Privacy policy
In force from 28 August 2026. The terms of service are set out in the terms.
This is a translation provided for convenience. The Polish version is the binding one; in the event of any discrepancy, the Polish text prevails.
Who is responsible for your data
The controller is Marlena Koleśnik P.P.H.U. GALLART, Kazimierza Pużaka 51D, 38-400 Krosno, Polska, NIP 6842426139, REGON 180556930. For data matters write to kamil@gallart.pl.
What we collect
At registration: your name or company name, email address, shop name and a password stored as a hash — we never see the password and cannot read it. When you buy, Stripe collects billing and payment details; we only see the customer identifier, subscription state and renewal date. We have no access to the card number.
As you work we store jobs, shop settings, usage counters and technical server logs containing IP addresses. We use no analytics or advertising tools and we do not profile users.
The files you upload
We treat your artwork as material entrusted to us. If it contains personal data, we process it solely on your instructions under a data processing agreement, which we prepare on request. We do not browse it, share it with anyone, or use it for anything beyond carrying out your job.
Cookies
We use one cookie to keep you signed in and another to remember your chosen language. Both are necessary for the service to work and are not used for tracking. We use no analytics or advertising cookies, so we do not ask for consent to them.
Who we share data with
| Provider | Scope | Location |
|---|---|---|
| OVHcloud | application server and file storage | Poland (Warsaw) |
| Stripe Payments Europe | card payments, invoices and billing data | Ireland |
| Google Ireland (Google Fonts) | typefaces on public pages | Ireland |
Data is not transferred outside the European Economic Area. We will give advance notice of any new provider.
How long we keep it
Your account, settings and job history — for as long as you use the service. Uploaded artwork and finished files — at least 30 days; today we do not delete them automatically, we delete them on request. Billing records are kept for as long as tax law requires.
Your rights
You have the right to access your data, to have it corrected, erased or ported, and the right to object and to lodge a complaint with the Polish data protection authority (Prezes Urzędu Ochrony Danych Osobowych). We act on requests to delete an account together with its files, without undue delay, once you write to the contact address.
Security
Connections are encrypted. Each shop is separated from the others at the database and file storage level. Passwords are stored as salted hashes and API keys only as hashes. Database backups are taken hourly and stored off the application server.