Privacy Policy

Last updated: 15 June 2026

1. Who we are

Connecsi (the "Service") is operated by Oxalier Digital Sp. z o.o. ("Connecsi", "we", "us"), a company registered in Poland.

• Registered address: Opoczyńska 9/5, 02-522 Warszawa, Poland
• VAT ID: PL5213973261
• Contact: privacy@connecsi.net

For the purposes of the EU General Data Protection Regulation (GDPR), Oxalier Digital Sp. z o.o. is the data controller of personal data processed through the Service.

2. Scope

This Policy explains what personal data we collect when you use connecsi.net, app.connecsi.net, and related services, why we process it, the legal bases we rely on, who we share it with, and the rights you have. It applies to brands, creators, and visitors.

3. Information we collect

Information you provide

• Account & profile: name, email address, password (stored hashed by our authentication provider), account role (brand or creator), and any profile details you add.
• Communications: messages, proposals, and content you exchange with other users through the Service, and any correspondence you send us.
• Payment information: when paid features are enabled, billing details are processed by our payment provider; we do not store full card numbers.

Creator channel data (creators who connect a channel)

• When you connect a YouTube channel via Google OAuth, we receive and store your channel identifier, handle, and public channel statistics (e.g., subscriber count, view counts, engagement metrics), and an OAuth refresh token held in encrypted form so the connection can be maintained. You grant only read access (youtube.readonly).

Public creator data (non-members)

• To operate the discovery marketplace, we collect and store publicly available information about creators who have not registered (e.g., public YouTube channel data). If you are such a creator, you can ask us to access or remove this data — see Section 11.

Information collected automatically

• Usage and device data: log data, IP address, browser/device type, and interactions with the Service.
• Cookies and analytics: see Section 7 and our Cookie Policy.

AI feature inputs

• When you use AI-assisted drafting, the relevant conversation and campaign context is sent to our AI provider to generate a draft. See Section 6.

4. How we use your data and our legal bases

Where we rely on legitimate interests, you may object (Section 11).

5. Google / YouTube API data and Limited Use

Connecsi uses YouTube API Services and Google APIs. By connecting a channel you also agree to the YouTube Terms of Service and acknowledge the Google Privacy Policy.

Connecsi's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, data obtained from Google APIs is used only to provide and improve user-facing features of the Service, is not sold, is not used for advertising, and is not transferred to others except as necessary to provide the Service, to comply with law, or with your consent.

You can revoke Connecsi's access to your Google data at any time via your Google Account permissions, or by disconnecting your channel in the app.

6. AI features

Some features use a third-party AI provider (Anthropic) to generate draft text from the conversation and campaign context you supply. This content is processed solely to return your draft. Drafts are assistive and should be reviewed before use. We do not use this content to train third-party models.

7. Cookies and analytics

We use strictly necessary cookies to run the Service and, with your consent, Google Analytics to understand usage. Non-essential cookies are not set until you consent via our cookie banner. Full details and controls are in our Cookie Policy.

8. Who we share data with (processors)

We share data with vetted service providers who process it on our behalf under data-processing agreements:

• Supabase — database, authentication, and storage
• Resend — transactional email
• Hostinger — hosting
• Cloudflare — content delivery and security
• Google LLC — YouTube Data API and Google Analytics
• Anthropic — AI drafting
• Stripe — payment processing (when paid features are enabled)

We may also disclose data where required by law or to protect our rights and users. We do not sell personal data.

9. International transfers

Some processors are located outside the European Economic Area. Where data is transferred outside the EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision.

10. Data retention

We keep personal data only as long as necessary for the purposes above:

• Account and profile data: for the life of your account and a reasonable period afterwards. (Confirm exact period with counsel.)
• Connected-channel tokens: until you disconnect the channel or delete your account.
• Public creator data: while it remains relevant to the marketplace, subject to deletion on request.
• Billing records: as required by Polish tax and accounting law.

11. Your rights

Under the GDPR you have the right to: access your data; rectify inaccurate data; erase data ("right to be forgotten"); restrict or object to processing; data portability; and to withdraw consent at any time (without affecting prior processing).

You can delete your account yourself at any time from Settings → Danger zone → Delete account in the app. This permanently erases your profile, connected channels, and personal data, revokes our access to your Google account, and removes your favorites, alerts, notifications, AI credits, and the offers/packages/campaigns you posted. Records shared with another party (messages, proposals, agreements, campaign participation) are retained for that other party but anonymized so you are no longer identifiable.

Alternatively, to exercise any right — or to request deletion — email privacy@connecsi.net. We will respond within the timeframes required by law.

You also have the right to lodge a complaint with the Polish supervisory authority: Urząd Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warszawa, Poland.

12. Data security

We apply technical and organisational measures appropriate to the risk, including encryption in transit, hashed credentials, encryption at rest of sensitive credentials such as OAuth refresh tokens, role-based access controls, and row-level data isolation between accounts. No method of transmission or storage is completely secure, but we work to protect your data and to address any incident responsibly.

13. Children

The Service is intended for users aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a minor has provided us data, contact us and we will delete it.

14. Changes to this Policy

We may update this Policy from time to time. We will post the updated version with a new "Last updated" date and, where appropriate, notify you.

15. Contact

Questions or requests: privacy@connecsi.net — Oxalier Digital Sp. z o.o., Opoczyńska 9/5, 02-522 Warszawa, Poland.