Privacy Policy
Fucking Privacy Policy
(for those who still believe in Privacy and Santa)
PokPok.ai — Last updated: February 18, 2026
1. Data Controller
The controller of your personal data is:
Operating as: VIKTOR KONOVALOV XCLV BRANDING
Trade name: PokPok.ai
Tax ID (NIP): PL9512416719
Registered in: Central Registration and Information on Business Activity (CEIDG), Poland
Contact for data protection matters:
Email: privacy@pokpok.ai
2. What Personal Data We Collect
When you use PokPok.ai or contact us, we may collect:
• Contact information: First name, last name, email address
• Business information: Company name, job title, industry
• Technical data: IP address, browser type, device information, operating system
• Usage data: Pages visited, features used, time spent on platform, behavioral patterns
• Communication data: Messages sent through contact forms or customer support chat
3. Purposes and Legal Basis for Processing
Responding to contact form inquiries
Legal Basis: Art. 6(1)(b) GDPR — pre-contractual steps or performance of contract
Retention: 2 years or until deletion request
Providing access to PokPok.ai platform
Legal Basis: Art. 6(1)(b) GDPR — performance of contract
Retention: Duration of contract + 3 years
Sending marketing communications
Legal Basis: Art. 6(1)(a) GDPR — consent (opt-in only, can be withdrawn anytime)
Retention: Until consent withdrawal
Platform analytics and improvement
Legal Basis: Art. 6(1)(f) GDPR — legitimate interest
Retention: Up to 26 months (aggregated)
Compliance with legal obligations
Legal Basis: Art. 6(1)(c) GDPR — legal obligation
Retention: As required by Polish law (typically 5–6 years)
Fraud prevention and security
Legal Basis: Art. 6(1)(f) GDPR — legitimate interest
Retention: As long as necessary
4. Recipients of Your Personal Data
We share your personal data with the following third-party processors to provide our services:
HubSpot, Inc. — USA
Purpose: CRM, contact management, email marketing
Transfer mechanism: Standard Contractual Clauses (SCCs) approved by EU Commission Decision 2021/914
Intercom, Inc. — USA
Purpose: Customer support, live chat
Transfer mechanism: Standard Contractual Clauses (SCCs)
Framer B.V. — Netherlands (EU)
Purpose: Website hosting, CDN delivery
Transfer mechanism: EU-based — no SCCs required
Google LLC — USA
Purpose: Analytics (Google Analytics)
Transfer mechanism: Standard Contractual Clauses (SCCs)
We have signed a DPA with HubSpot, Intercom and Framer in accordance with Art. 28 GDPR.
5. Data Retention
• Contact form inquiries — 2 years from last contact or until you request deletion
• Active customer accounts — for the duration of the contract + 3 years (for potential legal claims under Polish Civil Code)
• Marketing consent data — until you withdraw consent
• Analytics and usage data — aggregated and anonymized after 26 months
• Accounting and tax records — 5 years from end of fiscal year (Polish Accounting Act requirement)
6. Your Rights Under GDPR
You have the following rights regarding your personal data:
• Right to access (Art. 15) — obtain confirmation of whether we process your data and receive a copy
• Right to rectification (Art. 16) — correct inaccurate or incomplete data
• Right to erasure / "right to be forgotten" (Art. 17) — request deletion of your data
• Right to restriction of processing (Art. 18) — limit how we use your data in certain circumstances
• Right to data portability (Art. 20) — receive your data in a structured, machine-readable format (CSV/JSON)
• Right to object (Art. 21) — object to processing based on legitimate interest or direct marketing
• Right to withdraw consent (Art. 7(3)) — withdraw marketing consent at any time without affecting prior lawful processing
• Right not to be subject to automated decision-making (Art. 22) — including profiling
To exercise any of these rights, contact us at: privacy@pokpok.ai
We will respond to your request within 1 month (extendable by 2 months for complex requests).
7. Right to Lodge a Complaint
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Polish supervisory authority:
Urząd Ochrony Danych Osobowych (UODO)
(Office for Personal Data Protection)
ul. Stawki 2
00-193 Warszawa, Poland
Website: uodo.gov.pl
Email: kancelaria@uodo.gov.pl
8. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to improve your experience and analyze platform usage.
• Essential cookies — necessary for platform functionality (no consent required)
• Analytics cookies — HubSpot tracking, Google Analytics (requires consent via cookie banner)
• Marketing cookies — remarketing, advertising personalization (requires consent)
For detailed information on cookies, see Section 14 (Cookie Policy) of this document.
You can manage your cookie preferences through the cookie banner or browser settings.
9. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including:
• Encryption of data in transit (SSL/TLS)
• Access controls and authentication
• Regular security audits
• Data Processing Agreements with all processors
• Incident response procedures
In case of a data breach affecting your rights and freedoms, we will notify UODO within 72 hours and inform you without undue delay.
10. International Data Transfers
Some of our processors are located outside the European Economic Area (EEA). We ensure adequate protection as follows:
Processors in the USA (third country transfer):
• HubSpot, Inc. — Standard Contractual Clauses (SCCs) approved by EU Commission Decision 2021/914
• Intercom, Inc. — Standard Contractual Clauses (SCCs)
• Google LLC — Standard Contractual Clauses (SCCs)
Processors within the EEA (no transfer mechanism required):
• Framer B.V. (Netherlands) — EU-based, no international data transfer
We have signed Data Processing Agreements (DPA) with each of the above processors in accordance with Art. 28 GDPR.
You can request a copy of the applicable SCCs by contacting privacy@pokpok.ai
11. Children's Privacy
PokPok.ai is a B2B SaaS platform intended for business users. We do not knowingly collect personal data from individuals under 16 years of age. If you believe we have inadvertently collected such data, contact us immediately at privacy@pokpok.ai
12. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. The latest version is always available at pokpok.ai/privacy.
Material changes will be communicated to registered users via email at least 14 days before they take effect.
Previous version history available upon request.
13. Contact Us
For any questions about this Privacy Policy or data protection practices:
Email: privacy@pokpok.ai
Business address: ul. Franciszka Klimczaka 17 lok. 7, 02-797 Warszawa
Data Protection Officer: Not required (JDG does not meet GDPR Art. 37 thresholds)
This Privacy Policy is compliant with Regulation (EU) 2016/679 (GDPR) and Polish Act on Personal Data Protection.
14. Cookie Policy
This section forms part of the Privacy Policy of PokPok.ai and describes how we use cookies and similar tracking technologies on pokpok.ai.
Cookies are small text files stored on your device when you visit a website. They allow us to recognize your browser, remember your preferences, and analyze how our site is used.
14.1 Categories of cookies we use
Essential
Purpose: Session management, security, login state, cookie consent memory
Provider: PokPok.ai
Consent required: No
Analytics (anonymized)
Purpose: Anonymous traffic analysis, page performance
Provider: Framer Analytics
Consent required: No (fully anonymized)
Analytics (tracking)
Purpose: Visitor behavior, traffic sources, conversion tracking
Provider: Google Analytics
Consent required: Yes — opt-in
Marketing and CRM tracking
Purpose: Lead identification, website activity linked to CRM contact records, email open/click tracking
Provider: HubSpot
Consent required: Yes — opt-in
Functional (support chat)
Purpose: Customer support chat session, user identification for support
Provider: Intercom
Consent required: Yes — opt-in
14.2 Detailed cookie list
session — PokPok.ai
User session management · Duration: Session
csrf_token — PokPok.ai
Security — CSRF prevention · Duration: Session
cookie_consent — PokPok.ai
Stores your cookie preferences · Duration: 1 year
_ga — Google LLC
Distinguishes unique users (Google Analytics) · Duration: 2 years
_ga_XXXXXXX — Google LLC
Maintains session state (Google Analytics 4) · Duration: 2 years
_gid — Google LLC
Distinguishes users (Google Analytics) · Duration: 24 hours
__hstc — HubSpot, Inc.
Main tracking cookie — visitor history and sessions · Duration: 180 days
hubspotutk — HubSpot, Inc.
Identifies visitor — linked to CRM contact record · Duration: 180 days
__hssc — HubSpot, Inc.
Session tracking · Duration: 30 minutes
__hssrc — HubSpot, Inc.
Detects new sessions/browser restarts · Duration: Session
intercom-id-XXXXXXX — Intercom, Inc.
Identifies unique visitor for support chat · Duration: 270 days
intercom-session-XXXXXXX — Intercom, Inc.
Active support chat session · Duration: 1 week
intercom-device-id-XXXXXXX — Intercom, Inc.
Device identification for chat continuity · Duration: 270 days
14.3 Third-party cookie policies
For full details on how each third party uses cookies:
• Google Analytics: policies.google.com/privacy
• HubSpot: legal.hubspot.com/cookie-policy
• Intercom: intercom.com/legal/privacy
14.4 Legal basis for cookie processing
• Essential cookies — Art. 6(1)(b) and Art. 6(1)(f) GDPR (necessary for service delivery and security)
• Analytics (Framer) — Art. 6(1)(f) GDPR (legitimate interest, anonymous, no personal data)
• Google Analytics — Art. 6(1)(a) GDPR (consent)
• HubSpot tracking — Art. 6(1)(a) GDPR (consent)
• Intercom — Art. 6(1)(a) GDPR (consent)
14.5 Managing your cookie preferences
You can manage or withdraw your cookie consent at any time by:
• Clicking "Cookie Settings" in the footer of pokpok.ai
• Using your browser settings to block or delete specific cookies
• Contacting us directly at privacy@pokpok.ai
Withdrawing consent will not affect the lawfulness of processing carried out before withdrawal.
14.6 Cookie consent banner
When you first visit pokpok.ai, a cookie banner will appear requesting your consent for non-essential cookies.