Privacy
Privacy Policy
Last updated: July 8, 2026
1. Data controller
The controller of your personal data is:
Damian Klimarczyk MDGA
VAT ID: PL7812019335
Email: damian@euailabel.app
Website: https://euailabel.app
2. Scope
This policy covers the marketing website at euailabel.app, the EU AI Label Shopify app, and the EU AI Label WordPress / WooCommerce plugin (collectively, the "Service").
3. What we collect
- Account & billing: merchant email, store domain, plan, and billing metadata handled by the Shopify Billing API or the WordPress plugin's licensing flow.
- App data: Shopify / WooCommerce product and image identifiers and label configuration required to render labels.
- Support: messages you send us by email.
- Operational logs: IP address, user agent, request timestamps and error traces used to keep the Service reliable and secure.
- Analytics & product insight: with your consent, pseudonymised data from Google Analytics 4 and Microsoft Clarity (see §6).
4. Legal bases (GDPR art. 6)
- Contract — to provide the app you installed.
- Legal obligation — invoicing, VAT, accounting.
- Legitimate interest — securing the Service and preventing abuse.
- Consent — non-essential cookies and analytics.
5. Subprocessors
We use the following providers to run the Service. Each acts as a processor or independent controller and has their own privacy terms.
| Provider | Purpose | Region |
|---|---|---|
| Shopify Inc. | App hosting on Shopify, OAuth, billing | Canada / EU |
| Automattic / WordPress.org | Plugin distribution | USA |
| Cloudflare, Inc. | CDN, DNS, edge hosting | Global |
| Supabase (Lovable Cloud) | Database, auth, storage backend | EU |
| Google LLC — Analytics 4 | Website analytics (with consent) | USA / EU |
| Microsoft Corporation — Clarity | Heatmaps & session replay (with consent) | USA / EU |
| Google LLC — Fonts | Web font delivery | USA / EU |
| GitHub, Inc. | Open-source plugin releases | USA |
Where a provider is based outside the EEA, transfers rely on the EU-US Data Privacy Framework and/or Standard Contractual Clauses.
6. Cookies & analytics
We set strictly necessary cookies to operate the site. With your consent we also load:
- Google Analytics 4 (measurement ID G-DJN0V28ZY4) — aggregated traffic, IP-anonymised.
- Microsoft Clarity — heatmaps and session recordings; sensitive input fields are masked by default.
- Google Tag Manager / gtag.js — loader for GA4.
- Google Fonts — served from fonts.googleapis.com.
You can change or withdraw consent at any time: .
7. Retention
- Merchant account data: for the life of the installation, then deleted within 30 days of uninstall.
- Invoices & VAT records: 5 years, as required by Polish tax law.
- Operational logs: up to 90 days.
- Analytics data: per GA4 default retention (14 months).
8. Your rights
Under GDPR you have the right to access, rectify, erase, restrict, port, and object to processing of your personal data, and to withdraw consent at any time. To exercise any of these rights, email damian@euailabel.app. You may also lodge a complaint with the Polish supervisory authority (UODO, uodo.gov.pl).
9. Security
Data is transmitted over TLS. Access to production systems is restricted and logged. We do not sell your data and do not share it with advertisers.
10. Changes
We will post material changes to this policy on this page and update the "Last updated" date above.