Privacy policy
1. Effective date
This privacy policy is effective from 13 April 2026.
2. Data controller
The controller of personal data under GDPR is:
- Mgr. Vladimír Donič
- Address: 128, 07221 Nacina Ves, Slovak Republic
- Company ID: 45351279
- Tax ID: 1081789126
- Trade Register of the Michalovce District Office, No. 840-17642
- Email: info@pozorio.sk
- Phone: +421 948 368 636
3. What personal data we process
Depending on how you use Pozorio AI, we process the following categories of data:
- For a free audit: email address (optional), website URL, brand or online store name.
- When registering and signing in: email address, name and password as a cryptographic hash (bcrypt). We never store passwords in readable form.
- When paying: billing details (name, address, company ID/tax ID) are processed directly by the Stripe payment gateway. Pozorio AI does not store payment card numbers or have access to them.
- Automatically collected data: anonymized IP address and browser type through the self-hosted analytics tool Umami (analytics.pozorio.sk). This data is not linked to a specific person.
4. Purposes and legal bases for processing
Overview of purposes, legal bases and personal data retention periods:
| Purpose | Legal basis | Retention period |
|---|---|---|
| Providing the service | Performance of a contract (GDPR Art. 6(1)(b)) | For the duration of the contract + 3 years |
| Billing and accounting | Legal obligation (GDPR Art. 6(1)(c)) | 10 years |
| Marketing communication | Legitimate interest (GDPR Art. 6(1)(f)) | Until you unsubscribe |
| Anonymous statistics (Umami) | Legitimate interest (GDPR Art. 6(1)(f)) | 24 months |
5. Subcontractors (subprocessors)
We use trusted subcontractors to operate the service. Each is contractually bound to comply with data security and protection requirements under GDPR:
| Subcontractor | Purpose | Location / safeguards |
|---|---|---|
| Vercel | Web application hosting | USA / SCCs (standard contractual clauses) |
| Supabase | Database and authentication | EU (Frankfurt) |
| Stripe | Payment transactions | USA / SCCs |
| Resend | Transactional emails | USA / SCCs |
| OpenAI | AI query processing | USA / SCCs |
| Umami (self-hosted) | Anonymous web analytics | EU (Frankfurt) — our own servers |
6. Your rights
As a data subject, you have the following rights in relation to personal data processing:
- Right of access — you can request confirmation of whether we process your personal data and a copy of it.
- Right to rectification — you can request correction of inaccurate or incomplete data.
- Right to erasure — you can request deletion of personal data when its processing purpose no longer applies or when you withdraw consent.
- Right to restriction of processing — you can request temporary suspension of the processing of your data.
- Right to data portability — you can request your data in a structured, machine-readable format.
- Right to object — you can object to processing based on legitimate interest, including direct marketing.
- Right to lodge a complaint — you have the right to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic: uoou.sk.
7. Security
We use appropriate technical and organizational measures to protect your personal data:
- Encryption of data in transit using TLS 1.3.
- Passwords are stored exclusively as a cryptographic hash using bcrypt.
- Regular automated database backups within the EU.
- In the event of a security incident affecting your personal data, we will notify you within 72 hours of becoming aware of the incident, in accordance with GDPR Arts. 33–34.
8. Cookies and tracking technologies
Information about the cookies and localStorage items we use is available in our Cookie policy.
8a. Browser extension (Chrome extension)
The extension “Pozorio — AI Overview brand checker” does not collect or transmit any personal data. Network communication is limited to two optional features:
- Tracked terms (brand names) are stored exclusively locally in your browser (
chrome.storage) and are not sent anywhere. - Whether an AI Overview mentions your brand is evaluated locally on the results page — the extension does not track search history or include analytics.
- Optional loading of your brand list from pozorio.sk using your API key (Optimize plan and above). The API key is stored only locally and can be removed at any time in the extension’s settings.
- Optional, disabled by default measurement accuracy program (opt-in in the extension’s settings): if enabled, the extension anonymously sends only this triplet to pozorio.sk:
search query · tracked term · mentioned yes/no— with no page content, cookies, identity or IP profiling. The data is used only to verify consistency between API measurements and actual AI Overviews, and collection can be disabled at any time.
9. Contact
If you have any questions about the processing of your personal data or wish to exercise any of the rights above, contact us at: info@pozorio.sk. We will respond to your request within 30 days.