Unlimited Ai Images← Back to Home

WEBSITE PRIVACY POLICY: UNLIMITED AI IMAGES

I. General Information

To ensure the highest standards in providing our services, we have prepared this Privacy Policy to explain the principles governing how we process your data.

Your data is processed in accordance with applicable law, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (“GDPR”).

  1. The controller of your personal data is GOTOIT sp. z o.o., ul. Słoneczna 9A, 55-080 Smolec, KRS: 0001010915, NIP: 8961620558, REGON: 524066068.
  2. We process data in accordance with applicable law, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (“GDPR”);
  3. Please note that providing personal data, including consenting to its processing, is generally entirely voluntary, but is necessary for us to fulfill the purpose for which you provide it. Any personal data you submit will be processed only to the extent necessary and for the purpose for which it was provided.
  4. You have the right to update your personal data at any time.
  5. We ensure appropriate protection of your personal data and guarantee that it will be processed only for the purpose for which it was provided, stored securely, and not disclosed to unauthorized third parties.
  6. When you contact us or place an order, you provide us with your personal data, and we guarantee that your data will remain secure.
  7. Like almost every other website, we use cookies. You can find detailed information about cookies below.

II. The Data Controller

The controller of your personal data is GOTOIT sp. z o.o., ul. Słoneczna 9A, 55-080 Smolec, KRS: 0001010915, NIP: 8961620558, REGON: 524066068.

You can contact the controller by mail at the address above or by email at: ai@gotoit.pl

You can also contact the controller using the form on the website: https://gotoit.pl/#contact

III. Purposes and Legal Bases for Processing Your Personal Data

  1. We process your personal data for the following purposes and on the legal bases listed below:
    1. to take steps toward entering into, enter into, and perform a contract for access to the Unlimited Ai Images application, under Article 6(1)(b) of the GDPR;
    2. to enter into and perform a contract for the provision of electronic services, under Article 6(1)(b) of the GDPR;
    3. to handle financial and tax accounting (e.g., issuing a sales receipt), which is a legal obligation of the controller, under Article 6(1)(c) of the GDPR;
    4. to review any customer complaint, which is a legal obligation of the controller, under Article 6(1)(c) of the GDPR;
    5. to assert or defend against potential claims, based on the controller's legitimate interests, under Article 6(1)(f) of the GDPR.
    6. If you have agreed to have your review published on our website, we process your personal data for this purpose based on your voluntary consent under Article 6(1)(a) of the GDPR; you may withdraw your consent at any time by contacting us using the contact details provided above;
    7. to conduct direct marketing based on a legitimate interest under Article 6(1)(f) of the GDPR.

IV. Sharing Your Personal Data

If you include data in your description (prompt) or uploaded images that can uniquely identify an individual, that data will be processed by the artificial intelligence (AI) tools used to generate the images. In that case, the data will be shared with the companies that provide us with the AI tools used to create and edit images.

Your data may be processed by third parties we engage to perform specific tasks necessary for the proper operation of our business. The companies we engage to process personal data guarantee that they will implement appropriate safeguards and security measures for personal data as required by law. The companies we entrust with data processing include:

  1. Companies that provide our IT support;
  2. A company that handles bookkeeping and accounting;
  3. Companies responsible for marketing;
  4. Companies that handle legal matters
  5. Other companies we work with to ensure that we provide the highest quality services.

Currently, your activity on our website and your browser settings may allow the following providers integrated into our website to access your data:

  • Google Tag Manager
  • Google Ads
  • Google Fonts
  • Meta Platforms Ireland Limited – Meta Pixel and Conversions API for measuring advertising effectiveness and attributing conversions;
  • Tiktok
  • Bunny CDN
  • Stripe – processing payments and payment confirmations;
  • CookieFirst
  • TrustMate – collecting and publishing customer reviews;
  • Lovable and Supabase – application hosting, database services, file storage, account management, and sending messages containing access links;
  • Runware – generating and editing images and processing prompts using AI models;
  • Make – automating the processing of paid orders and transferring data to issue proof of purchase;
  • Fakturownia, operated by VOSC sp. z o.o. – issuing and sending sales receipts and invoices;

Sharing your personal data may involve transferring it to third countries, particularly if an individual can be identified based on the data included in your description or uploaded images. Any such transfer is based on an adequacy decision by the European Commission (EC) finding that the country concerned provides personal data protection comparable to that under the GDPR. For transfers to the United States, this may be based on an EC decision finding an adequate level of protection for personal data in the United States and establishing the Data Privacy Framework (DPF), or, in other cases, on standard contractual clauses.

V. Account and User Content

To manage your account and provide the service, we process your email address, login credentials, prompts, uploaded photos, generated images, and order history. We process this data to perform our contract with you and provide the service under Article 6(1)(b) of the GDPR.

We retain your account data and user content for as long as you have an account. When you delete your account, we delete this data, except for billing records, which we retain for as long as required by applicable tax laws. The application does not automatically delete prompts, uploaded photos, or generated images after a set period. You can delete your files and images using the available features or contact us to request deletion.

VI. Your Rights Regarding the Processing of Your Personal Data:

Applicable law grants you a number of rights regarding the processing of your personal data:

1. Right of Access to Personal Data

You have the right to access the personal data we hold about you as the data controller. You can exercise this right by contacting us using the contact information provided.

2. Updating, Correcting, or Deleting Personal Data

You can request changes to the personal data we process about you, including updates, corrections, or deletion, by contacting us using the contact information provided.

You can exercise your right to deletion when your data is no longer needed for the purposes for which we collected it or when you withdraw your consent to data processing.

3. Withdrawal of Consent

When personal data is processed based on your consent, you may withdraw that consent at any time. Whenever we request your consent, we inform you of this right and make withdrawing consent as easy as giving it. To withdraw your consent, please contact us using the contact information provided.

4. Right to Restrict or Object to the Processing of Personal Data

You have the right to request a restriction on the processing of your personal data or to object to its processing at any time on grounds relating to your particular situation, unless the processing is required by law.

5. You may object to the processing of your personal data if:

  • the personal data is processed based on a legitimate interest or for statistical purposes, and your particular situation justifies the objection;
  • the personal data is processed for direct marketing purposes, including profiling for those purposes.

6. You have the right to request a restriction on processing if:

  • you dispute the accuracy of the personal data—for a period that allows us to verify its accuracy;
  • the processing is unlawful and you oppose the deletion of the personal data and request a restriction on its use instead;
  • we no longer need the personal data for the purposes of processing, but you need it to establish, exercise, or defend legal claims;
  • you have objected to processing under Article 21(1) of the GDPR, pending verification of whether our legitimate grounds override your grounds for objection.

7. Right to Data Portability

You have the right to transfer data concerning you, including the right to have us transmit that data to another data controller, if:

  • the processing is based on consent under Article 6(1)(a) or Article 9(2)(a) of the GDPR; or
  • the processing is based on a contract under Article 6(1)(b) of the GDPR; and
  • the processing is carried out by automated means.

When exercising your right to data portability, you may request that we transmit the personal data directly to another data controller where technically feasible.

The right to data portability must not adversely affect the rights and freedoms of others. If you would like to exercise these rights, please contact us using the contact information provided.

VII. Your Right to File a Complaint with a Supervisory Authority

If you believe that we are unlawfully processing your personal data, you have the right to file a complaint with the President of the Polish Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO) or another competent authority in your country, including the Federal Trade Commission or your state attorney general in the United States.

VIII. How Long We Process Your Personal Data

The length of time we process personal data depends on the legal basis for processing. Please note that:

  1. if we process personal data based on your consent (Article 6(1)(a) of the GDPR), we will continue processing until you withdraw your consent; withdrawing your consent does not affect the lawfulness of the processing of your personal data before that withdrawal;
  2. in other cases, we process personal data for the duration of the services and, after the services end, for the applicable limitation period for claims and the accounting record retention period (6 years from the end of the calendar year in which the services were provided);
  3. if your personal data is processed for direct marketing purposes, we will process it until you object to the processing of your personal data for that purpose.

IX. Requirement to Provide Personal Data

Providing personal data is entirely voluntary, but it is necessary to enter into and perform the agreement for access to the Unlimited Ai Images application. If you do not provide personal data, we cannot enter into an agreement with you.

X. Profiling of Your Personal Data, Including Automated Decision-Making

We do not make decisions about you based solely on automated processing that produce legal effects or similarly significantly affect you within the meaning of Article 22 of the GDPR. The advertising tools described in the section on cookies may create profiles for advertising purposes only with your consent.

XI. Social Media and Links to Other Creators

Our website contains links to social media platforms where information about us and our activities is published.

Both we, as the holder of the social media account, and the owner of the social media platform are controllers of the personal data you provide through your individual account on that platform.

XII. Reviews

We give you the opportunity to share your opinion about us and the services we provide. With your consent, we will publish your review on our website along with your personal information.

We use TrustMate to collect reviews. For detailed information about how this application works and how it uses your data, please visit: https://trustmate.io/review-collection

XIII. Server Logs

When you use our website, your device sends requests to the server that hosts the website. The logs include your IP address, the server date and time, and information about the web browser and operating system you use. The logs are stored and retained on the server. Server logs are used solely to support website administration. Their contents are not disclosed to anyone.

The data stored in server logs is not linked to specific individuals who use the website and is not used to identify specific individuals.

XIV. Cookies

Cookies are data files stored on your device. We use two main types of cookies on our website: session cookies and persistent cookies. Session cookies are temporary files stored on your device until you log out, leave the website, or close your web browser. Persistent cookies are stored on your device for the period specified in the cookie settings or until you delete them.

You can change your web browser settings to block cookies from being handled automatically or to notify you whenever a cookie is placed on your device. Detailed information about the options and methods for managing cookies is available in your web browser settings. Please note that disabling or restricting cookies may make it difficult to use websites.

Strictly necessary cookies are used without consent where permitted by applicable law because they are required for the service and forms to function properly. Analytics and marketing cookies are used only with your consent, in accordance with applicable privacy and data protection laws.

We use our own cookies to:

  • ensure that the website functions properly,
  • ensure that forms function properly.

We also use third-party cookies:

  • Google Analytics – to compile and analyze statistics to optimize the website,
  • Google Adwords – to advertise our website,
  • Meta Pixel and Conversions API – to measure advertising effectiveness, analyze conversions, and advertise our website on Meta services. For these purposes, we may send Meta browser IDs, your IP address, device and page information, purchase event data, and your email address converted using an irreversible SHA-256 hash function. Conversions API credentials remain exclusively on the server side,

Managing Cookies

There are several ways to manage your cookie preferences and to give or withdraw consent, where applicable:

  • Users can manage their cookie preferences directly in their device settings, for example, by preventing cookies from being used or stored.
  • In addition, whenever cookies are used based on consent, users can give or withdraw that consent by setting their preferences in the cookie notice or updating those preferences through the consent preferences widget, if available.
  • Users can also delete previously stored cookies through the relevant browser or device settings, including cookies used to store their initial consent.

Other cookies stored in the browser's local storage can be removed by clearing the browsing history.

For all third-party cookies, users can manage their preferences and withdraw their consent through the relevant opt-out link, if available, using the methods specified in the third party's privacy policy, or by contacting the third party directly.

Consequences of Declining Cookie Consent:

Users are free to decide whether to give consent. However, cookies help the service / website provide users with a better experience and enhanced functionality for the purposes described in this document. If a user does not consent, the operator may therefore be unable to provide the corresponding features.

XV. Changes to the Privacy Policy

We reserve the right to amend this Privacy Policy. Changes will be made when required by applicable law or when the technology used to operate the website changes. The current version of this Privacy Policy will always be available on the website.

XVI. Translation of the Privacy Policy

If you are a consumer who habitually resides outside the Republic of Poland, you may ask the data controller to provide a translation of this Privacy Policy into the official language of the European Union member state where you habitually reside.