Privacy Policy
PRIVACY POLICY — IDA (project-ida.com)
Version: 2025-12-22
Effective date: 2025-12-22
1. Data controller
The data controller is Jakub Palka, e-mail: jakub.palka@akademiasztuki.eu.
2. Personal data we process
We may process:
• account data: e-mail, user identifier,
• research data: questionnaire/test answers, results, preferences, interaction metadata (e.g., response times),
• uploaded content: interior photos/inspirations and related metadata,
• technical/analytics data: service performance data, device/browser information, analytics events and logs.
3. Purposes and legal bases
We process data to:
• provide accounts and electronic services within the Service,
• conduct the research study and aggregate analysis,
• ensure security and prevent abuse,
• handle payments/subscriptions (if applicable).
Legal bases are provided during onboarding and in context (e.g., consent for research participation).
4. Service providers / recipients
Data may be processed by infrastructure providers used to run the Service, including:
• Vercel (hosting/analytics/telemetry),
• Supabase (auth, database, storage),
• Google Cloud (infrastructure/compute),
• Modal (backend jobs/AI execution),
• Stripe (payments and subscriptions).
5. Payments (Stripe)
Payments are processed by Stripe; payment card details are processed directly by Stripe and the Service may receive limited payment information (e.g., status and transaction identifiers).
6. International transfers
Where transfers outside the EEA occur, we rely on appropriate legal mechanisms (e.g., standard contractual clauses).
7. Data retention
We retain data for the duration of account/service use, the duration of research and necessary research archiving, and until consent is withdrawn (where consent is the legal basis), unless another legal basis applies.
8. Your rights
You may have rights of access, rectification, erasure, restriction, and the right to lodge a complaint with the relevant data protection authority; contact: jakub.palka@akademiasztuki.eu.
9. Photos
Do not upload photos containing people, IDs/documents, or sensitive information; upload interior-only images.