Pairrot Privacy Policy
Effective from August 12, 2026.
This is a courtesy translation. In case of any discrepancy, the Polish version available at pairrot.tech/prywatnosc prevails.
1. Data controller
The controller of personal data is Mateusz Pawluk, trading as Studio Kreatywne Mateusz Pawluk, Polish tax ID (NIP) 8393015674. Contact for all data matters: kontakt@pawlukstudio.pl.
2. What data we process and why
| Data | Purpose | Legal basis (GDPR) |
|---|---|---|
| E-mail address and account identifier | Creating and operating the account, sign-in, service-related contact | art. 6(1)(b) — performance of a contract |
| Call metadata: start time, duration, company name and topic you enter | Per-second billing of packages, call history in the panel | art. 6(1)(b) — performance of a contract |
| Call audio (microphone and system audio) | Real-time transcription. The audio stream is processed on the fly and is not stored on our servers; the transcript is created only on the User's computer | art. 6(1)(b) — performance of a contract |
| Meeting recordings uploaded to the "Meetings" feature | Transcription with speaker roles. The recording is stored only until transcription completes, then permanently deleted — only the text remains on the account | art. 6(1)(b) — performance of a contract |
| Transcript fragments, profile and documents passed to the AI model | Generating suggestions during calls and meeting summaries | art. 6(1)(b) — performance of a contract |
| Payment data: amount, transaction identifier, payer e-mail | Crediting packages, accounting, handling complaints | art. 6(1)(b) and (c) — contract and tax obligations |
| Technical counters: seconds used, number of model requests and tokens | Cost accounting, abuse prevention | art. 6(1)(f) — legitimate interest |
| Aggregate page-view counter (day + path) | Traffic statistics. The counter uses no cookies and identifies no one | art. 6(1)(f) — legitimate interest |
Providing an e-mail address is required to create an account; other data arises in the course of using the service. We do not profile users and make no automated decisions producing legal effects.
3. Interlocutors' voices — the User's role
During live calls and in meeting recordings Pairrot also processes the voices of the User's interlocutors. In this respect the User (or their company) is the controller of the interlocutors' data, and the Provider acts as a processor on their behalf. It is the User who decides to use the tool in a given conversation, and it is the User's duty to inform their interlocutors and to ensure a legal basis for the processing. A data-processing agreement is available on request — write to the contact address.
4. Who we entrust data to
We use the following processors:
| Entity | Role | Processing location |
|---|---|---|
| Clerk, Inc. | Sign-in and account management | USA |
| Neon, Inc. | Database (accounts, sessions, payments) | EU — Frankfurt |
| Vercel, Inc. | Website and backend hosting | EU / USA |
| Stripe, Inc. | Payments | EU / USA |
| ElevenLabs, Inc. | Speech transcription — live and from meeting recordings | USA |
| Google LLC (Gemini API) | Suggestion generation (language model) | USA |
Transfers to entities in the USA rely on the European Commission's adequacy decision for the EU–US Data Privacy Framework and, for entities not covered by it, on standard contractual clauses (art. 46 GDPR). Transcription and language-model providers process audio and text solely to provide the service; under their API terms, data from paid services is not used to train models.
5. How long we keep data
- Account data — for the life of the account, and up to 30 days after deletion.
- Call metadata and counters — for the life of the account, for billing and panel history.
- Live-call audio — not stored; transcripts and summaries are saved only on the User's computer and only the User controls them.
- Meeting recordings — until transcription completes (usually minutes); after a failed attempt at most 7 days, so it can be retried. Meeting transcripts and summaries — on the account until the User deletes them.
- Billing data — for the period required by tax law (5 years from the end of the tax year).
- Aggregate visit counters — indefinitely; they contain no personal data.
6. Your rights
You have the right to: access your data and obtain a copy, rectification, erasure, restriction of processing, data portability, and objection to processing based on legitimate interest. We handle requests at kontakt@pawlukstudio.pl within one month. You may also lodge a complaint with the President of the Polish Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warsaw).
7. Cookies
The Service uses only cookies necessary for sign-in to work (the Clerk session) and a cookie remembering your language choice. We use no advertising cookies. Visit statistics are counted in aggregate — with our own counter and a self-hosted Umami instance — without cookies, without identifying anyone and without storing anything in the browser. That is why there is no cookie banner: there are no consents to ask for.
8. Security
Connections to the Service are encrypted (TLS). Keys to external services are stored exclusively server-side; the application on the User's computer contains no service secrets. Device access tokens are stored only as cryptographic hashes.
9. Changes to this policy
We will announce material changes to this policy in the Service and by e-mail. Archived versions are available on request.