Privacy Policy

This Privacy Policy describes how we process personal data of users of the ConfiCast service (the "Service"), available as a web application and as a desktop application.

1. Data Controller

The controller of your personal data is Grawires Jakub Sikora, ul. Solarza 23/8, 35-118 Rzeszów, Poland, VAT ID: PL813-350-78-77 (the "Controller", "we").

For matters related to personal data protection, you can contact us at grawires@gmail.com.

2. What data we process

In connection with providing the Service, we process in particular: account data (email address, name/display name, profile picture — obtained from Google during OAuth login), usage data (session history, conversation transcripts, AI-generated summaries and prompts), technical data (IP address, device identifier, event logs, error data), and — when purchasing a paid plan — billing data processed by our payment operator.

Audio recordings are not stored — for transcription purposes, audio is processed only in real time and discarded immediately after the text is generated. Only the resulting text transcript and AI-generated materials (summaries, conversation reviews) are stored, if you choose to save/generate them.

3. Purposes and legal basis for processing

Providing the Service and performing the contract (Art. 6(1)(b) GDPR) — creating and managing your account, generating transcripts and AI prompts, managing session history.

Billing and tax/accounting obligations (Art. 6(1)(c) GDPR) — issuing invoices/receipts, keeping records as required by law.

Our legitimate interest (Art. 6(1)(f) GDPR) — ensuring the security of the Service, preventing abuse, pursuing claims, basic service-usage analytics.

Consent (Art. 6(1)(a) GDPR) — analytics and marketing cookies (e.g. Google Analytics, advertising) — only after consent is given in the cookie banner; consent can be withdrawn at any time.

4. Recipients of data

Your data may be shared with providers whose services we use to operate the Service, in particular: cloud infrastructure providers (hosting, databases), our speech-to-text provider (Inworld AI) — processes only the real-time audio stream to generate text, AI model providers used to generate interview prompts and conversation summaries, our payment operator handling subscriptions and Interview Pass purchases, Google — for OAuth login and (after consent) Google Analytics.

Each of these providers processes data only to the extent necessary to perform the assigned tasks, based on data processing agreements.

5. Transfers outside the EEA

Some of our providers (e.g. cloud and AI service providers) may process data outside the European Economic Area. In such cases we ensure an adequate level of data protection through Standard Contractual Clauses approved by the European Commission or other mechanisms provided for in the GDPR.

6. Data retention period

We retain account and session-history data for as long as your account exists in the Service. You may delete individual transcripts/sessions or request deletion of your entire account and associated data at any time.

Billing data is retained for the period required by tax law (generally 5 years from the end of the tax year in which the tax obligation arose).

7. Your rights

Under the GDPR you have the right to access your data, rectify it, erase it, restrict its processing, data portability, object to processing based on our legitimate interest, and withdraw consent at any time (without affecting the lawfulness of processing carried out before withdrawal).

To exercise the above rights, contact us at grawires@gmail.com. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO) in Poland, or your local supervisory authority.

8. Cookies

Detailed information about the cookies we use can be found in our Cookie Policy.

9. Changes to this policy

We may periodically update this Privacy Policy, in particular due to changes in the law or the scope of services provided. We will inform you of material changes via the Service or by email.