Komu Privacy Policy
Last updated: 2026-06-09
This Privacy Policy explains what personal data Komu collects, why and on what basis, who we entrust it to, and what rights you have under the GDPR.
1. Data controller
The controller of your data is the Operator: Alicja Filipek, a sole proprietor trading as Alicja Filipek Web Express, NIP 7393680632, REGON 389268422.
For data-protection matters contact: alicja.z.filipek@gmail.com.
2. Data we collect
- Account data: email, username, hashed password, chosen language.
- Profile data (optional): first/last name, phone number, avatar, description.
- Content: photos and descriptions of Items you publish.
- Location data: pickup coordinates you provide voluntarily.
- Usage data: messages, exchanges, points, and basic technical data (e.g. IP address, device type) needed to run and secure the Service.
3. Purposes & legal bases
- Running your account and providing the Service — Art. 6(1)(b) GDPR (contract).
- AI analysis of photos to suggest listing content — Art. 6(1)(b)/(f) GDPR.
- Security, abuse prevention and maintenance — Art. 6(1)(f) GDPR (legitimate interest).
- Handling complaints and legal obligations — Art. 6(1)(c) GDPR.
4. Processors
We entrust data to trusted providers acting on our instructions:
- Cleura (Cleura AB) — hosting and server infrastructure in the European Union.
- Mistral AI — analysis of uploaded photos to generate listing suggestions.
- Scaleway (Scaleway SAS) — delivery of system emails (e.g. account confirmation).
5. Transfers outside the EEA
We aim to process data within the EEA. Where a provider processes data outside the EEA, it is done under appropriate safeguards such as the European Commission’s Standard Contractual Clauses.
6. Retention
- Account data is kept for as long as the account exists.
- After deletion we erase or anonymise data, except where we must retain it for legal reasons or to defend claims.
- Your consent to the Terms (date and version) is kept as proof it was given.
7. Your rights
- Access to your data and a copy of it.
- Rectification, erasure or restriction of processing.
- Data portability and objection to processing based on legitimate interest.
- Lodge a complaint with a supervisory authority (in Poland: uodo.gov.pl).
- To exercise your rights, write to alicja.z.filipek@gmail.com.
8. Cookies
We use cookies and similar technologies that are necessary for login and operation, and — with your consent — for analytics. You can change cookie settings in your browser.
9. Changes to this policy
We may update this policy. We will announce material changes in the Service. The current version is always available at komu.co/privacy.
Working draft. Fill in the Operator details and the provider list, then have the text reviewed by a lawyer.
