Privacy Policy

1. Data controller

The controller of your personal data is [Business name as registered in CEIDG], [Street, postcode City], Poland, NIP [0000000000]. For anything about privacy, email [email protected].

2. What we collect

• Account data: name, email, organization, and team membership.
• Workspace data you sync to Requestarium Cloud: collections, environments, and settings. Secrets are encrypted at rest. Data you keep only in the desktop app stays on your device.
• Billing data: plan, seats, and subscription status. Card details go to Paddle, never to us.
• Contact data: what you send through our forms or by email.
• Technical data: app version, OS, and server logs (IP address, timestamps) used for security and update checks.

3. Why we use it and on what basis

• To provide the Service and your plan — performance of a contract (Art. 6(1)(b) GDPR).
• To keep the Service secure, prevent abuse, and improve it — our legitimate interests (Art. 6(1)(f)).
• To keep accounting and tax records — legal obligation (Art. 6(1)(c)).
• To send product news, only if you opt in — consent (Art. 6(1)(a)), which you can withdraw at any time.

4. AI assistant

The AI assistant uses your own model key. Prompts go directly from your app to the model provider you choose (for example Anthropic or OpenAI) under that provider's terms. We do not receive or store them.

5. Who we share it with

We do not sell personal data. We share it only with:

• Paddle.com, our Merchant of Record, which processes payments, invoices, and taxes as an independent controller (Paddle Privacy Policy);
• hosting and email providers that process data on our behalf under data processing agreements;
• Google Ireland Ltd. (Google Analytics), only if you accept analytics cookies;
• Microsoft Ireland Operations Ltd. (Microsoft Clarity), only if you accept analytics cookies;
• authorities, when the law requires it.

Where data leaves the European Economic Area, we rely on adequacy decisions or the EU Standard Contractual Clauses.

6. How long we keep it

Account and workspace data: while your account is active, plus 30 days to allow export. Billing records: as long as Polish tax law requires (generally 5 years). Server logs: up to 90 days.

7. Your rights

You can ask to access, correct, delete, export, or restrict your data, and object to processing based on legitimate interests. Email [email protected] and we will reply within 30 days.

You can also complain to the Polish data protection authority (Prezes Urzędu Ochrony Danych Osobowych, uodo.gov.pl) or the authority in your country.

8. Cookies

This website uses cookies that are needed to run it and to complete checkout. We do not use advertising cookies.

With your consent, we also use Google Analytics 4 (Google Ireland Ltd.) to count visits and see which pages are useful. It sets the _ga cookies, keeps data for 14 months, and does not store full IP addresses. Visitors in the EEA, the UK, and Switzerland are asked first; until you accept, Google Analytics runs without cookies and only receives anonymous, aggregate signals. You can change your choice at any time with Cookie settings at the bottom of every page, or in the web app under Settings, Account. See Google's Privacy Policy.

With the same consent, we use Microsoft Clarity (Microsoft Ireland Operations Ltd.) on this website and in the web app at app.requestarium.com to see how pages are used, through heatmaps and session replays. It sets the _clck and _clsk cookies and keeps data for up to 13 months. In the web app, Clarity masks all text and form fields, so your requests, responses, variables, and tokens are never recorded, and it does not run on public share links. Clarity does not load until you accept. See the Microsoft Privacy Statement.

The Requestarium desktop app, CLI, and IDE extensions do not use analytics cookies.

9. Changes

We will post updates here and notify you of material changes by email or in the app.