Privacy Policy

Data Controller

The data controller is Sebastian Flejszman, trading as Web Technologies Sebastian Flejszman, ul. kard. Stefana Wyszynskiego 8/95, 99-300 Kutno, Poland, NIP 7752511215, REGON 101841388, registered in the Polish Central Registration and Information on Business (CEIDG).

Data enquiries: info@webtechnologies.pl

Introduction

This Privacy Policy explains how MyMiniScore ("we", "our", or "us") collects, uses, processes, and protects your personal data when you use our miniature painting analysis service. We are committed to protecting your privacy and ensuring transparency in our data processing practices.

Legal Basis for Processing

We process your personal data based on the following legal grounds under GDPR:

• Your consent for photo analysis and optional marketing communications (Art. 6(1)(a) GDPR)
• Performance of our service contract with you (Art. 6(1)(b) GDPR)
• Our legitimate interests in improving our services and ensuring security (Art. 6(1)(f) GDPR)
• Compliance with legal obligations (Art. 6(1)(c) GDPR)

What Personal Data We Collect

We collect and process the following categories of personal data:

• Uploaded miniature photos and associated metadata
• AI analysis results and scores
• Account information (when you create an account)
• Technical data including IP address, browser information, device identifiers
• Website usage analytics and interaction data
• Communication records when you contact us

How We Use Your Personal Data

We use your personal data for the following purposes:

• Providing our AI-powered miniature analysis service
• Improving our AI models and analysis accuracy
• Enabling result sharing through public links (with your consent)
• Providing customer support and responding to inquiries
• Ensuring service security and preventing abuse
• Complying with legal obligations and protecting our rights

Data Sharing and Disclosure

We may share your personal data with the following parties:

• Language model providers - uploaded photos and the model description are sent to them to produce the score; processing also takes place outside the European Economic Area
• Infrastructure providers - database, authentication and storage of uploaded files; the application runs on a server we manage
• Email providers - transactional email and newsletter delivery
• An application error monitoring provider - covering IP address and account identifier
• A provider of abuse protection on forms
• Microsoft Clarity - usage statistics and session replay, only after you consent to analytics cookies
• Meta - advertising pixel, only after you consent to marketing cookies
• Law enforcement or regulatory authorities when required by law
• In case of merger, acquisition, or business transfer

We do not name individual providers here because the list changes over time. We will give you the full, current list of processors on request - just write to info@webtechnologies.pl.

We do not sell your personal data to third parties.

Automated scoring

Your score is produced automatically, without human involvement. The photo and the description you provide are sent to an external language model provider, which returns a score across ten areas plus written feedback. Four things worth knowing:

• The score is informational. It has no legal effect on you and does not affect your access to the service
• If you believe a score is wrong, you can tell us and ask for a human review
• The photo leaves our service and goes to the model provider, including outside the European Economic Area
• Please keep people and anything else you would rather not share out of frame - photograph the model only

Public profile, work and commissions

The service has a community side that works only if you switch it on. Everything is private by default.

• Your painter profile is off by default. Once enabled, your name, handle, bio, social links and selected work become publicly available at their own address and may be indexed by search engines
• Work marked as public is visible to everyone at its own address, together with a preview card generated for sharing on social media
• If you open yourself to commissions, your profile appears in the painter directory along with your scope of work and turnaround time
• Messages between users are stored so they can be delivered, and read receipts are visible. You can block or report the other person
• Turning the profile off or making a piece of work private removes public access; cached copies held by search engines may persist for a while

Data Storage and Security

Your data is securely stored on servers provided by Supabase, located in the United States.

We use encrypted connections, database-level access control and least-privilege access. No safeguard is absolute, so we advise against uploading photos containing anything whose disclosure would harm you.

We keep account data for as long as your account exists. Deleting your account from settings removes your data and uploaded photos immediately, with no grace period; we keep longer only what the law requires us to, such as accounting records. Analytics data and technical logs are kept for up to 14 months, and newsletter data until you withdraw consent.

International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). We ensure adequate protection through appropriate safeguards such as Standard Contractual Clauses.

Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience:

• Essential cookies for website functionality
• Analytics cookies (Microsoft Clarity) for understanding user behavior
• Marketing cookies (Meta Pixel) to measure advertising performance
• Preference cookies to remember your settings

You can manage cookie preferences through your browser settings or our cookie banner.

Your Rights Under GDPR

As a data subject, you have the following rights:

• Right to access your personal data
• Right to rectify inaccurate personal data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

To exercise these rights, contact us at info@webtechnologies.pl

Protection of Minors

Our service is not intended for children under 16. We do not knowingly collect personal data from children under 16 without parental consent.

Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of significant changes through our website or by email.

Contact Information

For privacy-related questions or to exercise your rights, please contact us:

Email: info@webtechnologies.pl

Supervisory Authority

You have the right to lodge a complaint with a supervisory authority. In Poland, this is the Personal Data Protection Office (UODO).

Newsletter Subscription

We offer an optional newsletter to keep you informed about service updates, painting tips, and community news.

• Subscribing to our newsletter is completely voluntary and requires your explicit consent
• We collect your name, email address, and language preference to deliver the newsletter
• We send the newsletter at most once per week
• You can unsubscribe at any time by clicking the "Unsubscribe" link in any email
• We never share your email address with third parties for marketing purposes
• We use external providers for email delivery and subscriber management; they process the data on our instructions and in compliance with GDPR
• We use double opt-in - after signing up you will receive a confirmation email with a link to verify your subscription
• Your data is stored for the duration of your subscription. After unsubscribing, we delete it within 30 days

Your International Rights

Depending on your location, you may have additional rights:

To exercise these rights, contact us at info@webtechnologies.pl with your location.