Data security

Approved for the pilot, 12 Oct 2026. Application controls and planned safeguards are separate; this is not an independent audit.

Implemented

Connected-account credentials are encrypted and excluded from responses.
Requests check current membership, roles and workspace boundaries.
Selected activity, acceptance and policy changes are recorded; completed deletion receipts are separate from requests.
Market observations have a 13-calendar-month window and deletion receipts; own workspace deletion allows two weeks for export or withdrawal.
The offline archive includes available owned materials, excluding market data and credentials.
Backup and restore tools cover the database, evidence and publishing media; restored access requires explicit regrant.
Market wording supplies patterns and evidence; generator input and output controls reject copying.

Move from Oracle Cloud pilot hosting to Hetzner Falkenstein and verify file and backup locations.
Activate Brevo mail after credentials and agreement verification.
Activate Vertex AI after terms and location admission; zero retention needs separate evidence.
Verify disk and connection encryption, backup operation and a restore exercise in the service environment.
Legal review, transfer-basis confirmation and an independent security assessment.

Customer data are not currently processed exclusively in the EU. The state of each area follows.

unconfirmed Hosting: Oracle Cloud: Oracle Cloud Infrastructure, Stockholm (eu-stockholm-1), EU Workspace policy; backups are expected in the same Stockholm region (eu-stockholm-1), with location and lifetime still to be confirmed. Hetzner: Falkenstein, Germany (fsn1), EU; planned configuration, not deployment evidence. Workspace policy; backup expiry follows the deletion plan.
no processing Transactional email: The service is disabled; no customer data flows there. Brevo: France, EU according to recorded provider documentation. Message and log retention must be verified in account settings.
no processing Other models: Other model services are disabled; no customer data flows there. OpenAI drafts are described separately below.
outside the EU OpenAI copy drafts: OpenAI copy drafts in the US only for shops that opted in and only while the service is enabled. We send product facts, owner notes and the brief, never photos. No training on these data.
unconfirmed Sign-in email: Clerk: United States; identity storage is not described as EU-only. Verified account settings and terms; complete before production activation.

Support in Polish: [email protected].