agentgreg.ai privacy policy

What we collect, why, who we share it with, how long we keep it and what you can do about it.

1. Who the controller is

The controller of your personal data is Prosit Poland Sp. z o.o., registered office at ul. Ks. Jana Pojdy 14D, 44-213 Rybnik, entered in the Polish National Court Register (KRS) under number 0000543686, tax ID (NIP) 6423189108, REGON 360625787 ("we" or "the Controller").

agentgreg.ai is the website of Grzegorz Brzezinka, CEO of Prosit Poland Sp. z o.o. The newsletter, guides, calls and any work together are run on behalf of the company.

For anything about your personal data, write to [email protected] or by post to our registered office. We have not appointed a data protection officer.

We process data under Regulation (EU) 2016/679 (GDPR) and Polish law, including the Electronic Communications Law (Prawo komunikacji elektronicznej).

2. Browsing the site

agentgreg.ai is a static site. It has no contact form, no user accounts and no analytics tools. Two technical services still see your requests to the site.

Service: Hosting and CDN: Cloudflare, Inc. (USA), Cloudflare Pages.
Data: IP address, date and time of the request, the page requested, browser and operating system type. Your browser may also send Cloudflare a connection error report (Network Error Logging).
Purpose: Serving the site, protecting it against attacks and abuse, diagnosing errors.
Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in running a secure, working website.
Retention: We keep no server logs of our own. Cloudflare keeps technical data for the short period set out in its own policies, as needed for security and operation.

Service: Google Fonts: Google Ireland Ltd. and Google LLC (USA).
Data: IP address and browser details your browser sends when it downloads fonts from Google's servers.
Purpose: Consistent typography on the site.
Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in a readable, consistent website.
Retention: Under Google's policies. We have no access to this data.

On agentgreg.ai/pl/start you can sign up for a newsletter about practical AI in business and get a free PDF guide. Sign-up has two steps: you enter your email, then you click the confirmation link in the email we send. Without that click we send neither the guide nor the newsletter.

Service: MailerLite: UAB MailerLite, Vilnius, Lithuania (European Union). Sign-up form, confirmation and sending.
Data: Email address and, if you give it, your first name. Plus proof of consent: date and time of sign-up and confirmation, IP address, the form you used. MailerLite also records delivery statistics: whether an email was delivered and opened and which links you clicked.
Purpose: Sending the guide and the newsletter, proving you consented, handling unsubscribes, learning which content is useful.
Legal basis: Sending the newsletter and guide: your consent (Art. 6(1)(a) GDPR and the Polish Electronic Communications Law rules on commercial email). Keeping proof of consent and a list of unsubscribed addresses: our legitimate interest in showing we comply with the law and in respecting your decision to unsubscribe (Art. 6(1)(f) GDPR).
Retention: Until you unsubscribe or withdraw consent. If you never confirm, we delete the address after 30 days. After you unsubscribe we keep only the email address with the dates of consent and unsubscribe for 3 years, to show compliance and to make sure we don't email you again.

You can unsubscribe with one click in the footer of every email, or by writing to [email protected].

4. Links sent via Instagram

Under some Instagram posts I ask you to comment with a keyword. When you do, an automation sends you a direct message with a link to the guide or other material. The newsletter sign-up itself then happens on the website, as in section 3.

Service: ManyChat: ManyChat, Inc. (USA), Instagram messaging automation.
Data: Instagram username and account ID, public profile data, the comment with the keyword, the messages exchanged, date and time.
Purpose: Sending the link you asked for and replying to your messages.
Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in answering your request.
Retention: Up to 12 months after your last message, or sooner if you object or ask us to delete it.

Instagram is run by Meta Platforms Ireland Ltd., which processes your data as a separate controller under Instagram's privacy policy. Profile statistics that Meta provides to account owners are processed jointly with Meta under its terms for pages and profiles.

5. Booking a call

The "Book 30 min" buttons lead to the external page calendly.com/greg-prosit/30min. Our site does not embed the calendar, so you enter your details directly on Calendly.

Service: Calendly: Calendly LLC (USA). Booking and calendar invitations.
Data: Name, email address, chosen time slot, time zone and anything you write in the description field. Calendly sets its own cookies on its site.
Purpose: Arranging and holding the call, and possibly preparing an offer afterwards.
Legal basis: Steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR). If you book on behalf of a company, our legitimate interest in contacting its representative (Art. 6(1)(f) GDPR).
Retention: Up to 12 months after the call, or, if we start working together, for the duration of that work and until related claims become time-barred.

6. Email and direct messages

When you write to us by email or on LinkedIn, we process what you give us: name, address and the content of the message. We do this to reply and continue the conversation (Art. 6(1)(f) GDPR, and Art. 6(1)(b) GDPR if you ask about working together). We keep the correspondence for up to 12 months after the last message, unless we start working together.

7. AI model demo

On agentgreg.ai/pl/sprawdz you can type a short text and see which answer the basal-2.0-mini model picks. The model does not run in your browser. Your browser sends the text, the question and the list of answers to our demo server hosted on Hugging Face, and the server sends back the result. Please do not enter real customer data or other personal data there.

Service: Demo server hosting: Hugging Face, Inc. (USA), Hugging Face Spaces.
Data: The text you enter, the question and possible answers, IP address, date and time of the request, browser details. On your first click into the demo form, your browser also checks whether the server is up. That request carries no text.
Purpose: Showing the model's answer you asked for, and protecting the server against abuse (a request limit per IP address).
Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in providing the demo you start yourself with the "Sprawdź" (Check) button.
Retention: Our demo server does not store or log the text you enter. It keeps it in memory only for as long as it takes to answer, usually a few seconds. It keeps your IP address in memory for up to 2 minutes for the request limit. Hugging Face, as the hosting provider, may keep technical connection data such as IP addresses for the period set out in its own policies.

8. Who receives your data

We share data only with providers that help us run the site and our communication, and only as far as needed:

Cloudflare, Inc.: hosting and site protection,
Google: web fonts,
UAB MailerLite: newsletter and guide delivery,
ManyChat, Inc.: Instagram messages,
Calendly LLC: call booking,
Hugging Face, Inc.: hosting of the AI model demo server,
our email and calendar provider,
our legal and accounting advisers, where necessary.

Providers act under data processing agreements or their own data protection terms. We do not sell your data.

9. Transfers outside the EEA

Cloudflare, Google, ManyChat, Calendly and Hugging Face are based in the USA, so your data may be transferred outside the European Economic Area. Such transfers rely on the European Commission's adequacy decision (EU-US Data Privacy Framework) where the provider is certified, and otherwise on standard contractual clauses approved by the European Commission. You can get a copy of these safeguards by writing to [email protected].

MailerLite is based in the European Union. If it uses sub-processors outside the EEA, the same safeguards apply.

10. Your rights

You have the right to:

access your data and get a copy,
have inaccurate data corrected,
have your data erased,
restrict processing,
data portability, for data processed on the basis of consent or a contract,
object to processing based on our legitimate interest (Art. 6(1)(f) GDPR),
withdraw consent at any time.

Withdrawing consent does not affect the lawfulness of processing carried out before you withdrew it. The easiest way is the unsubscribe link in every newsletter, or an email to [email protected].

We answer requests without undue delay and within one month at the latest. We may ask for information needed to confirm the request comes from the data subject.

Complaints. If you think we process your data unlawfully, you can lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland, uodo.gov.pl, or with the supervisory authority in the EU country where you live or work.

11. Cookies

agentgreg.ai itself sets no cookies and stores nothing in your browser's storage. We use no analytics or advertising cookies, which is why there is no consent banner.

The exception is the sign-up form on /pl/start. It runs on a MailerLite script that may store technical data in your browser needed to submit the form and protect it from spam. This is strictly necessary for the service you ask for, the sign-up.

External services we link to, such as Calendly, LinkedIn, Instagram or GitHub, set their own cookies on their own sites. You can change cookie settings in your browser.

12. Other information

Providing data is voluntary. Without an email address we cannot send the guide or the newsletter, and without a name and email you cannot book a call.

Automated decisions. We make no decisions about you based solely on automated processing, including profiling, that have legal or similarly significant effects. The Instagram automation only sends the link you asked for.

External links. The site links to other services, such as arXiv, GitHub, LinkedIn or prosit.no. Their owners are responsible for their privacy practices.

Changes. When we change how we process data, we will update this page and the date at the top. We will tell newsletter subscribers about material changes by email.

How we handle your data