Inez Waitlist Privacy Policy
Effective date: 15 September 2026
1. Who this policy covers
This policy explains how we process data about people visiting the Inez waitlist websites at inez.co and heyinez.pl, joining the waitlist or contacting us about it.
It covers the website and waitlist only. Joining does not provide access to the Inez assistant or give us access to your inbox, calendar, invoices or customer data. Information about processing in the future service will be provided before that service becomes available to you.
2. Controller and contact details
The controller is Sebastian Głąb, trading as SG Technologies Sebastian Głąb, registered in Poland's Central Register and Information on Economic Activity (CEIDG).
- Address: Gruszów 164, 32-414 Gruszów, Poland.
- Tax identification number (NIP): 6812091071; statistical number (REGON): 521137170.
- Email: contact@inez.co.
- Telephone: +48 572-918-013.
You can contact us about privacy or your rights by email or post using these details.
3. What we process and why
Waitlist and launch invitation
We process your email address and, if supplied, your name and business type. We use them to maintain the waitlist and send an invitation when Inez launches. Your name lets us address the invitation to you, and your business type helps us understand the context of your interest in the service.
The legal basis is your consent under Article 6(1)(a) GDPR. Signing up includes consent to receive the invitation at your email address under Article 398 of the Polish Electronic Communications Law. It does not cover a regular newsletter, unrelated offers or marketing by other organisations.
Providing data is voluntary. Without your email address, we cannot add you to the list or send an invitation. Your name and business type are optional; leaving them blank does not prevent signup.
Retention: We keep an active waitlist entry until the launch invitation is sent, you withdraw consent, or 12 months after signup, whichever happens first.
Messages and complaints
If you contact us, we process your contact details and information in the correspondence to respond and resolve the matter. The basis is our legitimate interest in handling correspondence and reported issues under Article 6(1)(f) GDPR. Where handling a complaint is a legal obligation, the basis is Article 6(1)(c) GDPR together with the applicable complaint-handling rules.
You do not need to provide information unrelated to the issue. Without contact details, we may be unable to respond.
Retention: until the matter is resolved; further retention only where required by law or necessary for specific claims, as described below.
Website operation and security
When you connect, servers receive technical information, including your IP address, request time, requested page address and information sent by your browser. We use it to deliver the website, resolve errors and protect against misuse. The basis is our legitimate interest in operating a reliable and secure website under Article 6(1)(f) GDPR.
Log deletion criteria: We delete or anonymise logs when they are no longer needed to deliver, secure and troubleshoot the website. We keep a limited record longer only where it is necessary to investigate a specific incident, prevent abuse or establish, exercise or defend a claim, and remove it when that purpose ends.
Data protection obligations and accountability
We may process records of your signup, consent or withdrawal, and rights requests to meet data protection obligations under Article 6(1)(c) GDPR. Data necessary to establish, exercise or defend specific legal claims is processed under Article 6(1)(f) GDPR.
When you withdraw consent, we stop sending invitations. Any continued retention of limited records does not authorise further marketing.
Retention of consent and request records: We keep these records for as long as needed to demonstrate compliance, handle your request or establish, exercise or defend a claim. We delete or anonymise them when those purposes end, unless a longer period is required by law. Records relating to a claim are retained until its limitation period expires or, if proceedings have begun, until they are finally resolved and resulting obligations have been fulfilled, where necessary.
4. Cookies and statistics
Remembering your language
After you choose a language, the website stores a first-party cookie called inez_locale, containing pl or en. It remembers your choice for 365 days and belongs to the domain on which you made that choice. You can delete it through your browser settings; the website may then determine your language again from the page address or your browser settings.
Umami
To understand how visitors use our website and improve it, we use Umami, an analytics tool hosted on our own server. Analytics can include visited pages, referral sources, browser and device information, language and approximate location. Technical information, including an IP address and browser information, may be processed to distinguish visits. We do not treat these statistics as necessarily anonymous merely because the tool does not use cookies.
This processing is based on our legitimate interest in understanding and improving the public waitlist websites (Article 6(1)(f) GDPR), subject to the requirements of Article 399 of the Polish Electronic Communications Law. You can object to this processing by emailing contact@inez.co.
5. Recipients and processing locations
We use OVH for website and database hosting and email. Waitlist records are kept on that infrastructure and we do not intentionally transfer them outside the EEA. Authorised people operating these systems may access data as necessary to provide the services. Public authorities may receive data where legally required.
Fonts are served from our website. Loading them does not connect your browser to Google Fonts or send Google your data.
Backups: We do not make backup copies of waitlist data.
6. Your rights
Subject to the conditions in the GDPR, you can request access to your data and a copy, correction, erasure and restriction of processing. You can also exercise data portability where we process data automatically on the basis of consent or a contract.
You can withdraw consent at any time by writing to contact@inez.co, for example “Remove me from the Inez waitlist”. Withdrawal does not affect the lawfulness of earlier processing. You do not need to give a reason or create an account.
You can object to processing based on legitimate interests for reasons relating to your particular situation. You can object to processing for direct marketing at any time without giving a reason.
We normally respond to requests within one month. Where complexity or the number of requests requires it, this can be extended by up to two further months; we will tell you and explain why within the first month. If we have reasonable doubts about your identity, we may request information necessary to verify it.
You can complain to the President of the Polish Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych); information is available at uodo.gov.pl. You may also contact a competent supervisory authority in another EU country, particularly where you habitually live or work, or where the alleged infringement occurred.
7. Automated decisions and updates
We do not use waitlist data to make decisions based solely on automated processing that produce legal or similarly significant effects, and we do not use it for profiling or send it to AI tools.
If our processing changes, we will update this policy and identify the new version's date. We will appropriately notify people on the list about material changes affecting them, including by email where necessary. Updating this policy does not itself give us your consent to new processing purposes.