Privacy Policy
1. Controller
The controller of personal data is Mateusz Ryś, a natural person running the RipWorth service as an unregistered business activity under Polish law, correspondence address: Tymbark 131, 34-650 Tymbark, Poland (“we”). For anything related to personal data, write to contact@ripworth.com.
2. What data, for what purpose and on what legal basis
- Trial sign-up form – e-mail address, name of the shop or channel, selected plan, whether you are a business or a private individual and, for businesses, the tax ID (Polish NIP, or VAT ID or company registration number), name and address (at your request, we retrieve the name and address from the public Register of VAT Taxpayers (Wykaz podatników VAT) kept by the Polish Ministry of Finance), the date you accepted the Terms and any marketing consent. Purpose: confirming the e-mail address and concluding the agreement (Art. 6(1)(b) GDPR), preventing repeated use of the trial period (Art. 6(1)(f) GDPR). Unconfirmed sign-ups are deleted automatically after 48 hours.
- Agreement-related e-mails – the key and instructions, tips during the trial period, reminders about the end of the trial period and about payment, payment confirmations. These are part of the service (Art. 6(1)(b) GDPR). We send news and updates only with your consent (Art. 6(1)(a) GDPR) – you can withdraw it at any time by replying to the message.
- Payments – from the bank statement: date, amount, payer name and transfer description. Purpose: matching the payment to the license (Art. 6(1)(b) GDPR) and keeping the sales register (Art. 6(1)(c) GDPR). We remember the payer name so that subsequent payments are matched automatically.
- E-mail correspondence – your e-mail address, first and last name, shop name and the content of the message. Purpose: answering your question and preparing an offer. Legal basis: our legitimate interest in answering messages (Art. 6(1)(f) GDPR) or steps taken prior to entering into a contract (Art. 6(1)(b) GDPR). Kept for up to 12 months after the conversation ends, unless we conclude an agreement.
- Customers – contact details, shop name, contact person, billing details for a receipt (if you ask for one), License Key, payment history. Purpose: performing the agreement (Art. 6(1)(b) GDPR), issuing receipts and keeping the sales register required for an unregistered business activity (Art. 6(1)(c) GDPR), establishing and pursuing claims (Art. 6(1)(f) GDPR). Kept for the duration of the agreement; the sales register and receipts for 5 years from the end of the tax year.
- Subscription check – the App on the Customer’s computer connects to our server and sends only the License Key and a random installation ID (it contains no personal data and no information about the computer); as with any connection, your IP address also reaches us. We store the date of the last check and the installation IDs. Purpose: checking whether the Subscription is paid, the computer limit and preventing repeated trial periods on the same computer (Art. 6(1)(b) and (f) GDPR).
- Server logs – when you visit ripworth.com and demo.ripworth.com, the server records your IP address, date, page address and browser type. Purpose: security and abuse prevention, including request limits in the Demo (Art. 6(1)(f) GDPR). Logs are deleted automatically after 14 days.
3. Card photos
In the Demo, a photo or video frame is sent to our server solely to recognize the card and is not stored – it is deleted from memory once the answer is returned. We only keep anonymous recognition statistics (which card the Demo suggested, with what confidence and whether another card was chosen from the list) – without photos or IP addresses – for 90 days, to improve recognition. Do not upload photos showing people or documents. The App under a Subscription recognizes cards on the Customer’s computer – photos never reach us. If the Customer enables the optional AI recognition with their own key in their App, photos are sent directly to the provider of their choice, under that provider’s terms.
4. Recipients of data
Data may be disclosed only to entities that help us provide the service, under data processing agreements: our server and domain provider (cyber_Folks S.A., based in Poznań, Poland), our e-mail delivery provider (Sendinblue SAS – Brevo, Paris, France), our mailbox provider, an accounting office and, once online payments are launched, a payment operator. Payments pass through the bank holding our account (Revolut Bank UAB, Lithuania), which processes the transfer data as an independent controller. We do not sell data and do not transfer it outside the European Economic Area.
5. Cookies and browser storage
The ripworth.com website and the Demo use no cookies or analytics tools and load no scripts, fonts or images from external services – all files, including card images from the database, are served by our server. Your IP address is therefore not shared with third parties. The Demo and the App store in your browser’s storage (localStorage and sessionStorage) only the data needed for them to work: settings (games, currency, grading costs), the card list of the current buying session and, in the App, also stream data (break name and cost, remote code, stream key). This data stays on your device, does not reach us and is not used for tracking.
6. Your rights
You have the right to access your data, to have it rectified or erased, to have its processing restricted and to data portability, as well as the right to object to processing based on our legitimate interest. Write to contact@ripworth.com – we will reply within one month. You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl).
7. Do you have to provide data?
Providing data is voluntary. Without an e-mail address we cannot reply to your message, and without contact details we cannot conclude an agreement. We do not make decisions about you based solely on automated processing and do not profile you.
8. Changes
We will announce changes to this policy on this page and will also notify Customers by e-mail.