Privacy Policy
1. Data Controller
The data controller for ClariSpec is Analify (analify.pl). For any privacy-related inquiries, contact us at: kontakt@analify.pl
2. What Data We Collect
ClariSpec collects only the minimum data necessary to operate the Service. We do not require personal information to use the platform.
| Data Type | What We Store | Purpose | Retention |
|---|---|---|---|
| Session token | Random token string | Authentication | 24 hours |
| Analysis input | Text you submit (up to 50,000 chars) | AI processing, history | Until manually deleted |
| Analysis output | AI-generated results | History, follow-up | Until manually deleted |
| Usage log | Module name, timestamp | Analytics, rate limiting | Indefinite |
| Project data | Project name, description, context | Workspace organization | Until manually deleted |
3. What We Do NOT Collect
- No personal information — we do not collect names, email addresses, phone numbers, or physical addresses
- No tracking — we do not use Google Analytics, Facebook Pixel, or any third-party tracking scripts
- No advertising — we do not serve ads or share data with advertisers
- No profiling — we do not build behavioral profiles or user segments
4. Cookies
We use a single, essential cookie:
| Cookie | Type | Purpose | Duration |
|---|---|---|---|
clarispec_session |
Essential (HTTPOnly, SameSite=Lax) | Maintains your login session | 24 hours |
We do not use marketing, analytics, or preference cookies. No cookie consent banner is required as we only use a strictly necessary session cookie.
5. Third-Party Data Processing
Your input data is sent to third-party AI providers for processing:
AI Provider: OpenRouter / DeepSeek
- Your input text is transmitted via encrypted HTTPS connection to generate analysis results
- We do not send personal identifiers alongside your input
- AI providers process your data according to their own privacy policies
- Your data is not used for AI model training — we use API-based access where submitted data is not retained by the provider for training purposes
Hosting: OVH VPS (EU)
- The Service is hosted on a Virtual Private Server located in the European Union
- Server access is restricted to authorized personnel only
- Data at rest is stored in an SQLite database on the server
6. Data Security
We implement the following security measures:
- Encryption in transit — all connections use HTTPS with TLS certificates (automatically managed by Caddy)
- HTTPOnly cookies — session tokens cannot be accessed by client-side JavaScript
- Input sanitization — all user-generated content is sanitized with DOMPurify before rendering
- Rate limiting — usage logging prevents abuse
- Daily backups — automated database backups with 30-day retention
- No default credentials in production — authentication credentials are configured via environment variables
7. Your Rights (GDPR)
If you are located in the European Economic Area, you have the following rights under the General Data Protection Regulation:
- Right of access — request a copy of data we hold about your session
- Right to erasure — request deletion of your analysis history and project data
- Right to restriction — request that we limit processing of your data
- Right to data portability — receive your data in a structured, machine-readable format
- Right to object — object to processing of your data
To exercise any of these rights, contact us at kontakt@analify.pl. We will respond within 30 days.
8. Data Retention
- Session tokens expire after 24 hours and are automatically purged
- Analysis history is retained until you or an administrator deletes it
- Usage logs are retained indefinitely for aggregate analytics (they contain no personal data)
- Backups are retained for 30 days and then automatically deleted
9. Children's Privacy
The Service is designed for professional use and is not directed at individuals under the age of 16. We do not knowingly collect data from children.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be indicated by updating the "Last updated" date at the top of this page. Continued use of the Service after changes constitutes acceptance of the revised policy.
11. Contact
For questions, concerns, or data requests related to this Privacy Policy:
- Email: kontakt@analify.pl
- Website: analify.pl