— LEGAL

Privacy Policy.

What data we collect, why, for how long, and who we share it with. No legal jargon.

This is an English translation provided for convenience. The legally binding version is the Polish one, available at /polityka-prywatnosci.

1. Who is the data controller

The controller of personal data collected through the yesfor.ai site is Custom Service Arleta Marczyńska, ul. Bielska 107, 32-652 Bulowice, NIP 5492373228. Contact: arleta@yesfor.ai.

2. What data we collect

We collect the data you voluntarily enter in the contact form: name, company, phone number, and the content of your inquiry. We also collect basic technical data (IP address, browser type, traffic source) for statistical purposes only, through Vercel Analytics, without tracking cookies.

3. For what purpose

We process contact form data in order to respond to your inquiry and, where applicable, to enter into a business relationship (Article 6(1)(b) GDPR and Article 6(1)(f) GDPR, legitimate interest). Technical data is processed to analyse traffic and optimise the site (Article 6(1)(f) GDPR).

4. How long we keep the data

We keep contact form data for up to 24 months from the last contact, unless a cooperation agreement requires us to keep it longer. Technical data is kept for up to 12 months.

5. Who we share the data with

Data may be shared with processors acting on our behalf: the email service provider (Resend, Inc.), the hosting provider (Vercel, Inc.), and the analytics provider (Vercel Analytics). All of them operate in line with the GDPR and have signed data processing agreements (DPAs).

6. Your rights

You have the right to: access your data, rectify it, erase it, restrict its processing, port your data, object, and withdraw consent. To exercise these rights, contact: arleta@yesfor.ai. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO).

7. Cookies

yesfor.ai does not set any cookies in the user's browser. Vercel Analytics and Vercel Speed Insights run in cookieless mode (since 2024) and do not use cookies to identify or profile users. Vercel Analytics policy: vercel.com/docs/analytics/privacy-policy.

8. Data transfers outside the EEA

Some of the processors listed in point 5 are based in the United States: Vercel Inc. (hosting, analytics) and Resend Inc. (email delivery). Data transfers to the US take place on the basis of Standard Contractual Clauses (SCC) approved by the European Commission, and under the Data Privacy Framework (DPF), to which both entities are certified. Processor privacy policies: vercel.com/legal/privacy-policy, resend.com/legal/privacy-policy.

9. Automated decision-making

yesfor.ai does not use automated decision-making or profiling within the meaning of Article 22 GDPR. All decisions regarding cooperation are made by a human.

10. Changes to this policy

This policy may be updated. The current version is always available at yesfor.ai/polityka-prywatnosci. Last updated: May 2026.