Privacy Policy

Effective from September 24, 2026. This document describes what data is processed in MysteryChat, why, and what rights the user has.

1. Administrator and contact

The personal data administrator is the Trading and Service Company „Creative” Iwona Sykut, 41-902 Bytom, Krakowska Street 32/4, VAT ID: 7491437861.
For privacy matters, write to [email protected].

2. What data we process

  • account and login data, such as email address, account identifier, and data provided by the selected login provider;

  • conversation content, histories, created characters, images, reports, and account settings;

  • technical data: IP address, browser or device information, security logs, and cookies or similar technologies;

  • in case of payment activation: purchase information, transaction ID, and payment status. The operator should not receive full payment card data.

3. Purposes and legal bases of processing

  • creating and managing the account and providing service functions — performance of the contract;

  • handling conversations, saving progress, moderation, and technical support — performance of the contract and the Operator’s legitimate interest;

  • security, abuse prevention, and claims enforcement — the Operator’s legitimate interest;

  • handling complaints and fulfilling legal obligations — legal obligation and performance of the contract;

  • marketing requiring consent, including optional newsletter or non-essential cookies — consent, if implemented.

4. Data recipients

Data may be processed by hosting providers, mail services, technical infrastructure, analytics, login providers, and — after payment activation — payment operators. These entities process data based on appropriate agreements or their own policies when acting as independent controllers. The current list of key providers: [to be completed after implementation].

5. Transfer outside the EEA

If a technical provider or AI model processes data outside the European Economic Area, the transfer is based on a legally provided mechanism, in particular a decision confirming an adequate level of protection or standard contractual clauses. Details can be obtained by writing to the contact address.

6. Retention period

Account data is stored for the duration of account activity and then for the time needed to delete it, handle claims, and fulfill legal obligations. Public content may be deleted or anonymized after account deletion, unless further storage is necessary. Transaction data is stored for the period required by accounting and tax regulations after payment activation.

7. Your rights

The user has the right to request access to data, correction, deletion, restriction of processing, data portability, objection to processing based on legitimate interest, and withdrawal of consent at any time. Complaints can also be filed with the President of the Personal Data Protection Office. Requests should be sent to [email protected].

8. Is providing data mandatory

Providing data necessary to create an account is voluntary but required to use functions that require an account. Without it, these functions cannot be provided.

9. Automated decision-making

AI content is generated automatically, but MysteryChat does not make decisions affecting legal consequences or similarly significant effects solely based on automated processing regarding the user.

10. Cookies

The service uses essential cookies for operation, login, and security. If analytical or marketing cookies are implemented, they will be activated according to required consent and described in the cookie banner. Cookie settings can be changed in the browser and — when available — in the consent panel.

11. Policy changes

The policy may be updated due to legal, technical, or organizational changes. The current version will always be available at mysterychat.pl/polityka-prywatnosci/.

MysteryChat | mysterychat.pl | version dated September 24, 2026