--- title: Privacy Policy description: "How WAVEPILLARS collects, uses, and protects data for the contact form, cookies, analytics, AI editorial tools, and your privacy rights." image: "https://wavepillars.com/og-image.jpg" url: "https://wavepillars.com/privacy/" --- This Privacy Policy explains how WAVEPILLARS collects and uses personal data when you browse wavepillars.com or contact us. ## Who we are The data controller is **Kiryl Bahdanovich**, operating as a sole proprietorship (JDG) in Poland under the WAVEPILLARS brand. - **Address:** ul. Łąkowa 60b, 80-769 Gdańsk, Poland - **NIP:** 5833449376 - **REGON:** 521863657 - **Email:** [privacy@wavepillars.com](mailto:privacy@wavepillars.com) WAVEPILLARS operates the website at [wavepillars.com](/), a founder-led software delivery studio site with Learn articles, a contact form, and an optional AI adoption assessment. ## Information we collect Depending on how you use the site, we may process: **Contact form.** When you use the contact form, we collect your name, email address, and message. You may also optionally share your AI maturity level and where adoption is currently stalling. **AI adoption assessment.** When you complete the assessment, we collect your name, work email, company, role, company size, primary AI adoption challenge, your answers, and your consent to receive results and related service follow-up. We use this information to score the self-assessment, email results to WAVEPILLARS for follow-up, and contact you about relevant AI adoption services. **Technical and usage data.** Our hosting provider and analytics tools (only after you accept analytics cookies) may collect information such as IP address, browser type, pages visited, and referring URL. We use short-lived in-memory rate limits keyed by IP on certain API routes to reduce abuse; those counters are not kept as a long-term log. ## How we use information We use the information above to: - Provide and operate the website, Learn content, contact requests, and the AI adoption assessment - Understand aggregate site usage and improve the service (with your consent for analytics) - Protect the site from fraud, abuse, and misconfiguration We do not sell your personal information. We do not use your data for third-party advertising profiles. ## AI tools and your data The operator may use third-party AI tools when creating or editing site content (for example, proofreading articles or formatting drafts). Personal data collected through the Service - such as browsing activity handled by our hosting provider, contact form submissions, or analytics data - is **not** fed into those editorial AI workflows unless we explicitly tell you otherwise in an updated policy. We do not use AI to make automated decisions about you as a user of the Service. For how we create and review content, see [Terms & Conditions](/terms). ## Legal bases (EEA/UK) If you are in the European Economic Area or the United Kingdom, we process personal data on the following bases: | Purpose | Legal basis | | --- | --- | | Contact requests and related communication | Performance of steps at your request; legitimate interest in responding to inquiries | | Website security, rate limiting, and operation | Legitimate interest in protecting and running our services | | Analytics (Google Analytics, Ahrefs) | Consent | | Compliance with legal obligations | Legal obligation | Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal. ## Cookies and local storage See our [Cookie Policy](/cookies) for details. In summary: - Browser local storage stores your analytics consent choice - Analytics cookies are set only if you click **Accept** in the cookie banner ## Sharing and subprocessors We share data only as needed to operate the service: | Provider | Role | Location | | --- | --- | --- | | [Google](https://policies.google.com/privacy) | Google Analytics (with consent) | Global (may include US) | | [Resend](https://resend.com/legal/privacy-policy) | Contact form emails | United States | | [Cloudflare](https://www.cloudflare.com/privacypolicy/) | Hosting, security, and content delivery | Global (may include US) | | [Ahrefs](https://ahrefs.com/legal/privacy-policy) | Website analytics (with consent) | Global (may include US) | Each provider's own privacy policy governs how they process data on their systems. ## International transfers We and our service providers may process data in the United States and other countries. Where required, we rely on appropriate safeguards for cross-border transfers, such as Standard Contractual Clauses and processor commitments under applicable data protection law. ## Data retention - **Contact form messages** are retained for up to **24 months** after your last message, or until you request deletion, whichever is sooner - **Analytics data** is retained according to each provider's settings and your consent status Server and provider logs may be retained for a limited period for security, debugging, and billing, according to each provider's practices. ## Security We use HTTPS and work to apply reasonable safeguards appropriate to the data we handle. No method of transmission or storage is completely secure. ## Your rights Depending on your location, you may have the right to: - Access the personal data we hold about you - Correct inaccurate data - Request deletion of your data - Restrict or object to certain processing - Data portability (where applicable) - Withdraw consent (where processing is based on consent) - Lodge a complaint with a supervisory authority **EEA/UK residents** may contact their local authority. In Poland, the supervisory authority is the **President of the Personal Data Protection Office (UODO)** - [uodo.gov.pl](https://uodo.gov.pl). To exercise your rights, email [privacy@wavepillars.com](mailto:privacy@wavepillars.com) or use our [contact form](/contact/#message). ## US privacy notice We do **not** sell or share personal information for cross-context behavioral advertising. If you are a US resident and believe you have rights under applicable state privacy laws, contact [privacy@wavepillars.com](mailto:privacy@wavepillars.com). We will respond as required by applicable law. ## Children WAVEPILLARS is not directed at children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will take appropriate steps to delete it. ## Changes We may update this policy from time to time. The "Last updated" date at the top of this page indicates when it was last revised. Continued use of the site after changes means you accept the revised policy. ## Contact Questions about this policy? Email [privacy@wavepillars.com](mailto:privacy@wavepillars.com) or use our [contact form](/contact/#message). See also our [Cookie Policy](/cookies) and [Terms & Conditions](/terms). Polish version: [Polityka prywatności](/pl/privacy). ```json {"@type":"Organization","@id":"https://wavepillars.com/#organization","name":"WAVEPILLARS","url":"https://wavepillars.com/"} {"@type":"WebSite","@id":"https://wavepillars.com/#website","url":"https://wavepillars.com/","name":"WAVEPILLARS","publisher":{"@id":"https://wavepillars.com/#organization"}} {"@type":"WebPage","name":"Privacy Policy","description":"How WAVEPILLARS collects, uses, and protects data for the contact form, cookies, analytics, AI editorial tools, and your privacy rights.","url":"https://wavepillars.com/privacy/","isPartOf":{"@id":"https://wavepillars.com/#website"},"publisher":{"@id":"https://wavepillars.com/#organization"}} ```