Privacy policy

1. Who is responsible

The controller is RAX GROUP SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, ul. Starowiejska 38B, 55-080 Smolec, Poland; KRS 0001017208; NIP 8961621902; share capital PLN 5,000.00; registry court: Sąd Rejonowy dla Wrocławia Fabrycznej we Wrocławiu, IX Wydział Gospodarczy Krajowego Rejestru Sądowego. Contact: kontakt@szczoteczki.com.

2. Documents, photos and outputs

All current transformations run locally in browser memory and workers. File contents, filenames, page text, signatures and generated outputs are not sent to our server or to AI providers. We do not store them, create a cloud file history or use them to train models. No current tool has a server-processing exception.

Clearing the workspace releases its local file references, output links and processing workers. Closing the page ends the session. Files you download remain wherever your browser saves them. Browsers or device software may retain their own download history, caches or copies; we cannot delete those remotely. The browser may cache public software/model files, not your chosen documents.

3. Website access and security

Serving a page necessarily involves an IP address, request path, time and browser/protocol information. Hosting and gateway systems may record these for operation and security. Optional Google measurement is blocked until you consent. We do not use fingerprinting, Google Signals, personalised advertising or enhanced conversions. We do not promise that no personal data of any kind is processed.

With your optional consent, Google Tag Manager can load the configured measurement tags. Google receives network/browser metadata when its resources are requested; enabled Analytics tags may also receive public page addresses, language, tool identifiers, completion/download events and a pseudonymous browser identifier. We exclude query strings, URL fragments, referrer paths, file contents, filenames, recognised text, signatures and account details from our measurement events. No document preview, input value or error text is included. Consent is the basis for optional measurement; refusing or withdrawing it does not limit free tools.

We rely on legitimate interests in secure service operation for proportionate access/security logs. Routine logs are configured for no more than 30 days; records of a specific incident may be kept longer where necessary to investigate it or handle a legal claim. We do not put file contents or filenames into logs.

4. Contact and future accounts

If you email us, we receive your address, message and any information you choose to include. We use it to answer the request, handle a complaint or meet a legal duty. Retention lasts while the request is handled and, where necessary, through applicable claim or statutory retention periods. Please do not email sensitive documents.

Accounts are currently disabled. When activated, registration will process an email address, password hash, verification/reset data, secure sessions and accepted terms version. Google sign-in will process a verified Google identifier and email; we do not request your Drive files or contacts. An account will not contain documents or conversion history. These records are used to provide the requested account and protect it, not for marketing. Account closure removes or anonymises account data unless limited records must be retained for legal duties or claims.

5. Future payment data

Payment collection is currently disabled. When enabled, Stripe-hosted Checkout will process the payment information you provide. We receive payment/customer/session identifiers, currency, amount, status and any billing details needed for receipts, tax or refunds. Card numbers are not handled or stored by this application. Payment records may have mandatory accounting and tax retention even after account closure.

Account and purchase performance uses the contractual basis; statutory accounting/tax records use legal obligations. Security and dispute handling use legitimate interests. Optional marketing, if introduced, will require its own appropriate consent and will not be bundled with tool use.

6. Recipients and transfers

Only necessary hosting, security, email and, when enabled, Google/Stripe services receive the corresponding website, contact, identity or payment data. They do not receive your tool files from us. Access is limited to authorised persons and providers with appropriate agreements. A provider may process data outside the EEA; applicable adequacy decisions or approved contractual safeguards must be in place before activating that integration. Stripe and Google also explain their own processing in their privacy policies. We do not sell your data.

7. Your rights

Where applicable, you may request access, rectification, erasure, restriction, portability, or object to processing based on legitimate interests. You may withdraw an optional consent without affecting earlier lawful processing. Contact us at kontakt@szczoteczki.com. We normally respond within one month, with legally permitted extensions explained to you. You may complain to the President of the Polish Personal Data Protection Office (UODO), or your competent local supervisory authority.

We do not make solely automated decisions with legal or similarly significant effects about you. We cannot locate or supply documents that never left your device. Providing account/payment details will only be required for the optional service that needs them; anonymous free tools remain available under their current terms.

8. Storage on your device and updates

See the cookies policy for the exact categories of local storage and future essential account cookies. Clearing site data removes cached models and recognition data and may sign you out if accounts are activated. We will update this policy before introducing server-side file processing, optional tracking or a materially different use of personal data.