Privacy Policy
Last updated: January 19, 2025
1. Introduction
This Privacy Policy explains how Michał Bujniewicz-Uppal ("we", "us", "the Provider"), operating as Jupyters, collects, uses, and protects your personal data.
We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and Polish data protection laws.
Data Controller:
Michał Bujniewicz-Uppal
NIP: 9512587881
Warsaw, Poland
Email: mbu@researchshop.pl
2. Data We Collect
2.1 Data You Provide
- Email address: When you purchase a subscription
- Payment information: Processed by Stripe (we do not store card details)
- Support requests: When you contact us
2.2 Data Collected Automatically
- License validation data: License key, machine identifier (hashed), tier, usage count
- Technical data: IP address (for abuse prevention), request timestamps
2.3 Data We Do NOT Collect
Important: Jupyters runs entirely on YOUR machine. We do NOT have access to:
- Your notebook contents
- Your code or variables
- Your execution outputs
- Any data processed by your Jupyter kernels
3. How We Use Your Data
| Purpose | Legal Basis (GDPR) |
|---|---|
| Provide and manage your subscription | Contract performance (Art. 6(1)(b)) |
| Process payments | Contract performance (Art. 6(1)(b)) |
| Send license keys and service emails | Contract performance (Art. 6(1)(b)) |
| Validate licenses and prevent abuse | Legitimate interest (Art. 6(1)(f)) |
| Respond to support requests | Legitimate interest (Art. 6(1)(f)) |
| Comply with legal obligations | Legal obligation (Art. 6(1)(c)) |
4. Third-Party Services
We use the following third-party services that may process your data:
- Stripe (USA) — Payment processing. See Stripe Privacy Policy
- Resend (USA) — Transactional emails. See Resend Privacy Policy
- Supabase (USA) — Database hosting. See Supabase Privacy Policy
- Vercel (USA) — Website and API hosting. See Vercel Privacy Policy
Data transfers to the USA are protected by Standard Contractual Clauses (SCCs) as required by GDPR.
5. Data Retention
- Active subscriptions: Data retained while subscription is active
- After cancellation: Data retained for 3 years for legal/tax purposes
- Support emails: Retained for 2 years
- Usage logs: Automatically deleted after 90 days
6. Your Rights (GDPR)
Under GDPR, you have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate data
- Erasure: Request deletion of your data ("right to be forgotten")
- Restriction: Limit how we process your data
- Portability: Receive your data in a machine-readable format
- Object: Object to processing based on legitimate interest
To exercise these rights, contact us at mbu@researchshop.pl. We will respond within 30 days.
7. Data Security
We implement appropriate security measures including:
- Encryption of data in transit (HTTPS/TLS)
- Encryption of sensitive data at rest
- Access controls and authentication
- Regular security reviews
8. Cookies
Our website uses only essential cookies for:
- Session management
- Security (CSRF protection)
We do not use tracking cookies or third-party analytics.
9. Children's Privacy
Jupyters is not intended for users under 16 years of age. We do not knowingly collect data from children.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. We will notify users of significant changes via email.
11. Complaints
If you believe we have violated your data protection rights, you have the right to lodge a complaint with:
Polish Data Protection Authority (UODO)
Urząd Ochrony Danych Osobowych
ul. Stawki 2, 00-193 Warszawa
Website: uodo.gov.pl
12. Contact
For privacy-related questions, contact us at:
Email: mbu@researchshop.pl
Business: Michał Bujniewicz-Uppal, NIP: 9512587881, Warsaw, Poland