01Data Controller
The controller of your personal data is Denys Hritsanov Scopio (Scopio Automation), ul. Biskupia 6/4, 50-148 Wrocław, Poland. NIP: 8971961798. Contact: growmebusiness.pl@gmail.com.
02Data We Collect
We collect company registration details (name, NIP/VAT ID, address), contact information (email, phone, name of representative), product catalog data, order and transaction records, and API integration logs.
03How We Use Your Data
Your data is used to provide B2B platform services, process orders, issue invoices, perform Stripe KYC verification, synchronize TikTok Shop listings, and provide AI-assisted catalog management. Data is not used for unsolicited marketing without consent.
04Legal Basis (GDPR)
Processing is based on: (a) contractual necessity for service delivery (Art. 6(1)(b)), (b) legal obligation for invoicing and tax compliance (Art. 6(1)(c)), and (c) legitimate interest for platform security and fraud prevention (Art. 6(1)(f)).
05Data Sharing
We share data only where necessary: Stripe (payment processing, KYC), Supabase (database hosting, EU region), Hetzner (EU-based hosting, Germany), InPost and DPD (shipping label generation). All partners are GDPR-compliant.
06Data Retention
Transaction and invoice data is retained for 5 years as required by Polish tax law. Account data is retained for the duration of the service agreement plus 1 year. API logs are retained for 90 days. You may request deletion at any time subject to legal retention obligations.
07Your Rights
Under GDPR you have the right to: access your data (Art. 15), correct inaccurate data (Art. 16), request erasure (Art. 17), restrict processing (Art. 18), data portability (Art. 20), and object to processing (Art. 21). Submit requests to: growmebusiness.pl@gmail.com.
08Cookies
We use essential session cookies for authentication (JWT) and preference cookies for language selection. No third-party advertising or tracking cookies are used. You can control cookies via your browser settings.
09Complaints
If you believe your data rights have been violated, you have the right to lodge a complaint with the Polish supervisory authority: UODO (Urząd Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, www.uodo.gov.pl.
10Shopify App — Data Processing
When you install the Scopio AI app from the Shopify App Store, we access the following data from your store: shop domain, product titles, descriptions and images (to generate videos), and order analytics (to identify bestsellers). We store your Shopify access token securely in encrypted form to maintain the connection. Product images are processed by our AI pipeline and not shared with third parties. If you connect social media accounts (Instagram, TikTok, YouTube, Pinterest, Facebook, X), we store OAuth access tokens solely to publish generated videos on your behalf. You may revoke access at any time by uninstalling the app or disconnecting social accounts in the app settings. Upon uninstallation, all tokens and generated video data are deleted within 30 days.
11Google user data (Google API Services)
If you sign in with Google or connect a Google service, Scopio accesses Google user data only to provide the feature you use: Sign in with Google — your email address, name and profile picture, to create and identify your account; Gmail — sending emails from your own mailbox (through Gmail SMTP) on your instructions; YouTube — uploading and publishing videos to your channel and reading your channel statistics and analytics; Google Calendar — reading availability and creating booking events. We request only the permissions these features need, and only after you approve them on Google's consent screen. We do not sell Google user data, do not use it for advertising, and do not use it to develop, improve or train generalized AI or machine-learning models. Our staff do not read your Google data unless you ask us to, it is necessary to investigate abuse or a security incident, or the law requires it. You can disconnect any Google service at any time in your Scopio account or at myaccount.google.com/permissions; disconnecting stops all access, and you can ask us to delete the stored access tokens and related data by emailing growmebusiness.pl@gmail.com. Scopio's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. YouTube features use YouTube API Services: by using them you also agree to be bound by the YouTube Terms of Service (https://www.youtube.com/t/terms), and the Google Privacy Policy (https://policies.google.com/privacy) applies to data handled by YouTube.
Your Rights
- Art. 15 — Access
- Art. 16 — Rectification
- Art. 17 — Erasure
- Art. 20 — Portability
- Art. 21 — Objection
Contact
Data protection inquiries:
growmebusiness.pl@gmail.com
Legal Basis
- GDPR Art. 6(1)(b) — Contract
- GDPR Art. 6(1)(c) — Legal obligation
- GDPR Art. 6(1)(f) — Legitimate interest
- UODO — Polish DPA