Privacy Policy

1. Introduction

“AI and Automation” (the “Company,” “we,” “our,” or “us”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains what information we collect when you visit jakubai.com (the “Site”), why we collect it, how we use it, and the choices you have.

2. Data Controller

• Controller: Jakub Mika, sole proprietor operating as AI and Automation
• Registered address: ul. Bocheńska 16, 32-800, Poręba Spytkowska, Poland
• Contact e-mail: privacy@jakubai.com
• VAT / NIP: 8692018321

3. What data we collect and how

When you fill in a contact or quote form

• Name
• Business e-mail
• Company name
• Phone number (optional)
• Project details you provide

When you sign up for the newsletter

• Name
• E-mail address

When you leave a blog comment

• Comment text
• Name (as entered)
• E-mail address
• Website URL (optional)
• IP address and browser user-agent (captured automatically for spam protection)

When you upload media

• Images or other files you choose to upload

When you browse the Site (analytics cookies)

• Truncated/anonymised IP address
• Device and browser information
• Pages visited, time spent, and referring site

When the Site sends transactional e-mails (e.g., password reset)

• E-mail address
• IP address

We do not knowingly collect data from anyone under 16 years old.

4. Why we process your data (legal bases under Art. 6 GDPR)

1. Contract performance – answering enquiries, providing quotes, delivering services, issuing invoices, and supporting customers.
2. Legitimate interests – protecting the Site from spam or abuse, keeping security logs, improving content, and marketing similar B2B services to existing clients (we always balance our interests against your rights).
3. Consent – sending the newsletter, setting non-essential cookies, and delivering marketing e-mails. You can withdraw consent at any time.
4. Legal obligation – complying with EU and Polish tax, accounting, and security laws.

5. Who we share your data with

We never sell your data. We only disclose it to service providers who act on our instructions:

• Our hosting provider– website and e-mail hosting on EU servers under a data-processing agreement.
• Website analytics provider – site-usage statistics with IP-anonymisation.
• Gravatar (Automattic) – displays avatar images on comments (United States; we use EU-approved Standard Contractual Clauses).
• Spam-detection tool – blocks spam comments and bots (United States; SCCs).
• E-mail delivery service (e.g., SendGrid or MailerLite) – sends transactional and newsletter e-mails (EU or United States; SCCs).
• Payment processor – processes payments under PCI-DSS standards.

If any provider stores data outside the EEA, we rely on Standard Contractual Clauses plus additional safeguards such as encryption. A current list of sub-processors is available on request.

6. International transfers

Whenever personal data leaves the EEA (for example, to a US-based tool), we use:

• The European Commission’s Standard Contractual Clauses (SCCs), and
• Extra technical and organisational measures like encryption in transit and at rest.

7. Cookies and similar technologies

We use three categories of cookies:

1. Essential cookies – keep the site running (e.g., wp-login session cookies). You can’t opt out, but they never store personal data beyond what is strictly necessary.
2. Preference cookies – remember your comment details and screen-option choices. These last up to one year.
3. Analytics and marketing cookies – help us understand traffic or run retargeting campaigns. These only load after you click “Accept” on the cookie banner. You can refuse or customise them at any time.

8. Comments

When you leave a comment, WordPress stores the data you enter plus your IP and browser user-agent to fight spam. An anonymised hash of your e-mail may be sent to Gravatar to display your avatar. Once approved, your comment and avatar become public.

9. Media uploads

If you upload images, avoid including embedded GPS location (EXIF) data, because visitors could download and extract it.

10. Embedded content

Articles may embed content from other websites (videos, tweets, code pens, etc.). That content behaves as if you visited the third-party site—it may collect data, use cookies, and track your interaction. Check their privacy policies to learn more.

11. Analytics and marketing automation

We sometimes combine first-party analytics with our own automations (for example, Airtable dashboards or Make / n8n workflows) to understand lead quality and trigger follow-up e-mails. These automations only act on data collected lawfully (see §4) and never make decisions that produce legal or similarly significant effects on you.

12. How long we keep data

• Comments and their metadata: kept indefinitely so we can recognise follow-up comments automatically.
• User-account data (if you register): kept while the account exists plus six months.
• Contact-form and quote enquiries: kept for 24 months after our last interaction.
• Newsletter subscription data: kept until you unsubscribe.
• Invoices and tax records: kept for five years, as required by law.
• Server logs: kept for 30 days for security monitoring.

We routinely review and securely delete data that is no longer needed.

13. Your rights (EU / EEA)

You may:

1. Access the personal data we hold about you.
2. Correct inaccurate or incomplete data.
3. Erase certain data (“right to be forgotten”).
4. Restrict or object to processing.
5. Port data to another provider.
6. Withdraw consent at any time (this won’t affect prior processing).
7. Lodge a complaint with your data-protection authority (in Poland: UODO, ul. Stawki 2, 00-193 Warszawa).

14. Exercising your rights

Send your request to [privacy@jakubai.com]. We may ask for proof of identity. We’ll reply within one month as required by GDPR.

14a. Data Requests and Consent Records
You can exercise your data rights at any time by emailing privacy@jakubai.com with your request. We securely keep records of all user consents (such as cookie preferences and newsletter sign-ups) and can provide proof of your consent if needed.

15. Security measures

We use HTTPS, strong passwords and access controls, encrypted backups, and routine security scans. Still, no online system is 100 % secure—please be prudent with the information you share.

16. Changes to this policy

We may update this policy to reflect legal, technical, or business changes. Major updates will be announced here and, if appropriate, by e-mail.

17. Contact us

Questions about this policy? E-mail privacy@jakubai.com or write to Jakub Mika – AI and Automation, ul. Bocheńska 16, 32-800 Poręba Spytkowska, Poland.

Last updated: 23 October 2025