Privacy Policy

Last updated: 11 September 2026

Controller

The controller of personal data collected through this website is:

• FILIPP PETROVSKI, a sole trader registered in Poland (jednoosobowa działalność gospodarcza, CEIDG)
• NIP: 7812046303
• REGON: 524248272
• Registered address: ul. Elizy Orzeszkowej 8, 43-400 Cieszyn, Poland
• Country: Poland
• Privacy contact: privacy@prooflyqa.com

Information We Collect

We collect only what the site actually produces:

• Contact form information — the name, work email address, company, stack description and message you type into the "Get a test run" form.
• Technical data — IP address, browser and device information, referring page and approximate location derived from the IP, recorded by our hosting and security providers in their server logs.
• Website activity — pages viewed and how you move through the site.
• Cookie and advertising identifiers, and analytics data — only if you allow the Analytics or Marketing categories. See the Cookie Policy.

We do not ask for special-category data, and we ask you not to send it in the form. Please do not put credentials, customer data or confidential material into the message field — a test run is scoped separately, under NDA.

Why We Use Data

• To respond to your enquiry and scope a test run.
• To provide the service you asked for.
• To keep the site secure and prevent abuse and spam.
• To measure how the website is used, so we can improve it.
• To measure our advertising, and for remarketing where applicable.
• To meet legal and compliance obligations.

Legal Bases (EEA, UK and Switzerland)

• Your enquiry — taking steps at your request before entering into a contract (Art. 6(1)(b) GDPR), and/or our legitimate interest in responding to business enquiries (Art. 6(1)(f) GDPR).
• Security, abuse prevention and server logs — our legitimate interest in operating a secure website (Art. 6(1)(f) GDPR).
• Analytics and Marketing cookies and similar technologies — your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via Cookie Settings.
• Legal obligations — compliance with applicable law (Art. 6(1)(c) GDPR).

Service Providers and Recipients

We do not sell personal data. We share it only with providers that process it on our behalf:

We may also disclose data where we are legally required to, or to establish or defend legal claims.

International Transfers

Some of the providers above are established in, or process data in, the United States and other countries outside the European Economic Area. Where personal data is transferred outside the EEA, it is protected by the transfer mechanism offered by the relevant provider — typically the European Commission's Standard Contractual Clauses, and, where the provider is certified, the EU–U.S. Data Privacy Framework. You may ask us which mechanism applies to a specific provider, and we will tell you.

Retention

• Contact form submissions and related correspondence: 24 months from our last contact with you, unless we agree otherwise or you ask us to delete them sooner
• Server, security and hosting logs: kept by our hosting and security providers under their own settings — currently around 30 days. We do not operate our own logging
• Your cookie choice: stored in your browser until you clear it or we materially change the stack and ask again.
• Analytics and advertising data: for the retention period configured with the relevant provider.

Your Rights in the EEA, UK and Switzerland

Where the GDPR or equivalent law applies to you, you have the right to request access to your personal data, correction, deletion, restriction of processing, and portability; to object to processing based on legitimate interests; and to withdraw consent at any time without affecting processing carried out before the withdrawal.

To exercise a right, write to privacy@prooflyqa.com. You also have the right to lodge a complaint with a supervisory authority. Our lead supervisory authority is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), ul. Stawki 2, 00-193 Warsaw, Poland — or the authority in your country of residence.

U.S. State Privacy Rights

Several U.S. states have comprehensive privacy laws. Whether a particular law applies to Proofly, and which rights you have, depends on your state and on the applicability thresholds in that law. Where such a law applies to us and to you, you may have the right to confirm whether we process your personal information and to access it, to obtain a copy, to correct inaccuracies, to request deletion, and to opt out of targeted advertising, the "sale" of personal information, or "sharing" for cross-context behavioural advertising.

We do not sell personal information for monetary consideration. Certain disclosures to advertising providers may be considered "sharing," "targeted advertising," or similar processing under some U.S. state privacy laws.

You can exercise the advertising opt-out yourself at any time by turning the Marketing category off under Your Privacy Choices. We also honour the Global Privacy Control browser signal: when your browser sends it, the Marketing category stays off while that signal is enabled. For the other rights, write to privacy@prooflyqa.com. We will not discriminate against you for exercising a right.

Children

Proofly is a B2B service and is not directed to children. We do not knowingly collect personal data from children.

Automated Decision-Making

We do not use your personal data for automated decision-making that produces legal or similarly significant effects.

Updates

We may update this policy as the service and our tooling change. The date at the top shows when it was last changed; material changes to the cookies we use will also re-open the consent banner.

Last updated: 11 September 2026.