Privacy Policy

ActionStream sp. z o.o., ul. Przykładowa 1, 00-001 Warszawa, Poland ("we", "our", "us") is the data controller responsible for your personal data processed through the actionstream.press platform.

For privacy-related inquiries, contact our Data Protection Officer at: privacy@actionstream.press

We collect the following categories of personal data:

• Account data: name, email address, phone number (optional), company name (optional)
• Billing data: billing address, VAT number, payment method tokens (stored by Stripe — we do not store card numbers)
• Usage data: pages visited, search queries, download history, login timestamps
• Communications: messages sent via our contact form or support email
• Technical data: IP address, browser type, device information, cookies

We use your personal data to:

• Provide and maintain the Service, including account management and order fulfillment
• Process payments and issue invoices
• Send transactional emails (purchase confirmations, account verification)
• Send marketing communications, if you have opted in
• Comply with legal obligations (tax records, anti-fraud measures)
• Improve the Service through aggregated, anonymized analytics

We process your data under the following legal bases (GDPR Article 6):

• Contract performance: to provide the services you have purchased
• Legal obligation: to comply with tax and accounting laws
• Legitimate interests: fraud prevention, security, service improvement
• Consent: marketing communications (withdrawable at any time)

We share personal data only where necessary:

• Stripe: payment processing (privacy.stripe.com)
• Cloudflare: infrastructure and CDN
• Resend: transactional email delivery
• Fakturownia: VAT invoice management (Polish provider)

We do not sell your personal data to third parties. All processors are bound by data processing agreements.

We use the following types of cookies:

• Essential cookies: authentication session token (httpOnly, required for login)
• Analytics cookies: anonymized usage statistics (opt-out available)
• reCAPTCHA: Google reCAPTCHA for bot protection on forms

You can manage cookie preferences in your browser settings. Disabling essential cookies will prevent you from using authenticated features.

We retain personal data for as long as necessary to fulfill the purposes described in this policy:

• Account data: until account deletion + 30 days
• Purchase and invoice records: 5 years (legal requirement under Polish accounting law)
• Usage logs: 12 months rolling
• Marketing consent: until withdrawn

As a data subject under GDPR, you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate or incomplete data
• Erase your data (right to be forgotten), subject to legal retention obligations
• Restrict processing in certain circumstances
• Data portability — receive your data in a machine-readable format
• Object to processing based on legitimate interests
• Withdraw consent at any time for consent-based processing

To exercise your rights, contact: privacy@actionstream.press. We will respond within 30 days.

You also have the right to lodge a complaint with the Polish Data Protection Authority (UODO): uodo.gov.pl

We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit (TLS), encrypted storage for sensitive fields, access controls, and regular security reviews.

Some of our service providers (Stripe, Cloudflare) may process data outside the European Economic Area. Where this occurs, we ensure appropriate safeguards are in place (Standard Contractual Clauses or adequacy decisions).

We may update this Privacy Policy from time to time. We will notify you by email of material changes at least 14 days before they take effect.