# Privacy policy (GDPR)

> What we process, why, who we entrust it to and how long we keep it.

Źródło / source: https://www.bivabox.app/en/privacy/ · Polski: https://www.bivabox.app/privacy/
Last updated: 2026-08-30

---

## 1. Data controller
The controller of your personal data is the operator of the Bivabox service. Data protection contact: **hello@montekika.pl**.

## 2. What we process and why
- **Calculator inputs** (idea name, amounts) — solely to generate your analysis and report (Art. 6(1)(b) GDPR — contract performance). In the free version, data never leaves your browser (stored in localStorage).
- **E-mail address** — to deliver the report and payment confirmation (Art. 6(1)(b) GDPR).
- **Payment data** — processed exclusively by Stripe; we never see your card number.
- **Your chat messages to the assistant** (bubble in the bottom-right corner) — sent to the sellchat.eu server and to an AI model to produce the reply; questions about buying or contact also trigger a notification to the operator (Art. 6(1)(f) GDPR — legitimate interest in answering enquiries). Please do not type anything into the chat you would rather not share with us.

## 3. Data recipients (processors)
Stripe (payments), Anthropic (AI report generation and assistant replies), SellChat / sellchat.eu (chat assistant infrastructure), Telegram (operator notifications), MailerSend/MailerLite (e-mail delivery), Vercel (hosting). Some processors operate outside the EEA under Standard Contractual Clauses.

## 4. Retention
Transaction data — as required by tax law. Idea data in payment metadata — up to 90 days, then deletable on request. Data in your browser (localStorage) is under your control — clear it by removing site data.

## 5. Your rights
You have the right of access, rectification, erasure, restriction, portability and objection — write to **hello@montekika.pl**. You may also lodge a complaint with your supervisory authority (in Poland: UODO, uodo.gov.pl).

## 6. Cookies and tracking
The Service uses no tracking cookies and no ad analytics. We only use localStorage to remember your preferences (language, currency, theme) and calculator data — none of it is sent anywhere until you buy a report or send a message to the chat assistant.

## 7. Automated decisions
The report is AI-generated, but we make no automated decisions about you with legal effects within the meaning of Art. 22 GDPR.

---

Bivabox is in beta. The Service is operated by the Bivabox team; the seller's registration details will be published when the full version launches.