OctoSale app privacy policy

1. Controller and contact

The controller of data related to the app is OctoLab Jacek Labuda. Data contact: kontakt@octolab.pl.

2. Roles — who controls what

Account and technical data (your app account, logs, security): the controller is OctoLab Jacek Labuda.

Business data (orders, the seller's customer/recipient data, message content) that the seller enters and manages in the app: the controller is the seller (the company using OctoSale), and OctoLab Jacek Labuda processes it on the seller's behalf as a processor, under a data processing agreement.

3. What data we process

Account: e-mail address, password (stored encrypted/hashed), first name or display name, role (owner/employee), company assignment.

Operational data entered in the app: orders, the seller's customer data, the content of messages and order remarks.

Technical data: the minimum needed for operation and security (e.g. session identifier, server-side error logs).

We collect no location data. There are no ads. We use no analytics or tracking tools. We do not sell data and do not share it for marketing purposes.

4. Purposes and legal bases

Providing the service (signing in, order overview, communication) — performance of a contract (Art. 6(1)(b) GDPR); for business data — processing on the seller's behalf.

Security, abuse prevention and error diagnostics — legitimate interest (point (f)).

Compliance with legal obligations, where they arise — point (c).

5. Push notifications

The app currently sends no push notifications. If that changes, we will update this policy and — where required — ask for consent.

6. Where the data lives and transfers

Data is stored on Amazon Web Services (AWS) servers in a Germany region (European Union). AWS acts as a processor (infrastructure). We do not transfer data outside the EEA.

7. How long we keep data

Account data — for as long as you use the app and any period required by law; after account closure we delete or anonymize it, unless the law requires longer retention. Business data — as agreed with the seller.

8. Deleting your account and data

You can delete your account directly in the OctoSale app. You can also request deletion of your account and related data by emailing kontakt@octolab.pl.

9. Security

We apply appropriate technical and organizational measures, including encrypted transmission, access control and separation of data between companies (tenants).

10. Children

The app is a business tool and is not directed at anyone under 16.

11. Your rights

Access, rectification, erasure, restriction, objection, data portability, and the right to lodge a complaint with the Polish DPA (UODO). For business data, address your request to the seller (the controller) — we will support them in fulfilling it.

12. Changes

We may update this policy; the current version always lives at this URL.