1. Data controller
The controller of your personal data is the operator of the Bivabox service. Data protection contact: hello@montekika.pl.
2. What we process and why
- Calculator inputs (idea name, amounts) — solely to generate your analysis and report (Art. 6(1)(b) GDPR — contract performance). In the free version, data never leaves your browser (stored in localStorage).
- E-mail address — to deliver the report and payment confirmation (Art. 6(1)(b) GDPR).
- Payment data — processed exclusively by Stripe; we never see your card number.
- Your chat messages to the assistant (bubble in the bottom-right corner) — sent to the sellchat.eu server and to an AI model to produce the reply; questions about buying or contact also trigger a notification to the operator (Art. 6(1)(f) GDPR — legitimate interest in answering enquiries). Please do not type anything into the chat you would rather not share with us.
3. Data recipients (processors)
Stripe (payments), Anthropic (AI report generation and assistant replies), SellChat / sellchat.eu (chat assistant infrastructure), Telegram (operator notifications), MailerSend/MailerLite (e-mail delivery), Vercel (hosting). Some processors operate outside the EEA under Standard Contractual Clauses.
4. Retention
Transaction data — as required by tax law. Idea data in payment metadata — up to 90 days, then deletable on request. Data in your browser (localStorage) is under your control — clear it by removing site data.
5. Your rights
You have the right of access, rectification, erasure, restriction, portability and objection — write to hello@montekika.pl. You may also lodge a complaint with your supervisory authority (in Poland: UODO, uodo.gov.pl).
6. Cookies and tracking
The Service uses no tracking cookies and no ad analytics. We only use localStorage to remember your preferences (language, currency, theme) and calculator data — none of it is sent anywhere until you buy a report or send a message to the chat assistant.
7. Automated decisions
The report is AI-generated, but we make no automated decisions about you with legal effects within the meaning of Art. 22 GDPR.
Last updated: 2026-08-30