01Data Controller
The controller of your personal data is Denys Hritsanov Scopio (Scopio Automation), ul. Biskupia 6/4, 50-148 Wrocław, Poland. NIP: 8971961798. Contact: growmebusiness.pl@gmail.com.
02Data We Collect
We collect company registration details (name, NIP/VAT ID, address), contact information (email, phone, name of representative), product catalog data, order and transaction records, and API integration logs.
03How We Use Your Data
Your data is used to provide B2B platform services, process orders, issue invoices, perform Stripe KYC verification, synchronize TikTok Shop listings, and provide AI-assisted catalog management. Data is not used for unsolicited marketing without consent.
04Legal Basis (GDPR)
Processing is based on: (a) contractual necessity for service delivery (Art. 6(1)(b)), (b) legal obligation for invoicing and tax compliance (Art. 6(1)(c)), and (c) legitimate interest for platform security and fraud prevention (Art. 6(1)(f)).
05Data Sharing
We share data only where necessary: Stripe (payment processing, KYC), Supabase (database hosting, EU region), Vercel (hosting), TikTok Shop API (product sync, order management), InPost and DPD (shipping label generation). All partners are GDPR-compliant.
06Data Retention
Transaction and invoice data is retained for 5 years as required by Polish tax law. Account data is retained for the duration of the service agreement plus 1 year. API logs are retained for 90 days. You may request deletion at any time subject to legal retention obligations.
07Your Rights
Under GDPR you have the right to: access your data (Art. 15), correct inaccurate data (Art. 16), request erasure (Art. 17), restrict processing (Art. 18), data portability (Art. 20), and object to processing (Art. 21). Submit requests to: growmebusiness.pl@gmail.com.
08Cookies
We use essential session cookies for authentication (JWT) and preference cookies for language selection. No third-party advertising or tracking cookies are used. You can control cookies via your browser settings.
09Complaints
If you believe your data rights have been violated, you have the right to lodge a complaint with the Polish supervisory authority: UODO (Urząd Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, www.uodo.gov.pl.
10Shopify App — Data Processing
When you install the Scopio AI app from the Shopify App Store, we access the following data from your store: shop domain, product titles, descriptions and images (to generate videos), and order analytics (to identify bestsellers). We store your Shopify access token securely in encrypted form to maintain the connection. Product images are processed by our AI pipeline and not shared with third parties. If you connect social media accounts (Instagram, TikTok, YouTube, Pinterest, Facebook, X), we store OAuth access tokens solely to publish generated videos on your behalf. You may revoke access at any time by uninstalling the app or disconnecting social accounts in the app settings. Upon uninstallation, all tokens and generated video data are deleted within 30 days.
Your Rights
- Art. 15 — Access
- Art. 16 — Rectification
- Art. 17 — Erasure
- Art. 20 — Portability
- Art. 21 — Objection
Contact
Data protection inquiries:
growmebusiness.pl@gmail.com
Legal Basis
- GDPR Art. 6(1)(b) — Contract
- GDPR Art. 6(1)(c) — Legal obligation
- GDPR Art. 6(1)(f) — Legitimate interest
- UODO — Polish DPA