alibi.bot Privacy Policy
1. Controller
The controller of your personal data is Dawid Telepski, a sole trader doing business as Black Fat Cat Dawid Telepski, ul. Starogardzka 105/6, 83-010 Straszyn, Poland, tax ID (NIP) 9570839891 (the βControllerβ). Data protection contact: dawid@telepski.pl.
2. Data we process
| Data | Source |
|---|---|
| Phone number (SMS-verified) | provided at login / number change |
| Order data: scenario, voice, schedule, personalization (your name used in the conversation, caller name, optional scenario detail, optional contact name), status, price | provided when configuring a Call |
| Payment metadata: method, status, transaction identifiers (we never process card numbers β payment providers handle them) | payment provider |
| Technical data: IP address, request timestamps, error logs, app version | collected automatically while using the App |
| Settings (language, theme) | stored locally on your device β never sent to us |
We do not collect your phone contacts. The caller vCard is generated in the App and saved only by you, wherever you choose.
3. Purposes and legal bases (GDPR)
| Purpose | Legal basis |
|---|---|
| Providing the Service: account, OTP verification, order handling, placing the Call to your number | Art. 6(1)(b) β contract |
| Tax and accounting obligations | Art. 6(1)(c) β legal obligation |
| Security: logs, abuse prevention (rate limiting), defending claims | Art. 6(1)(f) β legitimate interest |
No profiling, no automated decisions with legal effects, and no selling of data.
4. Recipients
- Hosting/infrastructure: Google Cloud (Google Cloud EMEA Limited / Google LLC) β application servers;
- Payment providers: Google (Google Play Billing) for in-app purchases; possibly others if more methods are added β acting as independent controllers for payment processing;
- SMS gateway (verification codes): LINK Mobility Poland sp. z o.o. (the SMSAPI service), Gliwice, Poland;
- Telephony provider (placing Calls): Twilio Inc., San Francisco, USA (EU entity: Twilio Ireland Limited, Dublin).
Some providers (Google Cloud, Twilio) process data outside the European Economic Area, including in the United States. Such transfers rely on Standard Contractual Clauses (SCC) and these providers' participation in the EU-US Data Privacy Framework. LINK Mobility Poland processes data within the EEA.
5. Retention
- account data β until you delete your account in the App;
- order and billing data β as required by tax law (generally 5 years from the end of the tax year);
- technical logs β up to 90 days;
- OTP codes β minutes (until expiry), stored only as cryptographic hashes.
Deleting your account (Profile β Delete account) immediately removes the account, order history and session tokens from the production system; billing data may be retained where and for as long as required by law.
6. Your rights
You have the right of access, rectification, erasure, restriction, portability, and objection to processing based on legitimate interest. Requests: dawid@telepski.pl. You may also lodge a complaint with your supervisory authority (in Poland: PUODO, uodo.gov.pl).
7. Cookies and tracking
The App contains no third-party tracking or advertising tools. This website is static and sets no cookies.
8. Changes
Material changes will be announced in the App. The current version is always available at alibi.bot/legal.