Privacy Policy

1. Introduction

AERIX Labs ("we", "us", or "our") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you visit our website aerix.pl.

2. Data Controller

The controller of your personal data is Jakub Potoczny, conducting business as Usługi Informatyczne "nex-IT" Jakub Potoczny and operating under the AERIX LABS brand:

• Usługi Informatyczne "nex-IT" Jakub Potoczny
• Bojowników o Wolność i Demokrację 9/5, 89-410 Więcbork, Poland
• Tax ID (NIP): 5040061950 · REGON: 382557666
• Email: hello@aerix.pl · Phone: +48 515 016 631

3. Data We Collect

We may collect the following information:

• Contact information (name, email, phone) when you fill out our contact form
• Technical data (IP address, browser type, device information) for analytics purposes
• Usage data (pages visited, time spent, interactions) to improve our services
• Cookies and similar technologies for website functionality

4. How We Use Your Data

We use your data for the following purposes:

• To respond to your inquiries and provide our services
• To improve our website and user experience
• To send marketing communications (only with your consent)
• To comply with legal obligations

5. Legal Basis (GDPR)

We process your personal data based on:

• Your consent (e.g., for marketing communications)
• Contract performance (e.g., to provide requested services)
• Legitimate interests (e.g., website analytics, security)
• Legal obligations (e.g., tax and accounting requirements)

6. Data Sharing and Transfers Outside the EEA

We do not sell your personal data. We may share data with:

• Vercel, Inc. (USA) – website hosting and cookieless visit analytics
• Groq, Inc. (USA), via the Vercel AI Gateway – processing of the project brief in the AERIX Project Architect (see section 7)
• Google Ireland Ltd. – PageSpeed Insights, used by the website audit tool (see section 8)
• Our email service provider, for handling correspondence
• Legal authorities when required by law

Transfers to providers established in the United States are based on Standard Contractual Clauses approved by the European Commission (Art. 46(2)(c) GDPR) and on data processing agreements concluded with them.

7. AERIX Project Architect (AI)

The Project Architect prepares a preliminary Project Blueprint from the brief you fill in. In accordance with Art. 50 of Regulation (EU) 2024/1689 (AI Act), we inform you that the summary is generated by an artificial intelligence system:

• Model – llama-3.3-70b, provided by Groq, Inc. (USA) through the Vercel AI Gateway
• What is sent to the model – only the project description: company, industry, current website, goals, scope, budget range and timeline
• What is never sent to the model – your name, email address and phone number. These are used solely to contact you
• No model training – under the agreement with the provider, the content is not used to train or fine-tune AI models
• Human oversight – the blueprint is not a binding quote and produces no legal effects. Every project is reviewed by our team before we contact you
• Availability – if the AI is unavailable, the blueprint is generated from deterministic rules and clearly marked as such

AI-generated content may contain errors. The blueprint is marked in the interface as "Enhanced by AI" and carries a machine-readable marking in the server response.

8. Website Audit

The website audit tool analyses the address you provide. The audit does not use artificial intelligence — it is based on analysis of the page's HTML and on Google PageSpeed Insights data. The address you enter is sent to Google in order to obtain performance measurements. Please only audit websites you are entitled to analyse.

9. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy, or as required by law. Contact form and project brief data is retained for up to 3 years after your last interaction with us. An unsent brief is stored only in your browser's local storage and is removed when you send it or clear the form.

10. Your Rights

Under GDPR, you have the following rights:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time

11. Right to Lodge a Complaint

If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the supervisory authority: President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland — uodo.gov.pl

12. Cookies and Local Storage

We use no marketing, advertising or tracking cookies, and no third-party analytics scripts. What we store on your device:

• Visit analytics (Vercel Analytics) – stores nothing on your device, sets no cookies and does not allow you to be identified or tracked across websites
• Project Architect – an unsent brief is kept in your browser's local storage so you do not lose your answers. It never leaves your browser until you send the form, and you can remove it at any time with the "Clear brief" button

Both are strictly necessary to provide a service you have explicitly requested, so storing them does not require consent under Directive 2002/58/EC. You can manage these settings in your browser.

13. Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

14. Contact

For any questions about this privacy policy or to exercise your rights, contact us at: hello@aerix.pl or call +48 515 016 631