clear your browser.
- Your consent choice: 12 months in your browser. After that we ask again.
- Correspondence: up to 2 years after the conversation ends, longer if needed for legal claims.
- Editorial team accounts: while the account exists. Editorial records: as long as the related content.
- Database backups, which include editorial team data: up to 90 days, for disaster recovery.
Your rights
Under the GDPR you have the right to:
- access your personal data and receive a copy;
- have inaccurate data corrected;
- have data erased;
- restrict processing;
- receive data you gave us in a portable format;
- object at any time, on grounds relating to your particular situation, to processing based on our legitimate interests;
- withdraw consent at any time, without affecting the lawfulness of processing before the withdrawal.
To exercise a right, write to [email protected]. We reply within one month. For complex requests this can be extended by two further months, and we will tell you why. We may ask for information to confirm your identity. Server logs usually cannot be linked to a particular person.
You can also lodge a complaint with a supervisory authority. In Poland this is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stanisława Moniuszki 1A, 00-014 Warszawa. You may also contact the authority in the EU country where you live or work.
Other information
- You do not have to give us personal data to read AppFor.ai. If you email us, we need your email address to reply.
- We do not make decisions based solely on automated processing that have legal or similarly significant effects on you, and we do not profile visitors.
- AppFor.ai is not directed at children under 16, and we do not knowingly process their personal data.
- All connections use HTTPS. Access to systems and data is limited to the people who need it, and passwords are stored only as hashes.
Changes
We update this policy when our processing changes, for example before advertising starts. The date at the top shows the current version. If a change requires your consent, we will ask for it. Read about cookies and similar technologies in the cookie policy.