Legal
Privacy Notice
Effective 24 October 2026
1. Controller
The controller of your personal data is JACA SOFTWARE JAKUB CZACHOR, ul. Fryderyka Szopena 35C/W164, 35-055 Rzeszów, Poland, NIP 8133861202, REGON 389022856. Write to infinite.props@proton.me about anything in this notice. We have not appointed a data protection officer.
2. What we process, why and for how long
Your account and library
Data: Email address, first and last name, password (stored only as a hash), purchases and downloads.
Legal basis: Performing the contract (Art. 6(1)(b) GDPR).
Kept: Until you close the account.
Orders, payments and invoices
Data: Order contents, prices, VAT, country, payment status and Stripe payment identifiers, invoice details you give us.
Legal basis: Performing the contract and our tax and accounting obligations (Art. 6(1)(b) and (c)).
Kept: 5 years from the end of the year in which tax was due, as Polish tax law requires.
Proof of your consents
Data: The wording you accepted at sign-up and checkout, the document links and the time.
Legal basis: Our legitimate interest in proving the terms of the contract (Art. 6(1)(f)).
Kept: Until claims under the contract are time-barred, normally 6 years.
Order and account emails
Data: Email address, name, order details.
Legal basis: Performing the contract (Art. 6(1)(b)).
Kept: As long as the order records.
Creator accounts
Data: Name and email of the account owner and team members, company details, listings, sales and settlements, the status of the Stripe Connect payout account (identity and bank details are given to Stripe, not to us).
Legal basis: Performing the contract under the Creator Terms and our tax obligations (Art. 6(1)(b) and (c)).
Kept: Until the account is closed; settlement records 5 years from the end of the tax year.
Complaints, withdrawals and messages to us
Data: Whatever you write to us and our replies.
Legal basis: Performing the contract and our legal obligations under consumer law (Art. 6(1)(b) and (c)).
Kept: Until claims are time-barred.
Reports about listings
Data: Reporter’s name, email address, explanation and the decision taken.
Legal basis: Our obligations under the Digital Services Act (Art. 6(1)(c)).
Kept: Until the appeal period ends, then as long as needed to defend claims, up to 3 years.
Security of the Store
Data: IP address, browser details, time and address of requests, counters used to limit sign-in attempts.
Legal basis: Our legitimate interest in protecting the Store and accounts (Art. 6(1)(f)).
Kept: Server logs up to 30 days; sign-in counters up to 1 hour.
Giving your data is voluntary, but without an email address and name we cannot open an account or sell you a pack. We do not use your data for advertising, do not sell it and do not make decisions about you based solely on automated processing. Database backups are kept for a limited time and replaced automatically by newer ones.
3. Who receives the data
- OVHcloud (OVH SAS, France) hosts the Store and sends its emails. The servers that host the Store are located in the United Kingdom, which the European Commission recognises as providing adequate protection of personal data.
- Stripe (Stripe Payments Europe, Ltd., Ireland) processes payments. Stripe acts as a separate controller for preventing fraud and meeting its own legal obligations, and may transfer data to Stripe, Inc. in the United States under the EU–US Data Privacy Framework and standard contractual clauses. See stripe.com/privacy.
- When you report a listing, the creator concerned may learn the content of the report, and your name and email only where needed to handle it.
- Tax authorities, courts and other public bodies, when the law requires us to disclose data.
4. Your rights
You have the right to access your data, to have it corrected or deleted, to restrict its processing, to data portability and to object to processing based on our legitimate interest. Write to infinite.props@proton.me; we answer within one month. You can also lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl) or the supervisory authority where you live.
6. Changes
We update this notice when our processing changes and show the date it took effect at the top. See also the Terms of Service.