Privacy Policy

The controller of your personal data is AI SIGNALS COMPANY P.S.A., ul. Grzybowska 12/14 lok. B-3, 00-132 Warsaw, Poland, entered in the National Court Register (KRS) under number 0001239983, NIP 5253090237, REGON 54476161100000 (“we”, “us”).

For anything related to your personal data, write to contact@ase-bot.live or send a letter to the address above.

We only process the data needed for the purposes below. The legal bases refer to Article 6(1) of Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR).

1. A

   Visiting the website

   Data

   IP address, browser and device information, the page requested and the time of the request (server logs).

   Purpose

   Delivering the website and its server functions, and keeping them secure.

   Legal basis

   Our legitimate interest in running a secure website (Art. 6(1)(f) GDPR).

   Recipients

   Vercel (hosting).

2. B

   Contact form and demo requests

   Data

   Name, e-mail address, the content of your message and, if you provide it, your phone number.

   Purpose

   Answering your enquiry. Your message is delivered to us by e-mail through the Resend service.

   Legal basis

   Steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) or our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).

   Recipients

   Vercel, Resend, the provider of our e-mail mailbox.

3. C

   Chat assistant

   Data

   The messages you type into the chat window and the earlier messages of the same conversation.

   Purpose

   Generating replies. The conversation is sent from our server to Anthropic, whose AI model writes the reply. Please do not share sensitive personal data in the chat.

   Legal basis

   Our legitimate interest in answering visitors' questions (Art. 6(1)(f) GDPR).

   Recipients

   Vercel, Anthropic.

4. D

   User accounts and the waitlist

   Data

   The data you enter when registering: first and last name, username, e-mail address, phone number, preferred language and password; if you sign in with Google, the data Google passes to us for sign-in, such as your name and e-mail address. Waitlist: your e-mail address. Security of signed-in sessions: IP address, browser and device information and session identifiers.

   Purpose

   Creating and running your account, signing you in, sending account e-mails (such as e-mail address confirmation) and protecting accounts against misuse.

   Legal basis

   Performance of a contract (Art. 6(1)(b) GDPR); for security measures, our legitimate interest (Art. 6(1)(f) GDPR).

   Recipients

   Supabase (database and authentication), Resend (e-mails), Google (if you choose Google sign-in).

5. E

   Payments

   Data

   The data needed to process a subscription payment. You enter card details directly in Stripe's checkout form and we do not store them; we receive information about the payment and subscription status.

   Purpose

   Processing payments and managing subscriptions, and keeping accounting records.

   Legal basis

   Performance of a contract (Art. 6(1)(b) GDPR) and legal obligations such as accounting and tax rules (Art. 6(1)(c) GDPR).

   Recipients

   Stripe, Supabase.

6. F

   Analytics and advertising (only with your consent)

   Data

   Cookie identifiers, information about your visit and interactions with the website, basic device and browser data.

   Purpose

   Visit statistics (Google Analytics 4) and measuring the effectiveness of our ads (Google Ads).

   Legal basis

   Your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

   Recipients

   Google.

7. G

   Recording your cookie choice

   Data

   Your decision and the categories you chose, its date and version, a random session identifier, browser language, time zone, platform, screen size and user agent and, if you are signed in, your user ID.

   Purpose

   Remembering your choice and being able to demonstrate consent (Art. 7(1) GDPR).

   Legal basis

   Our legitimate interest in demonstrating consent (Art. 6(1)(f) GDPR).

   Recipients

   Supabase.

We use cookies and browser storage (localStorage) in two groups:

• Necessary – always on: they remember your language, your cookie choice and, when you sign in, your login session. Without them the website does not work properly.
• Analytics, advertising and preferences – only with your consent: Google Analytics 4 and Google Ads tags. They run in Google Consent Mode with analytics and advertising storage set to “denied” by default, so they do not set analytics or advertising cookies until you agree. In the cookie banner you can accept or decline all of them or choose individual categories.

You can change your mind at any time: use the button below and the cookie banner will appear again. You can also delete cookies and site data in your browser settings.

Some pages also load resources directly from other providers, which receive your IP address and browser information when your browser downloads them: fonts (Google Fonts) and the market price ticker in the navigation bar (Yahoo Finance). The legal basis is our legitimate interest in presenting the website (Art. 6(1)(f) GDPR).

We share data only with providers that help us run the website, and only as far as necessary:

• Vercel – hosting of the website and its server functions;
• Supabase – database, user accounts and authentication;
• Resend – sending e-mails (contact form messages, account e-mails);
• Anthropic – generating chat assistant replies;
• Stripe – payment processing;
• Google – Analytics and Ads (only with consent), Google Fonts and Google sign-in if you choose it;
• Yahoo – market prices shown in the price ticker;
• the provider of our e-mail mailbox.

These providers process data on our behalf as processors or, in some cases (for example Google or Stripe), as separate controllers under their own privacy policies. We may also disclose data to public authorities where the law requires it.

Some of these providers are based outside the European Economic Area, in particular in the United States, or use infrastructure there. In such cases data is transferred on the basis of a European Commission adequacy decision – including the EU-US Data Privacy Framework for certified companies – or standard contractual clauses approved by the European Commission. You can ask us for more information about these safeguards.

We keep personal data no longer than necessary for the purpose for which it was collected. In particular:

• enquiries sent through our forms – for as long as needed to handle them and any follow-up;
• account data – for as long as you have an account;
• data processed on the basis of consent – until you withdraw it.

After that we may keep data only where the law requires it (for example accounting records) or for as long as needed to establish, exercise or defend legal claims.

Under the conditions set out in the GDPR, you have the right to:

• access your data (Art. 15);
• rectification (Art. 16);
• erasure (Art. 17);
• restriction of processing (Art. 18);
• data portability (Art. 20);
• object to processing based on our legitimate interest (Art. 21);
• withdraw consent at any time, without affecting the lawfulness of processing carried out before the withdrawal;
• lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, PUODO), uodo.gov.pl.

Write to contact@ase-bot.live or send a letter to our registered office. We may ask you to confirm your identity before we act on a request. We reply without undue delay and within the time limits set by the GDPR (as a rule, within one month).

Providing personal data is voluntary, but without it we cannot answer your enquiry, open an account or process a payment.

We may update this policy when our services or the law change. The date of the current version is shown at the top of this page. See also our Terms of Use.