1. Who controls your data
ArchieGuru is operated by Piotr Staśkiewicz, ul. Bażantowa 1A, 55-002 Kamieniec Wrocławski, Poland, NIP PL8971852419. In this policy, “ArchieGuru”, “we”, “us”, and “our” refer to Piotr Staśkiewicz acting as the operator of the ArchieGuru service, and as the controller of personal data processed through the Service.
ArchieGuru relies on third-party service providers to operate the product. Those providers act as processors on ArchieGuru's behalf, or under their own terms for their own operational, security, or legal purposes.
You can contact ArchieGuru about privacy matters at [email protected].
2. Scope of this policy
This policy applies to the ArchieGuru website, account system, practice workspace, AI-assisted features, billing flows, and related communications.
The Service is intended for users aged 16 or older. ArchieGuru does not knowingly provide the Service to children under 16 and does not intentionally collect personal data from them.
3. Personal data we process
Depending on how you use ArchieGuru, we may process:
- Account and profile data: email address, display name, account identifier, avatar, timezone, and user preferences.
- Authentication data: credentials or tokens used to sign in. If you use a social sign-in option, we receive the basic identity data the provider makes available (such as email, name, avatar, and account id).
- Workspace content: material you create or submit inside the Service, including diagrams, text, prompts, chat messages, and AI-generated outputs tied to your account.
- Billing and entitlement data: selected plan, subscription status, purchase events, and balance or ledger history for in-product units. Payment card details are handled by the payment processor and are not stored by ArchieGuru.
- Communications data: messages you send to support, legal, or waitlist channels, and email addresses used for related follow-ups.
- Technical and usage data: request identifiers, browser and device metadata, IP-related network data, and logs needed for security, debugging, and service reliability.
- Essential browser storage: cookies and local or session storage values strictly necessary to keep you signed in and to remember basic UI preferences.
ArchieGuru uses privacy-focused product analytics that do not use tracking cookies, do not collect personally identifiable information, and do not track users across sites. We avoid sending user-authored content into analytics events.
Because ArchieGuru is a practice tool, you should not submit sensitive personal data, secrets, credentials, regulated production data, or information you are not authorized to share.
4. Why we process personal data and the legal bases
ArchieGuru processes personal data to provide the Service you request, including account creation, login, billing, workspace persistence, AI-assisted features, support, and account deletion. Where EU or similar laws apply, the main legal bases are:
- Contract: to create and manage your account, deliver paid or free features, store your content, process payments, and provide related support.
- Legitimate interests: to secure the Service, prevent abuse and fraud, diagnose failures, maintain reliability, keep proportionate technical and security logs, measure bounded product usage, and defend or exercise legal claims.
- Consent: when you join a waitlist or request updates that are not otherwise necessary to perform the Service.
- Legal obligation: when we need to keep records for accounting, tax, compliance, or law-enforcement-related reasons.
5. AI features
The Service includes AI-assisted features. When you use them, ArchieGuru sends your prompt and the workspace context needed to generate a response to a third-party AI model provider, and may store the prompt, response, and related artifacts so you can return to your work.
ArchieGuru does not use your content to train its own AI models. ArchieGuru integrates with AI model providers through their commercial APIs. Under those providers' current commercial API terms, customer content submitted via the API is not used to train the providers' models by default. Provider terms may change over time, and content submitted to an AI feature may still be processed, logged, or briefly retained by the relevant provider for abuse-prevention, safety, or operational purposes under that provider's own terms. For that reason, you should still avoid submitting unnecessary personal data or confidential information to AI features.
6. Automated decision-making
ArchieGuru does not use automated decision-making or profiling to make decisions that produce legal effects concerning you or similarly significantly affect you. AI-generated outputs are informational and educational only and are not used to determine your access to, pricing of, or eligibility for the Service.
8. International transfers
Service providers used by ArchieGuru may be located in countries other than your own, including outside the European Economic Area (for example in the United States). Where data protection law requires it, ArchieGuru relies on transfer mechanisms made available by the relevant provider, such as adequacy decisions, standard contractual clauses, or other lawful transfer tools.
9. Retention
ArchieGuru keeps different categories of personal data for different periods, depending on why the data is needed.
- Account and workspace data: generally while your account remains active and for as long as needed to provide the Service.
- Billing and transaction data: typically retained for up to 5 years from the end of the tax year in which the transaction occurred, or longer where a specific accounting, tax, anti-fraud, chargeback, or legal requirement applies (for example Polish tax and accounting rules).
- Waitlist and support communications: kept until the request is resolved, you unsubscribe, or the information is no longer needed.
- Technical logs and security records: retained on a shorter rolling basis, unless a longer period is justified by an incident, investigation, or legal requirement.
If you delete your account, ArchieGuru will remove your account data from the active application and trigger deletion or anonymization of the related billing customer record. Some residual copies may remain temporarily in backups, logs, or legally required records until they are overwritten, deleted, or expire under normal retention cycles. Backups are rotated on a short rolling basis, unless a longer period is needed for incident response, abuse prevention, disaster recovery, or legal obligations.
10. Your privacy rights
Depending on your location, you may have rights to access, correct, delete, restrict, object to, or port your personal data, and to withdraw consent where processing is based on consent.
You can exercise many of these rights directly in the product — for example by updating your profile or deleting your account from the settings page — or by contacting ArchieGuru at [email protected]. ArchieGuru will respond to verified requests without undue delay and in any event within one month of receipt, with a possible extension of up to two further months where required by the complexity or number of requests, as permitted by GDPR.
If you are in the EEA or another jurisdiction with comparable data protection rights, you may also complain to the competent data protection supervisory authority in your place of residence, work, or the place of the alleged infringement. In Poland, the competent supervisory authority is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), with address ul. Stawki 2, 00-193 Warsaw.
11. Additional disclosures for California users
If California privacy law applies to you, ArchieGuru generally acts as a business collecting the categories of information described in this policy for the business purposes described above.
California users may have rights to know, access, correct, or delete certain personal information, subject to legal exceptions. ArchieGuru does not sell personal information and does not share personal information for cross-context behavioral advertising as those terms are used in California law.
To submit a California privacy request, email [email protected]. We may need to verify your identity before completing a request.
12. Security
ArchieGuru uses reasonable technical and organizational measures to protect personal data against unauthorized access, loss, misuse, or alteration. No internet service or storage system is completely secure, and ArchieGuru cannot guarantee absolute security.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, ArchieGuru will notify the competent supervisory authority and, where required by applicable law, affected individuals without undue delay.
13. Changes to this policy
ArchieGuru may update this Privacy Policy from time to time to reflect legal, technical, or product changes. The updated version will be posted on this page with a revised “Last updated” date.
Contact
For legal, privacy, or account-related questions, contact [email protected].
If you need product help, you can also use the in-app support link or email [email protected].