Privacy Policy
Last updated:
This policy explains how Szara Sowa Development - Władysław Kłaczkow ("we", "us") handles personal data when you use Numby. Numby converts a PDF invoice or bank statement into Excel, CSV, OFX, or an e-invoice, then deletes the file.
Who we are
The Service is operated by Szara Sowa Development - Władysław Kłaczkow, with its place of business at Stefana Batorego 18/108, 02-591 Warszawa, Poland (European Union). Numby is the product name. Contact us at wlad@wlad.me.
We are the controller for account, billing, support, and website data. A statement or invoice you upload is processed to perform the conversion you asked for and is then deleted. It is not used to train models. If you need a data processing agreement, email wlad@wlad.me.
Information we collect
Account information
When you create or update an account, we collect:
- Email address and name
- A password hash held by our authentication provider, or the provider you use to sign in
- Team membership, when you join a team
Billing information
Paid charges, when they are offered, go through Stripe. We do not store full card numbers. We keep Stripe customer identifiers, plan, and the status needed to run the account.
Support mail
If you email us, we keep your address and the message so we can reply.
Conversion metadata
To enforce limits and stop abuse we may keep that a conversion happened, a page count, and a timestamp. We do not keep the PDF, the original filename, or the extracted rows, and we cannot recover the document afterward.
Technical data
The site logs IP address, browser type, and pages visited so we can operate, secure, and rate-limit the Service.
How we use information
- Run the conversion you requested and delete the file when it finishes
- Create accounts, enforce monthly limits, and send security or billing email
- Reply to support messages
- Show ads on the free tools after you accept them
- Secure the Service and comply with law
Legal bases
Where the GDPR or a similar law applies, we rely on contract (to provide the conversion and the account), legitimate interests (security, abuse prevention, and product operation), legal obligation (tax and accounting records), and consent (advertising cookies, which you can refuse).
Cookies and ads
Strictly necessary cookies keep you signed in. Theme preference is stored in this browser. Google AdSense runs only after you accept ads in the consent bar. Rejecting ads stores that choice in this browser. The file you convert is not sent to Google. Details are on the cookie page.
Who we share information with
We use processors that host the Service, authenticate accounts, send email, take payment, measure the site, and, when you accept ads, serve advertising. They may include the host, Supabase, Stripe, the email provider, EventDash, and Google. EventDash does not receive the file you convert. We do not sell personal information.
International transfers
Some processors are outside Poland. Where data leaves the European Economic Area, we use the safeguards the GDPR requires, such as standard contractual clauses.
Retention
The converted file is deleted when the conversion finishes. Account data stays while the account exists, then is deleted or anonymised unless we must keep a billing record for tax law. Support mail is kept long enough to resolve the request. The ad choice stays in your browser until you clear it.
Security
The site is served over HTTPS. Access to account data is limited to operating the Service. We do not claim a security certification.
Your rights
Depending on where you live, you can ask for access, correction, deletion, restriction, or a copy of your personal data, and you can object to processing or withdraw consent. Email wlad@wlad.me. You can also complain to the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych) at https://uodo.gov.pl/.
If you are in California, you can ask what personal information we hold and ask us to delete it, subject to exceptions. We do not sell personal information.
Children
The Service is not directed at children under 16, and we do not knowingly collect their data.
Changes
We will post changes on this page and update the date above.
Contact
Szara Sowa Development - Władysław Kłaczkow, Stefana Batorego 18/108, 02-591 Warszawa, Poland. Email wlad@wlad.me.