Privacy Policy

Last updated: 2026-07-24

This policy explains how we handle personal data under the GDPR (Regulation (EU) 2016/679).

1. Controller

The controller of your personal data is The Clarity Mateusz Rzetecki, a sole proprietorship registered in the Polish Central Registration and Information on Business (CEIDG). Contact: contact@neobase.co.

2. What we collect

  • Email address - when you sign in (passwordless magic link) or request a report. This is the only identifying data we ask you for.
  • Technical data - standard server logs (IP address, user agent, timestamps) generated when you visit, used for security and reliability.
  • Cookies and analytics - an essential session cookie keeps you signed in. With your consent, we also use Google Analytics 4, which sets cookies and collects aggregated usage data (such as pages viewed and approximate location) to help us improve the Service.

We do not collect special-category data, and the brand/review data on the Service concerns companies, not you.

3. Purposes and legal bases

  • Providing the Service and your account - Art. 6(1)(b) (performance of a contract).
  • Security, abuse-prevention and reliability of the Service - Art. 6(1)(f) (legitimate interest).
  • Sending a report you requested and related follow-up - Art. 6(1)(b)/(a) (contract / consent, which you can withdraw at any time).

4. Recipients / processors

We use vetted processors that act on our instructions:

  • Cloud hosting and infrastructure providers - hosting, content delivery and database storage of the Service, within the EU/EEA or under appropriate safeguards.
  • Resend - sending transactional email (sign-in links, requested reports).
  • Google (Google Analytics 4) - website usage analytics, loaded only with your consent.
  • Cybot A/S (Cookiebot) - cookie-consent management.

Third-party services that provide public brand data (e.g. Apify, DataForSEO) and our AI provider process information about brands, not your personal data.

5. Transfers outside the EEA

Some processors are located in the United States. Such transfers rely on appropriate safeguards under the GDPR (e.g. Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework).

6. Retention

We keep account data for as long as your account exists and delete it on closure. Report-request data is kept only as long as needed to fulfil the request and for a reasonable follow-up period. Server logs are kept for a limited period for security.

7. Your rights

You have the right to access, rectification, erasure, restriction, objection and data portability, and to withdraw consent at any time. To exercise them, contact contact@neobase.co. You also have the right to lodge a complaint with a supervisory authority - in Poland, the President of the Personal Data Protection Office (PUODO), ul. Stawki 2, 00-193 Warszawa.

8. Cookies

A strictly necessary session cookie keeps you signed in and is always active. We also use Google Analytics 4 to understand how the Service is used; its analytics cookies are set only after you consent. Consent for non-essential cookies is collected and managed through Cookiebot, and you can change or withdraw it at any time in the cookie settings.

9. Changes

We may update this policy; the "last updated" date shows the current version. Material changes will be communicated to registered users.

10. Contact

Questions about this policy: contact@neobase.co.