DBBM Concept sp. z o.o. ("DBBM", "we", "us"), Wieniawskiego 4D/2, 83-330 Pępowo, Poland, is a private, credit-based knowledge platform. This Privacy Policy explains what personal information we collect, how we use it, who we share it with and the rights you have over your data.
1. Data we collect
Account data. Name, email address and a hashed password when you create an account through checkout.
Order data. Credit bundle purchased, chosen currency, applied promotional code, payment method and payment status.
Library data. Books, notes and metadata you upload, plus AI-generated summaries, embeddings and knowledge graphs derived from them.
Technical data. Basic log data such as browser, device type, IP address and timestamps required to operate and secure the service.
2. How we use your data
We use your data only to:
- Provide the library, semantic search and AI reading companion features.
- Process credit purchases and send bank-transfer instructions.
- Prevent fraud and abuse and keep the platform secure.
- Communicate essential service messages related to your account.
We do not sell your data and we do not use your uploaded books to train third-party foundation models.
3. Legal basis
We process data on the basis of contract (to deliver the service you purchased), legitimate interest (security, fraud prevention) and, where applicable, your consent (optional analytics cookies).
4. Data retention
Account and order records are retained for the lifetime of the account and for up to 24 months after deletion for accounting and legal purposes. Uploaded books and derived AI artifacts are deleted within 30 days of account closure or immediately on request.
5. Sharing and subprocessors
We share data only with subprocessors strictly required to operate the service (infrastructure hosting, transactional email, payment processing). All subprocessors are contractually bound to confidentiality and data protection obligations.
6. Your rights
You may access, correct, export or delete your personal data at any time. You may also object to processing or withdraw consent. To exercise any right, write to [email protected].
7. Security
All data is encrypted in transit and at rest. Passwords are hashed with modern algorithms. Access to production systems is restricted and audited.
8. Contact
Questions about this policy can be sent to [email protected].
