Privacy Policy — PEWIT Labs

1. Controller

The controller of your personal data is PEWIT sp. z o.o., os. Widok 5D/7, 66-200 Świebodzin, Poland, KRS 0000641921 ("we"). You can reach us at kontakt@pewit.pl on any privacy matter. We have not appointed a data protection officer.

2. What we process and why

Data	Purpose	Legal basis (GDPR)	How long
Messages sent through the contact form or by email: name, email, message, topic	Replying, support, pre-sales questions	Art. 6(1)(b) steps before or under a contract; Art. 6(1)(f) answering enquiries	Up to 2 years after the conversation ends
License and site data sent by the plugins to Freemius when you activate a license or opt in: site URL, admin email and name, WordPress, PHP and plugin versions, active plugins and theme, activation status	Licensing, updates, preventing misuse, support	Art. 6(1)(b) contract; Art. 6(1)(a) consent for the optional opt-in in free versions	For the license period and up to 2 years after it, or until you withdraw consent
Purchase data (name, email, billing address, VAT number, payment status)	Selling the license, invoices, taxes, refunds — done by Freemius as seller; we receive order details to provide the license and support	Art. 6(1)(b) contract; Art. 6(1)(c) tax and accounting duties	As required by tax law (in Poland usually 5 years from the end of the tax year)
Website server logs: IP address, browser, pages requested, time	Running the site securely, diagnosing errors	Art. 6(1)(f) security of the service	Short-term, as logs are rotated by the server
Data needed to establish or defend claims	Handling complaints and disputes	Art. 6(1)(f)	Until the limitation period ends

Providing data is voluntary, but without an email address we cannot reply, and without the license data we cannot activate Pro. We do not sell personal data and do not use it for automated decisions or profiling.

3. Content you process with the plugins

The plugins run on your own WordPress site. When you use an AI feature, the content involved (for example an image, a post or ALT text) is sent directly from your site to the AI provider you configured: OpenAI, Anthropic, Google, or a provider connected through WordPress. We do not receive that content. For that processing you (the site owner) are the controller and the provider acts under its own terms and data processing terms with you.

Do not send personal data, such as photos of people or customer details, to an AI provider unless you have a legal basis for it.

4. Who receives the data

Freemius, Inc. (USA) — licensing and updates on our behalf; as Merchant of Record it is a separate controller for purchase and payment data under its own privacy policy.
OVH SAS (France) — hosting of pewitlabs.com and of the automation server that delivers contact form messages.
Google LLC / Google Ireland — email delivery of contact form messages to our mailbox.
Our email hosting provider, IT and accounting service providers, to the extent needed for their services.
Public authorities when the law requires it.

5. Transfers outside the EEA

Freemius and Google may process data in the United States. These transfers rely on the EU-US Data Privacy Framework where the recipient is certified, or on the European Commission's Standard Contractual Clauses. You can ask us for a copy of the safeguards.

6. Your rights

You have the right to access your data, have it corrected or erased, restrict processing, data portability, and to object to processing based on our legitimate interest. Where processing is based on consent, you can withdraw it at any time without affecting earlier processing. To use these rights write to kontakt@pewit.pl.

You can also complain to the President of the Personal Data Protection Office (Prezes UODO, ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl) or to the supervisory authority in your country.

7. Cookies

pewitlabs.com uses no analytics or advertising cookies. Details are in the Cookie Policy.

8. Changes

We update this policy when the way we process data changes. The current version is always on this page with its date.