Privacy Policy

1. Who we are

Async CTO is operated by Wojciech Nowak, registered in Poland.

• Location: Klepacze, Poland
• Email: w.nowak19@gmail.com
• Website: asynccto.com

2. What data we collect

We collect only what we need to provide the service:

• Account info — your name and email address, provided when you sign up or contact us.
• Payment data — processed entirely by Stripe. We never see or store your full card number.
• Usage data — anonymized analytics collected via Google Analytics 4 (page views, referral source, device type). Collected only after you accept cookies.

3. How we use your data

• To provide and manage your subscription
• To communicate about your projects and deliverables
• To process payments through Stripe
• To improve the website based on aggregated analytics

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Cookies

We use cookies only for Google Analytics 4. Analytics cookies are loaded only after you give consent through our cookie banner. You can withdraw consent at any time by clearing your browser cookies.

5. Third-party services

• Stripe — payment processing. See Stripe's Privacy Policy.
• Google Analytics 4 — website analytics. See Google's Privacy Policy.

6. International data transfers

Our third-party processors (Stripe and Google) operate in the United States. When your data is transferred outside the EU/EEA, these transfers are protected by Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring your data receives an adequate level of protection regardless of where it is processed.

7. Security

We use industry-standard measures to protect your data, including encrypted connections (TLS/SSL), secure authentication, and limited access to personal data on a need-to-know basis. While no system is 100% secure, we take reasonable steps to safeguard your information.

8. Data retention

We keep your personal data for as long as your subscription is active and for up to 12 months after cancellation (for accounting and legal obligations). Analytics data is retained according to Google Analytics default settings.

9. Your rights (GDPR)

If you are in the EU/EEA, you have the right to:

• Access the personal data we hold about you
• Request correction or deletion of your data
• Object to or restrict processing
• Request data portability
• Withdraw consent at any time

To exercise any of these rights, email w.nowak19@gmail.com. We will respond within 30 days.

10. Changes to this policy

We may update this policy from time to time. Changes will be posted on this page with an updated date.

11. Contact

Questions about this policy? Email w.nowak19@gmail.com.