Privacy Policy

Who is responsible for your data

The data controller is Daniel Kotliński THE GAPS, ul. Przyjaciół 18 lok. 2, 05-825 Książenice, NIP 7881973449. For matters relating to personal data, write to go@getwally.ai.

What data we collect and why

• Account: email, first name, and the password stored as an encrypted hash. We use them to maintain the Account under the contract (Art. 6(1)(b) GDPR).
• Purchase and invoice: full name or company name, address, NIP, purchase history. They are used to perform the contract and to meet tax obligations (Art. 6(1)(b) and (c) GDPR). We do not see the card number, Stripe handles it.
• Scans: brand names and settings entered by the Client, and the finished Reports. They are needed to perform the contract.
• Support and security: the content of correspondence and technical logs, including the IP address. They are used to reply to messages, protect the service and pursue claims, which is our legitimate interest (Art. 6(1)(f) GDPR).
• Site statistics: pages visited, clicks on public pages, browser and device type, and an approximate location derived from the IP address. We collect them in PostHog without cookies and without linking them to the Account, to improve the site, which is our legitimate interest (Art. 6(1)(f) GDPR). On Report pages we only count page views, and on shared-link pages we collect nothing.

Providing data is voluntary, but without it we cannot create an Account or issue an invoice.

Data from public sources

Scans analyze publicly available content about brands: websites, social media profiles and comments, ad libraries and company registers. This content may include personal data, such as a profile name or the text of a comment. We process it to prepare a brand analysis, which is our legitimate interest. Anyone this data relates to may object by writing to go@getwally.ai.

Who we share data with

We use providers that process data on our behalf or independently, within the scope of their service:

• Hostinger: the server Wally runs on, and backups.
• Stripe: payment processing.
• PostHog: site visit statistics, on servers in the European Union.
• Resend: sending emails.
• Anthropic, Google and Perplexity: artificial intelligence models that analyze the material from Scans.
• Apify, Serper, Jina and BizRaport: collecting data from public sources.
• The Polish Ministry of Finance and Statistics Poland (GUS): checking NIP numbers in registers, and the National e-Invoicing System (KSeF).

Some of them operate outside the European Economic Area, mainly in the USA. In that case the data is protected on the basis of a European Commission decision finding an adequate level of protection, or of standard contractual clauses.

We do not sell data and do not use it for advertising profiling.

How long we keep data

• We keep Account data and Reports until the Account is deleted.
• We keep invoices and purchase data for 5 years from the end of the year in which the tax obligation arose.
• We keep data needed to pursue claims until those claims become time-barred.
• Deleted data may still remain in backups, which we delete within 90 days at the latest.

Your rights

You have the right to access your data, to have it corrected, deleted or transferred, to restrict its processing, and to object to processing based on legitimate interest. Just write to go@getwally.ai. You can also lodge a complaint with the President of the Personal Data Protection Office (UODO).

We do not make decisions about you based solely on automated processing that would have legal effects.

Cookies

Wally uses only the cookies it needs to work: skaner_session keeps you signed in, and NEXT_LOCALE remembers your language. We do not use analytics or advertising cookies, so we do not ask for consent to them. Visit statistics work without cookies and without storing anything in your browser.