This Privacy Policy explains how samko labs, s. r. o., a company incorporated in the European Union with registered office at Trnková 451/12, 040 14 Košice – mestská časť Košická Nová Ves, Slovak Republic and company registration number (IČO) 53 928 881 and tax identification number (DIČ) 2121532600 (“statie.sh”, “we”, “us” or “our”), collects, uses, shares and protects your personal data when you use the statie.sh website and service (the “Service”). We are the data controller for the personal data described here.
We process personal data in accordance with Regulation (EU) 2016/679 (the “GDPR”) and applicable national data-protection law. For any privacy question or request, contact us at samo@vrablik.eu.
1. Data we collect
We collect the following categories of personal data:
- Account data — your name, email address, password credentials (stored hashed), and authentication identifiers when you sign up or sign in.
- Billing data — your subscription status, plan, transaction history, and limited payment metadata. Payments are processed through Stripe using Link (Stripe Managed Payments); your full card details are collected and handled directly by Stripe and are not stored by us. To complete or manage a subscription you may be required to create a Link account with Stripe.
- Project and brand data — the product URLs, brand materials, uploaded assets, prompts, instructions, feedback and other content you submit so we can research your brand and generate ad creatives.
- Slack integration data — when you connect Slack, the workspace and channel identifiers, access tokens, and the messages, reactions and metadata needed to post creatives and respond to your reactions. We request only the scopes required to operate the Service.
- Generated content — the ad ideas and images produced for you, together with related metadata (formats, concepts, delivery logs and status).
- Usage and technical data — log data, device and browser information, IP address, timestamps, and diagnostic information generated when you use the Service.
- Communications — the content of messages you send us for support or other enquiries.
2. How and why we use your data
We process personal data for the following purposes and on the following legal bases under Article 6 of the GDPR:
- To provide the Service — creating and managing your account, researching your brand, generating and delivering creatives, and operating the Slack integration. Legal basis: performance of a contract.
- To handle billing — processing subscriptions, trials, renewals and payments. Legal basis: performance of a contract and compliance with legal obligations.
- To secure and improve the Service — monitoring, preventing abuse, enforcing our Fair Usage Policy, debugging, and developing new features. Legal basis: our legitimate interests in running a safe, reliable and improving service.
- To communicate with you — sending service, security and transactional messages, and responding to your enquiries. Legal basis: performance of a contract and legitimate interests.
- To send marketing — where permitted, sending product updates and offers. Legal basis: consent or legitimate interests; you can opt out at any time.
- To comply with law — meeting accounting, tax and other legal obligations, and responding to lawful requests. Legal basis: compliance with legal obligations.
3. Generative AI processing
To generate ad creatives, we send your project and brand data (such as your product URLs, brand context, prompts and selected assets) to third-party generative AI providers that process it on our behalf to produce the requested outputs. We share only the data needed for generation. Our providers act as our processors under contract and are not permitted to use your Customer Content to train their own models except as strictly necessary to provide the service to us, subject to their own terms. Because AI generation is automated, you remain responsible for reviewing outputs before use, as described in our Terms of Service.
4. Who we share data with
We do not sell your personal data. We share it only with the following categories of recipients, who act as our processors or as independent controllers where required:
- Generative AI providers — to research your brand and generate creatives.
- Slack — to deliver creatives and process reactions within your connected workspace.
- Stripe (payments) — we use Stripe and Link (Stripe Managed Payments) to process payments and subscriptions and to help detect and prevent fraud. For these transactions Stripe acts as merchant of record. Stripe collects and processes your payment and personal data as an independent controller under its own privacy policy, and data shared with Stripe may be further shared by Stripe with its own service providers and affiliates. See Stripe’s Privacy Policy and Link’s Privacy Policy.
- Hosting and infrastructure providers — to run the Service, store data, and send transactional email.
- Professional advisers and authorities — where necessary to comply with law, enforce our terms, or protect our rights, users, or the public.
- Successors — in connection with a merger, acquisition, or sale of assets, subject to this Policy.
5. International transfers
Some of our providers are located outside the European Economic Area. Where we transfer personal data internationally, we rely on an appropriate safeguard under the GDPR, such as an adequacy decision or the European Commission’s Standard Contractual Clauses, together with additional measures where needed. You can request more information about these safeguards using the contact details below.
6. How long we keep data
We retain personal data for as long as your account is active and as needed to provide the Service. After you close your account or your subscription ends, we retain data only as long as necessary for the purposes described here — for example, to comply with legal, accounting and tax obligations, to resolve disputes, and to enforce our agreements — after which we delete or anonymise it. Backup copies may persist for a limited period before being overwritten.
7. Your rights
Subject to applicable law, you have the right to: access your personal data; rectify inaccurate data; erase data (“right to be forgotten”); restrict or object to processing; data portability; and withdraw consent at any time where processing is based on consent, without affecting prior processing. Where we rely on legitimate interests, you may object on grounds relating to your particular situation.
To exercise any right, email samo@vrablik.eu. We will respond within the time required by law. You also have the right to lodge a complaint with a data-protection supervisory authority, in particular in the EU member state of your residence, place of work, or the place of the alleged infringement.
8. Cookies and similar technologies
We use strictly necessary cookies and similar technologies to keep you signed in, secure the Service, and remember your preferences. Where required, we use analytics or other non-essential technologies only with your consent, which you can manage or withdraw. You can also control cookies through your browser settings, though disabling essential cookies may prevent the Service from working.
9. Security
We implement appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, and hashed credentials. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.
10. Children
The Service is intended for businesses and is not directed to children. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, please contact us and we will delete it.
11. Changes to this Policy
We may update this Privacy Policy from time to time. If we make material changes we will take reasonable steps to notify you, for example by email or through the Service. The effective date at the top of this page shows when it was last updated.
12. Contact
For any question or request about this Privacy Policy or your personal data, contact us at samo@vrablik.eu, or by post to samko labs, s. r. o., Trnková 451/12, 040 14 Košice – mestská časť Košická Nová Ves, Slovak Republic.