Privacy policy

Data controller

OPENKODA CDX Sp. z o.o. sp. k., Łaciarska 4, 50-104 Wrocław, Poland, is the controller for data about visitors to this website and for account and billing data. For the data customers put into their Superkoda apps, the customer is the controller and we are its processor.

Data we collect

• This website: no cookies, analytics or third-party scripts. Our hosting provider keeps standard server logs (IP address, browser, pages requested) to keep the site secure.
• Your account: name, work email, company and billing details.
• Using the apps: usage and diagnostic logs, such as sign-ins and errors.
• Contacting us: what you send us and our replies.

Purposes and legal basis

• To provide the service and bill you, because we have a contract with you.
• To keep the service secure and prevent abuse, because we have a legitimate interest in doing so.
• To keep tax and accounting records, because the law requires it.
• To send product and service emails, because we have a legitimate interest in doing so; you can opt out.
• To send marketing, only if you agreed to it.

Customer data in apps

We process the data you store in Superkoda apps only to provide the service and on your instructions, under a data processing agreement that follows Article 28 of the GDPR. You can ask for it at contact@superkoda.com.

Data sharing

We use service providers for hosting, email delivery and payments. They process data only for us, under contracts that protect it. We can send you the current list of these sub-processors on request. We don’t sell personal data.

Transfers outside the EU

We store data in the European Union where we can. When a provider handles data outside the European Economic Area, we use the European Commission’s Standard Contractual Clauses.

Retention

• Account data: while your account is open.
• Data in your apps: until 30 days after your subscription ends.
• Billing records: 5 years, as Polish tax law requires.
• Server logs: up to 90 days.

Your rights

You can ask to access, correct or delete your data, to restrict or object to how we use it, to receive it in a portable format, and to withdraw consent you gave. Write to contact@superkoda.com; we reply within one month. You can also complain to the Polish data protection authority, the President of the Personal Data Protection Office (UODO), or to the authority in your own EU country.

Security

Data is encrypted in transit, passwords and API keys for connected services are stored encrypted, and only staff who need access have it. The database is snapshotted before every release. If a breach affects your data, we notify you and the authorities as the GDPR requires.

Changes to this policy

We post updates on this page with a new date. We tell account holders about material changes by email.

Contact

Privacy questions and requests: contact@superkoda.com.