top of page
logo-s2a-w-tb_edited.png

Speak2Apps Privacy Policy

Last updated: 24 October 2026

This policy describes how personal data is processed when using the Speak2Apps website and application.

1. Data controller and contact

The data controller is:

  • Controller: KRZYSZTOF PARADYSZ

  • Address: ul. Zygmunta Glogera 55/48, 31-222 Kraków, Polska

  • Tax identification number: 6842454012

  • Business register details: 385663127

  • Privacy contact: speak2apps@gmail.com

2. Scope of this policy

This policy covers:

  • the marketing website at www.speak2apps.com, hosted on Wix;

  • the application at app.speak2apps.com;

  • integrations initiated by users, particularly integrations with Google services;

  • communications with AI service providers used to process user instructions.

Different parts of the service may use different technologies and cookies. Consent settings on the Wix website do not necessarily cover cookies or technologies used by the application or third-party domains.

3. Personal data we may process

Depending on how you use the service, we may process:

  • account details, such as your email address, user identifier, and basic profile information made available during sign-in;

  • organisation/tenant identifier and selected organisational context;

  • user instructions, action plans generated by the application, operation parameters, approvals, results, and error information;

  • content and metadata of files, documents, or other materials that you select or make available to the application for a task;

  • data needed to perform actions requested by you, such as email recipients and message content or calendar event details;

  • technical and diagnostic data, such as operation identifiers, execution times, statuses, and error information;

  • usage data about the marketing website, where you have provided the required consent for analytics.

Instructions and materials may contain personal data, including information about other people. You should provide only information necessary for the task and ensure you are entitled to share it.

4. Purposes and legal bases

Depending on the circumstances, we process data to:

  • create and operate your account and provide the service, where necessary to perform a contract or take steps before entering into a contract;

  • interpret and carry out your instructions, including planning and performing actions in connected services;

  • maintain security, prevent abuse, diagnose errors, and operate the service;

  • respond to enquiries and communicate with users;

  • comply with legal obligations;

  • analyse use of the marketing website through Google Analytics, after obtaining the required consent;

  • establish, exercise, or defend legal claims where appropriate.

The applicable legal basis may be contract performance, compliance with a legal obligation, legitimate interests, or consent, depending on the purpose and type of data. Consent to cookies or analytics is distinct from the legal basis for processing data necessary to provide the application.

5. Google integrations

Speak2Apps may allow users to use selected Google services. The scope depends on the integrations enabled and the permissions granted by the user. Integrations may include:

  • sign-in and basic profile information through openid, email, and profile;

  • sending messages using the gmail.send permission;

  • selecting or handling files made available to the application within the drive.file scope;

  • creating or modifying calendar events within the calendar.events scope.

The application should use Google data only as necessary for user-initiated features, subject to the permissions granted and applicable Google API policies. The drive.file permission does not mean general access to all files in a user's Google Drive.

When using Google Picker or other Google service components, the browser may communicate with Google domains and handle cookies belonging to Google. Their functions and any consent requirements depend on the specific integration and configuration. The consent banner on the Wix website may not cover these technologies in the application.

6. Processing by AI providers

To interpret an instruction or perform a task, Speak2Apps may send data necessary for that task to an AI model provider, in particular OpenAI. Depending on the instruction, this may include:

  • the user's instruction;

  • context or parameters needed to plan an operation;

  • excerpts or content of documents the user asks the application to analyse;

  • message content or other data needed to perform a specific operation.

You should not assume that only short instructions are sent to an AI provider; the data shared depends on the feature used. Before publication, the actual data flows should be verified against the code and configuration.

Processing by an AI provider is also subject to that provider's terms, privacy documentation, and terms applicable to the product/API used. Retention and data-use settings should be verified against the provider's current agreement and account configuration.

7. Recipients of data

Where necessary to provide the service, data may be shared with:

  • Google, for sign-in and integrations initiated by the user;

  • OpenAI or another AI provider used by the application;

  • Microsoft Azure and other infrastructure, hosting, security, monitoring, or error-reporting providers, where used;

  • the website platform provider, including Wix;

  • competent authorities where disclosure is required by law.

Before publication, verify that this list matches the actual suppliers, data-processing agreements, and service configuration.

8. Transfers outside the European Economic Area

Some providers may process data outside the European Economic Area. Where such a transfer takes place, it should rely on a GDPR transfer mechanism, such as an adequacy decision or appropriate contractual safeguards, depending on the provider and transfer. Verify processing locations and transfer mechanisms with all providers before publication.

9. Retention

Under the current Speak2Apps retention policy:

  • instruction and operation history is retained for 90 days from creation;

  • standard technical logs are retained for 30 days;

  • after the retention period, history containing content or parameters that may include personal data is deleted or appropriately restricted under the implemented procedure;

  • earlier deletion may be available through application features and subject to the permissions of the user or organisation administrator;

  • backups may follow separate deletion cycles according to infrastructure configuration.

Technical logs should be limited to information needed for security, operation, and diagnostics, without unnecessarily copying full instructions, document contents, message bodies, OAuth tokens, or secrets. Data should not be described as anonymous if it can still be linked to a particular user or organisation.

10. Security

We use technical and organisational measures appropriate to the nature of the service to protect data against unauthorised access, loss, alteration, or disclosure. No security measure can guarantee absolute security.

11. Data subject rights

Subject to the GDPR, individuals may have the right to access, rectify, or erase their data, restrict processing, receive data in a portable format, object to processing, and withdraw consent where processing is based on consent. Individuals may also lodge a complaint with the competent supervisory authority; in Poland, this is the President of the Personal Data Protection Office (UODO).

For privacy enquiries, contact speak2apps@gmail.com.

12. Children's privacy

Speak2Apps is not intended for children and is not knowingly directed at individuals who cannot independently use the service under applicable law.

13. Cookies and similar technologies

Marketing website

The website at www.speak2apps.com is hosted on Wix. It may use cookies and similar technologies needed for website operation, session management, security, and storing privacy preferences.

The website uses Google Analytics to analyse traffic. Analytics cookies, including Google Analytics cookies, are activated according to the Usercentrics for Wix consent configuration. During tests in an incognito session, only selected technical cookies were observed before consent; after consent was withdrawn, cookies such as _ga and Wix cookies associated with analytics were removed. The behaviour of the consent mechanism may depend on configuration and changes to third-party services.

Depending on the current website configuration, security cookies may also be used, for example to help protect against automated traffic.

Application

The application at app.speak2apps.com uses technical cookies related to authentication, protection against attacks, handling the selected organisational context (tenant), and operation of the application infrastructure. These may include ASP.NET Core Identity cookies, anti-CSRF cookies, a cookie storing the selected tenant identifier, and Azure infrastructure cookies.

Google services

When using Google Picker and other Google integrations, the browser may handle cookies belonging to Google domains, such as google.com or docs.google.com. These cookies belong to a third-party provider; their presence and functions depend on the particular service and configuration. The consent mechanism configured on the Wix website does not necessarily cover integrations used within the application.

Managing consent

Users can manage consent to optional cookies on the marketing website through the banner or consent settings provided by Usercentrics for Wix. Where the website uses analytics or advertising cookies that require consent, they should be activated according to the user's choice. Available settings and their scope may depend on the current service configuration.

14. Changes to this policy

This policy may be updated when features, integrations, providers, or applicable laws change. The current version will be published on the Speak2Apps website with the date of the latest update.

bottom of page