Privacy Policy

1. Data Controller

The data controller for your personal data is Kohls RCM Pawel Kohls, Lechicka 59, 61-695 Poznan, Poland, VAT ID: PL5542524133. You can contact us about data protection at [email protected].

2. What Data We Collect

• Account data: Email address and username
• Billing data: Processed by Stripe — we do not store your card details
• Link data: The short links you create, their destination URLs, any connected domains or WordPress sites, and the product identifiers you choose to monitor
• Usage data: Click counts and aggregated click statistics for your links
• Login events: IP address, browser user agent, and timestamp for each login — retained for a minimum of 12 months
• Technical data: Server access logs including IP addresses, request URLs, and timestamps
• Communication data: Messages you send us via support or the contact form

When a visitor clicks one of your short links, we process the request to perform the redirect and to count the click. We record aggregate click data and coarse technical metadata (such as timestamp and, where applicable, IP for bot filtering); we do not build advertising profiles of your visitors.

3. How We Use Your Data

• Providing and maintaining the Service, including link redirects and availability/broken-link monitoring
• Processing payments and managing subscriptions
• Communicating with you about your account and sending monitoring alerts
• Responding to support requests
• Ensuring security and preventing abuse and fraud
• Complying with legal obligations

Legal basis (GDPR Art. 6): contract performance, legitimate interest, consent, and legal obligation.

4. Payment Processing

Payments are processed by Stripe, Inc. Your card details are sent directly to Stripe and are never stored on our servers. Stripe acts as a data processor under the GDPR. See Stripe's Privacy Policy.

5. Data Sharing

We do not sell your personal data. We share data only with:

• Stripe — payment processing
• Infrastructure providers — server hosting (EU-based)
• Cloudflare — DNS and CDN services
• Marketplace APIs — to check product availability we send product identifiers (not your personal data) to third-party marketplaces such as AliExpress
• Law enforcement — when required by valid legal process, or where we have a good-faith belief that disclosure is necessary to prevent imminent harm

6. Data Storage and Retention

Your data is stored on servers in the European Union. Billing records are retained for 5 years as required by Polish tax law. Login events and access logs are retained for a minimum of 12 months for security and legal-compliance purposes. After account deletion, personal data is removed within 30 days, except where retention is required by law or for ongoing legal proceedings.

7. Your Rights (GDPR)

Under the GDPR, you have the right to:

• Access — request a copy of your personal data
• Rectification — correct inaccurate data
• Erasure — request deletion of your data
• Portability — receive your data in a structured format
• Restriction — restrict processing of your data
• Objection — object to processing based on legitimate interest
• Withdraw consent — where processing is based on consent

Contact [email protected]. We respond within 30 days. You may also lodge a complaint with the Polish Data Protection Authority (UODO).

8. Cookies

We use essential cookies for session management and authentication only. We do not use advertising cookies or cross-site tracking. Any usage analytics we run are privacy-friendly and aggregated, and are not used to profile you across other websites.

9. Contact

• Kohls RCM Pawel Kohls
• Lechicka 59, 61-695 Poznan, Poland
• Email: [email protected]