This Privacy Policy explains what personal data dobryPIT ("we", "us") collects when you use this website, why we collect it, and what rights you have over it.
Who is responsible for your data
The controller of your personal data is the operator of dobryPIT. The operator's full legal name, address, and a dedicated email address for data protection matters will be published here before any paid feature is offered; until then, please use the Contact page.
We have not appointed a data protection officer (inspektor ochrony danych), as the law does not require one for our activity.
What data we collect
We collect the following categories of data:
Account identity: your email address and login, handled by our authentication provider, Clerk. We never see or store your password.
Tax data you enter: investment transactions, dividends and crypto figures you type in or import, saved to your account so you can come back to it.
Files you upload for import: broker statements (CSV, Excel or PDF) are read in memory to extract the figures and are not stored. A PIT-8C form contains your PESEL number, name and address — we read only the income figures from it and never store or log your personal details.
Technical data: IP addresses and request logs kept by our hosting providers, used to keep the service secure and working.
Contact-page messages: your email address, message, and any attachments. We store them for 90 days, and a copy is also sent to our mailbox by email. You can send statements as they are, including a PESEL number or account details on them; they are kept with the message like everything else in it.
Why we process your data, and on what legal basis
We do not use your data for advertising, and we do not sell it.
Providing the calculator and your account (saving your tax years, calculating estimates): performance of the contract with you — GDPR art. 6(1)(b). Providing this data is necessary to use the service.
Answering Contact-page messages and complaints, and finding and fixing the problems you report: our legitimate interest in responding to you and keeping the service working — art. 6(1)(f); for complaints about a contract, also art. 6(1)(b). Messages and attachments are analysed by automated software tools, run on our behalf by a service provider, only to sort them and draft a reply. A person always decides what is sent.
Security, preventing abuse (including rate limiting), and error monitoring: our legitimate interest in a secure, working service — art. 6(1)(f).
Once paid features are offered — payment records and invoices: our legal obligations under tax and accounting law — art. 6(1)(c).
Who else sees it
We use a small number of service providers ("subprocessors") to run this site:
Clerk — authentication and account login.
Railway — application hosting and our database.
Vercel — hosting for this website.
Narodowy Bank Polski (NBP) — we send only a currency code and a date to NBP's public exchange-rate API, never any personal data, to convert foreign-currency transactions to PLN.
Google (Gmail) — used to send and receive Contact-page emails.
Sentry — error monitoring, so we can find and fix bugs. Error reports are stripped of request bodies, form contents, uploaded files, cookies and headers before they leave our servers or your browser; only your internal account ID is attached.
A support-triage provider — a specialised software provider that runs the automated tools we use to sort the support messages and attachments you send us and to prepare a draft reply. It receives the text of your message and any attachments, but not your email address, and it cannot send anything. A person at dobryPIT reviews and sends every reply. You can ask us for the provider's name via the Contact page.
When configured, we use privacy-friendly, cookie-free analytics (Umami) to understand site usage. It only records page views and a small number of named product events — never form content or financial data.
International data transfers
Some of our subprocessors may process data outside the European Economic Area. Where that happens, we rely on the safeguards those providers themselves offer for international transfers (such as the EU Standard Contractual Clauses or an equivalent adequacy mechanism). We have not yet independently audited each subprocessor's specific data-residency configuration — if this matters to you, contact us via the Contact page and we'll confirm what we know.
The support-triage provider may process data outside the European Economic Area, including in the United States, under the safeguards described above.
Basic usage events
We record basic usage events for your account: which broker format you imported, whether the import worked (and, if it failed, a short error code), how many rows were read, that a calculation was run, and the tax year concerned. We use them only to count how the service is used and to find broken imports.
These events contain no amounts, no file contents, no file names and no instrument names. We keep them for up to 12 months and then delete them automatically; if you delete your account, they are deleted with it right away. They are included in the data export.
How long we keep your data
Account and tax data: until you delete a tax year or your account. You can do both yourself at any time; deletion is immediate.
Contact-page messages and attachments: kept in our database for 90 days from the day you send them, then deleted automatically — sooner if you ask, or if you delete your account (this covers messages sent while you were signed in or from your account's verified email address). A copy of each message is also sent to our mailbox by email (through Google); it stays there until we delete it, and we delete it if you ask. The category, severity, short summary, suspected cause and draft reply that the automated tools prepare are stored with your message and deleted with it. Replies we send you are stored with the case for the same period. A copy of each reply also stays in the Sent folder of our mailbox until we delete it, and we delete it if you ask. If you ask us to delete your messages, we may first send a one-time confirmation link to the email address you used.
Technical logs: for a limited period set by our hosting providers, normally not longer than 30 days.
Payment records and invoices (once paid features are offered): 5 years from the end of the calendar year in which the tax obligation arose, as required by tax law — even if you delete your account.
Basic usage events (which broker format was imported, whether it worked, row counts, that a calculation was run): up to 12 months, then deleted automatically — sooner if you delete your account.
Your rights
Under the GDPR you have the right to:
Access your data and receive a copy of it.
Correct inaccurate data.
Have your data erased — you can delete your account yourself on the Account page; this also removes from our database the Contact-page messages sent while you were signed in or from your account's verified email address. For any other message, or for the copy in our mailbox, ask us via the Contact page.
Restrict processing.
Object to processing based on our legitimate interest (art. 6(1)(f)).
Ask us which providers handle your support messages, and ask for a person to look at your message instead of automated sorting.
Receive your data in a portable format — you can download a JSON export of everything we hold on the Account page.
To exercise a right that isn't self-service, contact us via the Contact page; we will reply within one month. You also have the right to lodge a complaint with the supervisory authority: the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw.
No automated decision-making
The calculator produces an estimate for your own use. We do not make decisions about you based solely on automated processing, including profiling, that produce legal effects or similarly significantly affect you. Automated tools help us sort support messages and prepare draft replies, but a person reviews every reply and no decision about you is made by automated means alone.
Cookies and data stored on your device
We use only what is strictly necessary for the service to work: the session cookies set by our authentication provider, Clerk, to keep you signed in, and a few entries in your browser's local storage that remember your chosen language and which getting-started steps you have completed. We do not use analytics, advertising, or marketing cookies, so we don't ask for cookie consent.
Security
We use reasonable technical measures to protect your data, including encrypted (HTTPS) connections and access controls on our database. No system can be guaranteed 100% secure, and we encourage you to use a strong, unique password with your account.
Changes to this policy
We will update this policy when our processing changes, and change the date and version above. We will tell you about significant changes by email or when you next sign in.
Contact
Questions about this policy or your data? Reach us via the Contact page.