Privacy Policy

DebateAI.app
Last updated: 30 06 2025

1. Introduction

This Privacy Policy explains how r6lab Radoslaw Jozefowicz (“Company”, “we”, “us”, “our”) collects, uses, shares, and protects your Personal Data when you visit or use DebateAI.app (the “Service”). It also describes your rights under the EU General Data Protection Regulation (“GDPR”).

2. Data Controller

Controller: r6lab Radoslaw Jozefowicz, Poland.
E-mail: privacy@debateai.app
The Company is not required to appoint a Data Protection Officer under Article 37 GDPR.

3. Categories of Personal Data We Collect

• Account Data: name (optional), e-mail address, password (hashed).
• Subscription & Payment Data: plan selected, billing address, last four digits of card, payment status (processed by Stripe).
• Content Data: documents, URLs, topics, prompts, and messages you enter; AI-generated debate transcripts.
• Usage Data: IP address, browser type, device information, pages visited, timestamps, error logs.
• Cookie & Analytics Data: first-party authentication cookies; optional analytics collected via Matomo (self-hosted, IP anonymised).

4. How We Collect Data

a. Directly from you when you create an account, upload content, or communicate with us.
b. Automatically through cookies and similar technologies.
c. From payment provider Stripe when you subscribe.

5. Purpose and Legal Basis

• Account set-up & administration – Art. 6 (1)(b) GDPR (contract).
• Providing debates & generating AI content – Art. 6 (1)(b) GDPR.
• Payment processing – Art. 6 (1)(b) GDPR.
• Service improvement, fraud prevention, and security – Art. 6 (1)(f) GDPR (legitimate interest).
• Marketing e-mails (newsletter, product updates) – Art. 6 (1)(a) GDPR (consent). You may withdraw at any time via the unsubscribe link.
• Legal compliance & bookkeeping – Art. 6 (1)(c) GDPR.

6. Data Sharing & Recipients

We share Personal Data only when necessary:

• Infrastructure: AWS (storage & hosting).
• AI Model Providers: OpenAI, Anthropic, Together AI, and other providers you choose per debate (content routed through their APIs).
• Payments: Stripe, Inc. (card processing, invoicing).

All processors act under written agreements compliant with Article 28 GDPR.

7. International Transfers

Some recipients are located outside the European Economic Area. Where required, we rely on European Commission adequacy decisions or Standard Contractual Clauses (SCCs) supplemented by additional safeguards.

8. Data Retention

• Account & subscription data – stored for the lifetime of the account plus 24 months.
• AI transcripts and uploads – deleted automatically 30 days after debate unless you save them; saved items remain until you delete them or your account is removed.
• Invoices – kept for 5 years in accordance with Polish accounting law.
• Logs – 90 days for security purposes.

9. Cookies & Similar Technologies

We use:

• Essential cookies – necessary for authentication & session management (cannot be disabled).
• Analytics cookies – collect anonymised usage statistics (disabled by default; enabled only with your consent via the cookie banner).

10. Data Security

We employ TLS encryption, access controls, hashed passwords (Argon2), regular penetration testing, and least-privilege principles to safeguard Personal Data.

11. Your GDPR Rights

You have the right to request access, rectification, erasure, restriction, data portability, and to object to processing based on legitimate interests. You may also withdraw consent at any time. To exercise any right, e-mail privacy@debateai.app.

If you believe your data is processed unlawfully, you can lodge a complaint with the Polish Data Protection Authority (UODO) or your local supervisory authority.

12. Children’s Privacy

The Service is not directed to children under 16. We do not knowingly process Personal Data of children. If we learn that such data has been collected, we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy to reflect changes in law or our practices changes in law or our practices. We will notify you of material changes via e-mail or in-app. Continued use of the Service after the update date constitutes acceptance of the revised Policy.

14. Contact

Controller: r6lab Radoslaw Jozefowicz

Address: ul. Akacjowa 3, 55-003 Krzykow, Poland

E-mail: privacy@debateai.app

General enquiries: support@debateai.app