Privacy & Cookies

1. Who is responsible for your data

The controller of your personal data is the seller below. For privacy questions and requests write to rodo@twojstartup.pl or biuro@landingw48h.pl.

2. What we collect

• Account: your email address, the name you choose to add, when you signed up and signed in.
• Sign-in and security: one-time codes (stored only in scrambled form), IP address, browser type and security logs.
• Purchases: order number, amount, currency, country, payment status and refunds. Stripe handles your card details, we never see them.
• Use of the Service: lesson progress, Marketplace downloads with their license IDs, community posts.
• Consent records: if you unlock the Marketplace early, the consent text, time, order, IP address and browser.
• Where you came from (only with your consent): campaign tags from the link you clicked (for example utm_source) and the referring website.
• Messages: what you send us by email or in direct messages on Instagram or TikTok.

3. Why, and on what legal basis

• To create your account, deliver the free lessons and what you bought, and handle refunds and complaints: performing our contract with you (GDPR art. 6(1)(b)).
• To keep invoices and tax and accounting records: legal obligation (art. 6(1)(c)).
• To keep the Service secure, prevent fraud and leaks of paid materials, and to establish or defend legal claims: our legitimate interest (art. 6(1)(f)).
• To send you emails about the program you signed up for (for example that the full program opens): our legitimate interest. Marketing emails about other products only with your consent or where the law allows it. You can unsubscribe in every such email.
• Campaign attribution cookies: your consent (art. 6(1)(a)), which you can withdraw at any time.

We don't sell your data and we don't make automated decisions about you that have legal or similarly significant effects.

4. Who helps us run the Service

These providers process data for us under data processing agreements:

• Supabase (database and sign-in), servers in Frankfurt, Germany.
• Vercel (website hosting and delivery).
• Resend (sending emails such as your sign-in codes), sending from Ireland.

Stripe processes your payment as an independent controller under its own privacy policy. Where you message us on Instagram or TikTok, Meta and TikTok process that under their own policies. We may also share data with authorities when the law requires it, and with our lawyers or accountants.

Some providers are based in the United States. Where data leaves the European Economic Area, it is protected by the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

5. How long we keep data

• Account data: until you delete your account.
• Purchase, invoice and refund records: for as long as tax and accounting law requires (in Poland generally 5 years from the end of the tax year).
• Consent records and download logs: for as long as claims related to the purchase can be brought.
• Attribution cookies: 30 days.

6. Your rights

You can ask us for access to your data, correction, deletion, restriction of processing and a copy in a machine-readable format. You can object to processing based on our legitimate interest and withdraw consent at any time (this doesn't affect processing before withdrawal). You can also complain to a data protection authority. In Poland that is the President of the Personal Data Protection Office (UODO); you can also contact the authority in your own country. You can delete a free account yourself in Settings.

7. Cookies

• Essential (always on): keep you signed in and secure (Supabase sign-in cookies) and remember your cookie choice (cookie_consent, 12 months). The Service doesn't work without them.
• Attribution (only if you click "Accept"): first_touch, 30 days. It remembers which campaign brought you, so we know which videos work.

We don't use advertising trackers on this site. You can change your choice by clearing cookies for kubabuildsai.com in your browser; the banner will ask again.

8. Age

The Service is for adults (18+). We don't knowingly collect data from children.

9. Changes

If we change this policy in a way that matters, we'll update the date at the top and tell account holders by email.