Privacy Policy
This policy explains what personal data we process on PLANY PROMO (planypromo.pl), why, who we share it with and what rights you have.
1. Data controller
The controller is Navia Natalia Cierniak, address: ul. Henryka Sienkiewicza 4/12, 27-200 Starachowice, Polish tax ID (NIP): 6642155954 (“we”). For any data protection matters, e-mail kontakt@planypromo.pl.
2. What data we process
- Account data – e-mail address, password (stored as a secure hash), language and, if you sign in with Google, your Google e-mail and account ID.
- Artist profile – artist name, genres, city, biography, links to your music and social media profiles.
- Release information and materials – details of your releases, uploaded photos, videos and texts (which may show people).
- Platform statistics – public statistics of your profiles (e.g. listeners, followers, views) and, if you connect your own keys or accounts, data shared by those platforms. Keys are stored encrypted.
- Payments – subscription and order information (plan, amount, status). We do not process payment card details – they are handled by our payment providers.
- Communication – messages sent via the contact form, team chat and e-mail.
- Profile audit – the e-mail address and profile links entered in the audit form and the audit result.
- Technical data – IP address, browser information, server logs, source of your first visit (e.g. utm parameter).
3. Purposes and legal bases
- creating and maintaining your Account, providing the services (promo plans, analytics, audit) and handling payments – Art. 6(1)(b) GDPR (contract);
- accounting and tax – Art. 6(1)(c) GDPR (legal obligation);
- communication, handling requests and complaints, security of the Service, user acquisition statistics, establishing and defending claims – Art. 6(1)(f) GDPR (our legitimate interest);
- marketing communication – Art. 6(1)(a) GDPR (consent, which you can withdraw at any time).
Providing data is voluntary, but without account data we cannot provide the services.
4. Artificial intelligence
We prepare promo plans, captions, biographies and analyses with the help of artificial intelligence models. We share with them only the data needed to prepare the content (e.g. release information, artist profile, statistics, descriptions and thumbnails of materials). The model providers do not use this data to train their models. We do not make decisions producing legal effects about you solely by automated means – our team reviews the content.
5. Who we share data with
We share data with providers who help us deliver the services, only to the extent necessary:
- Hetzner Online GmbH – servers (Germany);
- OVH – e-mail;
- Anthropic PBC and OpenAI – artificial intelligence models (USA);
- Apify Technologies s.r.o. – collection of public profile data (Czech Republic);
- Google (Sign in with Google, YouTube), Spotify (Web API), Meta Platforms (Instagram, Facebook) and TikTok – statistics from public profiles and connected accounts (details in section 8);
- Stripe Payments Europe Ltd. (Ireland) – payments in PLN;
- Paddle.com Market Limited (United Kingdom) – payments in EUR and USD; Paddle acts as Merchant of Record and is a separate controller for payment data;
- accounting and legal service providers.
Some providers are based outside the European Economic Area (USA, United Kingdom). Transfers rely on European Commission adequacy decisions (e.g. the EU–US Data Privacy Framework, the decision for the United Kingdom) or standard contractual clauses.
6. How long we keep data
- account data, profile, materials and statistics – while you use the Service; after deleting your Account we remove them within 30 days (backups are overwritten on a rolling basis);
- billing data – 5 years from the end of the year in which the tax obligation arose;
- profile audit data – as long as needed to apply the one-audit-per-e-mail-and-profile rule, no longer than 3 years;
- data processed on the basis of consent – until consent is withdrawn;
- data needed to defend against claims – until the claims become time-barred.
7. Your rights
You have the right to access, rectify and erase your data, restrict processing, data portability, object to processing based on legitimate interest and withdraw consent at any time (without affecting the lawfulness of earlier processing). To exercise your rights, e-mail kontakt@planypromo.pl. You can also lodge a complaint with the Polish supervisory authority (Prezes Urzędu Ochrony Danych Osobowych, uodo.gov.pl) or the authority in your country of residence.
8. Sign in with Google and connected accounts (Google / YouTube, Meta, TikTok)
Sign in with Google. If you create an Account or sign in with Google, we receive your e-mail address, name (or profile name) and Google account ID – only to create your Account and sign you in.
Connecting platform accounts. In Settings → Connected accounts you can connect your YouTube (Google), Instagram and Facebook (Meta) and TikTok accounts to PLANY PROMO. You do this through the platform’s official sign-in window (OAuth) – we never see your password. The platform shows the permissions we request, and you can decline them.
- What data we access: basic profile or channel information (name, ID, profile picture) and statistics – follower or subscriber counts, views, likes and comments on your recent posts and, for business and creator accounts, insights provided by the platform.
- Why: only to show you your statistics in your Account (dashboard, Analytics), to analyse your results and to tailor your promo plans. We do not sell this data, use it for advertising or share it with anyone other than the providers listed in section 5.
- Publishing: if you enable publishing, we will publish on your account only content you have approved in the calendar, at the time you choose. We never publish anything without your approval.
- Storage: access tokens are stored encrypted. Statistics are refreshed daily and kept while you use the Service.
- Disconnecting: you can disconnect an account at any time in Settings → Connected accounts, and we delete the access token. You can also revoke access on the platform: Google – myaccount.google.com/permissions; Facebook and Instagram – Settings → Apps and websites; TikTok – Settings and privacy → Security → Manage app permissions.
YouTube. We use YouTube API Services. By connecting your YouTube channel you agree to the YouTube Terms of Service; Google also processes data under the Google Privacy Policy.
Google Limited Use. PLANY PROMO’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use data from Google APIs to train artificial intelligence models.
Data deletion. Instructions for deleting data collected from connected accounts are on the Data deletion page.
9. Cookies and browser storage
The Service currently uses only strictly necessary mechanisms:
| Name | Purpose | Retention |
|---|---|---|
| session | session cookie: login, form protection (CSRF), chosen language, source of first visit | until the browser is closed |
| remember_token | “Remember me” cookie – keeps you signed in | up to 365 days |
| pp_cookies, pp-currency and others prefixed pp | browser storage (localStorage): your cookie banner choice, pricing currency, collapsed dashboard sections | until cleared in the browser |
We currently do not use analytics or advertising cookies. If we introduce them, they will run only after you consent in the cookie banner, and they will be listed in this section. You can also manage cookies in your browser settings.
10. Changes
We will inform you about significant changes to this policy in the Service or by e-mail.
Effective from 26.10.2026