Privacy Policy

1. Data controller

The controller of your personal data is: Adrian Nidzgorski, trading as Future Bytecode Adrian Nidzgorski, Polish tax ID (NIP) 9571136252, email: kontakt@nidzgorski.dev.

2. What data we collect and why

Through the contact form, we collect the following data:

• first and last name,
• email address,
• phone number (optional),
• the content of your message.

Data is processed solely to respond to the inquiry submitted (GDPR Art. 6(1)(f) — the controller's legitimate interest in being able to respond to submitted inquiries). Providing this data is voluntary, but without an email address a response is not possible.

3. How long we keep the data

Data is stored for as long as necessary to handle the inquiry, and afterwards for the statute-of-limitations period for potential claims — no longer than 3 years from the date of last contact.

4. Who we share data with

To deliver email messages we use Resend (Resend Inc., USA) — a processor acting on our behalf under a data processing agreement. Resend operates under mechanisms approved by the European Commission (standard contractual clauses).

Data is not sold or shared with other parties for marketing purposes.

5. AI assistant chat

The site runs an AI assistant chat that automatically answers questions about the scope of services, pricing, and timelines. The conversation is not held with a human — a language model is on the other end.

The content of messages typed into the chat is sent to Anthropic PBC (USA) — the provider of the Claude model, acting as a processor on our behalf. The transfer of data to the USA takes place under standard contractual clauses approved by the European Commission.

We do not store a record of conversations.Messages are processed only in real time to generate a reply and are not saved in our database. Legal basis: GDPR Art. 6(1)(f) — the controller's legitimate interest in handling prospective clients.

To prevent abuse (e.g. automated bot messages), we temporarily process your IP address as an identifier to limit the number of requests (rate limiting). IP addresses and request timestamps are stored by our infrastructure provider Upstash (EU region) for a short period — the request counter expires automatically after 60 seconds. Legal basis: GDPR Art. 6(1)(f) — the controller's legitimate interest in ensuring the security and continuity of the service (GDPR Art. 32).

Important: do not share special category data in the chat (including health information, political opinions, sexual orientation) or confidential information. Use the contact form to send project details.

6. Your rights

You have the right to:

• access your data,
• rectify your data,
• erase your data ("the right to be forgotten"),
• restrict processing,
• data portability — not applicable to this processing, since its basis is the controller's legitimate interest (GDPR Art. 6(1)(f)) rather than consent or a contract,
• object to processing (applies to processing based on the controller's legitimate interest — GDPR Art. 6(1)(f)).

Right to object:if we process your data based on the controller's legitimate interest (GDPR Art. 6(1)(f)), you have the right to object to that processing at any time. After an objection, we will stop processing your data unless we can demonstrate compelling legitimate grounds that override your interests.

To exercise the rights above, email kontakt@nidzgorski.dev. You also have the right to lodge a complaint with the Polish data protection authority (Prezes Urzędu Ochrony Danych Osobowych, uodo.gov.pl).

7. Cookies and analytics

The site does not use marketing cookies. To measure traffic (number of visits, entry pages) we use Vercel Analytics — a privacy-first service that does not set cookies in the browser and does not track users across sessions. Traffic data is aggregated and anonymized (e.g. page views, country, device type). To the extent an IP address is processed before anonymization, it constitutes personal data; the legal basis is our legitimate interest under GDPR Art. 6(1)(f) (traffic analysis and service quality improvement).

Vercel Inc. (USA) processes this data as a processor on our behalf, based on standard contractual clauses approved by the European Commission.

8. Automated decision-making and profiling

We do not use automated decision-making or profiling within the meaning of GDPR Art. 22. No decisions producing legal effects or similarly significantly affecting you are made solely on the basis of automated processing.

9. Changes to this policy

We will announce material changes to this document by updating the date at the top of the page.