Last updated: February 20, 2026
The data controller responsible for your personal data is:
As a small business processing personal data only for order fulfillment, we are not required to appoint a Data Protection Officer (DPO) under Article 37 GDPR. For all privacy-related inquiries, contact us directly at kamil@buyereyes.ai.
| Data category | Specific data | Purpose |
|---|---|---|
| Contact information | Email address | Order confirmation, Report delivery, communication about your order |
| Order information | URL submitted for analysis, selected service tier, order date | Service delivery (generating the CRO Report) |
| Payment information | Payment status, transaction ID | Order validation. Full payment details (card number, billing address) are processed and stored exclusively by Stripe, Inc. We never see or store your card number. |
| Invoicing data | Company name, tax ID (NIP), billing address (if provided for invoice) | Invoice generation via Fakturownia |
| Technical data | IP address, browser type, device type | Website functionality, security, analytics |
Website analysis data: When generating your Report, our system accesses and analyzes the publicly available content of the submitted URL. This includes visible text, images, page structure, and performance metrics. This is public information, not personal data. We do not access any backend systems, databases, or private areas of your website.
We process your personal data based on the following legal grounds under GDPR:
| Processing activity | Lawful basis | GDPR Article |
|---|---|---|
| Order processing and Report delivery | Performance of a contract | Art. 6(1)(b) |
| Invoice generation | Legal obligation (tax law) | Art. 6(1)(c) |
| Analytics cookies | Legitimate interest | Art. 6(1)(f) |
| Security and fraud prevention | Legitimate interest | Art. 6(1)(f) |
We retain your data for the minimum period necessary:
We share your personal data with the following third-party processors, solely for the purposes stated:
| Processor | Purpose | Data shared | Location |
|---|---|---|---|
| Stripe, Inc. | Payment processing | Payment details, email, transaction amounts | USA (EU-US Data Privacy Framework certified) |
| Fakturownia (iFirma S.A.) | Invoice generation | Company name, tax ID, billing address, transaction amount | Poland (EU) |
| Email service provider | Transactional email (order confirmation, Report delivery) | Email address, order reference | EU |
All third-party processors are bound by data processing agreements (DPAs) in compliance with GDPR Article 28. For transfers to the USA (Stripe), we rely on the EU-US Data Privacy Framework and Standard Contractual Clauses (SCCs) as safeguards.
BuyerEyes.ai uses a minimal set of cookies:
| Cookie type | Purpose | Duration | Required |
|---|---|---|---|
| Essential | Session management, checkout functionality | Session | Yes |
| Analytics | Anonymous usage statistics (page views, bounce rate) | Up to 26 months | No (can be disabled) |
We do not use advertising, marketing, or social media tracking cookies. You can disable non-essential cookies in your browser settings without affecting the Service.
As a data subject, you have the following rights:
To exercise any of these rights, contact us at kamil@buyereyes.ai. We will respond within 30 days.
We implement appropriate technical and organizational measures to protect your data:
Your data is primarily processed within the European Economic Area (EEA). When data is transferred outside the EEA (specifically to Stripe in the USA), it is protected by:
The Service is not directed at individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe a minor has provided us with personal data, contact us at kamil@buyereyes.ai and we will promptly delete it.
We may update this Privacy Policy from time to time. Changes will be published on this page with a revised "Last updated" date. We encourage you to review this page periodically.
For privacy-related questions, data access requests, or complaints: