Privacy notice
This notice covers this website and the business prospecting described below. If you become a client, the personal data in your bills and supplier records is covered by your client agreement and data processing agreement, not by this notice.
Who we are
Apsyde is a service of NOSZCZYK AI sp. z o.o., a company registered in Poland, ul. Stefana Pogonowskiego 26, 01-564 Warszawa. We are the controller of the personal data described here. Contact us about privacy at hello@apsyde.com.
What we collect
- Server logs. When you load a page, our hosting provider records technical data such as your IP address, the date and time, the page requested, and your browser type. We use this only to run and secure the site.
- Fonts. The site loads its typefaces from Google Fonts. To deliver them, Google receives your IP address and browser details when you load a page.
- Demo requests. If you use the "Book a demo" form, we receive your name, email address and company. The form sends them to our mailbox as an email; the website itself does not store them. We use them only to reply to your request.
- Bookings. After you send a demo request, the form shows our Calendly booking page, with your name and email already filled in. If you book a call, Calendly receives what you enter there and the time you choose, and sends us the booking. The booking window loads only at that point and sets Calendly's own cookies; see Calendly's privacy notice.
- Emails you send us. If you email us, we receive your name, email address, and whatever you choose to write. We use this to reply to you and, if you ask, to prepare a walkthrough or a quote.
That is all. Apart from the demo request form and the Calendly booking window, the site has no forms, no accounts, no cookies, no analytics and no advertising trackers. If we add any of these later, we will update this notice first and ask for consent where the law requires it.
Why we may use it (legal bases)
- Server logs and fonts: our legitimate interest in keeping the site working, secure and readable (GDPR Article 6(1)(f)).
- Demo requests, bookings and your emails: taking steps you ask for before a possible contract (Article 6(1)(b)), or our legitimate interest in answering business enquiries (Article 6(1)(f)).
We do not sell your personal data, share it for targeted advertising, or use it for automated decisions about you.
Who receives it
Only the service providers we need to run the site and our email. For each one, this is where it processes data and how any transfer outside the European Economic Area is protected:
- Hosting and the demo request form: Cloudflare Pages and Cloudflare email delivery (Cloudflare, Inc.). Country: United States. Transfer mechanism: EU-US Data Privacy Framework and Standard Contractual Clauses, in Cloudflare's data processing addendum.
- Fonts: Google Fonts (Google LLC). Country: United States. Transfer mechanism: EU-US Data Privacy Framework.
- Scheduling: Calendly (Calendly, LLC). Country: United States. Transfer mechanism: Standard Contractual Clauses in Calendly's data processing addendum.
- Email: Google Workspace (Google Ireland Limited). Country: Ireland, with transfers to the United States under the EU-US Data Privacy Framework and Standard Contractual Clauses.
You can also ask us for a copy of any safeguard at hello@apsyde.com. We may also disclose data if the law requires it.
How long we keep it
- Server logs: 30 days, then deleted by the hosting provider.
- Bookings: kept in Calendly and our calendar until the call has taken place and any follow-up is done; if no business relationship follows, we delete them within 12 months.
- Demo requests and emails: as long as needed to answer you and follow up; if no business relationship follows, we delete them within 12 months, unless we must keep them longer by law.
Your rights
You can ask us for access to your personal data, to correct or delete it, to restrict or object to its use, and to receive it in a portable format. Email hello@apsyde.com; we answer within one month. You can also complain to the Polish data protection authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, uodo.gov.pl), or to the authority where you live or work in the EU.
Visitors from the United States
This site is aimed at businesses. We collect only the data described above, we do not sell or share personal information as those terms are used in U.S. state privacy laws, and we do not use it for targeted advertising. Whatever state you are in, you can ask us what we hold about you or ask us to delete it, using the email above. This site is not directed to children under 13, and we do not knowingly collect their data.
People we contact about our service (prospecting)
This section covers people whose business contact details we collect so we can contact them about Apsyde.
Who is responsible. NOSZCZYK AI sp. z o.o., trading as Apsyde, ul. Stefana Pogonowskiego 26, 01-564 Warszawa, Poland (KRS 0001212823, NIP 5253072446), is the controller. Privacy contact: hello@apsyde.com.
Why we contact you. Apsyde runs a supplier-bills desk for US trade contractors. We contact people in buyer roles (owners, finance, controllers, accounts payable, office managers) at independent HVAC/mechanical, electrical and plumbing contractors to ask whether a short overview of the service would be useful. We research one firm at a time and contact one person per firm at a time.
What we hold. Your name, job title, employer and its business location, work email, LinkedIn profile URL, where and when we found these details, business facts suggesting our service may be relevant to your firm (for example an active job post or permit), the email check result, and our contact history with you, including any reply or opt-out. We do not collect personal email addresses, home addresses or sensitive data.
Where it comes from. Your firm's own website; public business records such as state licence and company registers and OSHA records; public search results that show professional profiles; and, only where these give no business email, a one-off lookup for your firm through a data provider. We never buy or rent contact lists. You can ask us which source applied to you.
How we check and contact you. We check that a work email address can receive mail using verification services; no message is sent to you to do this. We contact each person on one channel only: LinkedIn, by hand, or email, with one email and at most one follow-up. We stop as soon as you reply.
Legal basis. Our legitimate interest in offering a relevant service to businesses (GDPR Article 6(1)(f)). We have assessed this interest against your rights and limited what we do accordingly.
Who receives it. Only service providers acting on our instructions: Google Workspace (email), Woodpecker (email sending and address checks), Reoon (address checks), and Serper and Icypeas (per-firm search and business-email lookup). If we message you on LinkedIn, LinkedIn handles that message under its own terms. We do not sell your data or share it for advertising.
Transfers outside the EEA. You are in the US and some of our providers are US-based, so your data is transferred outside the European Economic Area. For these transfers we rely on EU Standard Contractual Clauses or the EU-US Data Privacy Framework where the provider is certified. You can ask us for a copy of the safeguard.
How long we keep it.
- If we have not contacted you within 30 days of collecting your details, we delete them.
- Otherwise, we delete your details, research and source records 90 days after our contact with you ends.
- If you object, we stop at once, delete your file and keep only a minimal "do not contact" record (your work email, firm and the date), kept separately, so we never contact you again. We review these records every year.
- Records we need to show we followed the law or to handle a complaint (what we sent and when, and your opt-out) are kept only as long as that purpose needs, and reviewed every year.
Your rights. You can ask for access to your data, and ask us to correct it, delete it or restrict its use. You can object to direct marketing at any time; this right is absolute and takes effect immediately. One reply saying "no thanks", one LinkedIn message, or one email to hello@apsyde.com is enough. You can also object to other use based on our legitimate interests. We answer within one month. You can complain to the Polish supervisory authority: Prezes Urzędu Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl.
No automated decisions. A person reviews every firm, message and send. We make no automated decisions about you.
Changes
If we change this notice, we will post the new version here with a new date.