Privacy Policy
Last updated: 29 May 2026 · effective from 29 May 2026
We take the privacy of our Users seriously. Below we explain what personal data we collect in connection with your use of rewriter.io, for what purpose and on what basis we process it, and what rights you have. This document complies with the GDPR (Regulation 2016/679).
1. Data controller
The controller of your personal data is BEO TECHNOLOGY spółka z ograniczoną odpowiedzialnością, with its registered office in Łódź (90-135) at ul. Prezydenta Gabriela Narutowicza 40/1, entered in the register of entrepreneurs of the National Court Register (KRS) under number 0001103255, NIP 7252343252 (EU VAT: PL7252343252), REGON 528493956 (hereinafter the “Controller”, “we”). In all matters concerning the processing of data you may contact us at office@beotechnology.com.
This Policy applies to the rewriter.io website, the application (dashboard), the API, and related integrations and plugins.
2. What data we collect
The scope of data processed depends on how you use the Service. We may process:
- Account data — first and last name or business name, e-mail address, password (in encrypted form), interface language.
- Organization and billing data — company name, NIP, address, invoicing details, payment history (card data is handled by payment operators — we do not store full card numbers).
- Project data — information about the website, brand, audience, tone and settings that you enter yourself.
- Technical data — IP address, browser and device type, event logs, data on how you use the application.
- Correspondence — the content of support requests and messages addressed to us.
3. Purposes and legal bases of processing
We process data for the following purposes and on the following GDPR legal bases:
- Providing the Service and performing the contract — Article 6(1)(b) (performance of a contract).
- Settlements and tax obligations — Article 6(1)(c) (legal obligation).
- Support, security and product development, analytics, our own marketing — Article 6(1)(f) (legitimate interest of the Controller).
- Newsletter and marketing communications — Article 6(1)(a) (consent), which you may withdraw at any time.
Providing data is voluntary, but necessary to create an account and use paid features.
4. Content and data in the application
The materials you create and store in the application (topics, article suggestions (Headlines), articles, Project settings) are processed solely for the purpose of providing the Service. If the content contains personal data of third parties, in that respect we act as a processor on your instructions, and you remain the controller of that data.
We use artificial intelligence models to generate content. We use the data passed to these processes to carry out your instructions; we do not use your content to train models without your consent.
We make the data processing agreement available on request at office@beotechnology.com.
5. Cookies
We use cookies and similar technologies to ensure the application works (essential cookies), to remember your preferences, and to carry out anonymous analytics and — with your consent — marketing activities.
Cookies other than essential ones — including analytics (Google Analytics, PostHog, Microsoft Clarity), marketing and advertising (Google Ads, Microsoft Ads, Meta Ads), and those related to server-side tagging (sGTM.Space) — are installed only after consent is given in the cookie banner. We manage consents using the Cookietip.com platform. You may change your settings at any time in your browser or in the consent panel.
6. Recipients and processors
We may entrust your data to trusted providers who act on our instructions and on the basis of data processing agreements. In particular, we use the following categories and tools:
- Infrastructure, hosting and security — Google Cloud (Google Cloud Platform) and Cloudflare (CDN, traffic protection and security).
- Payments and invoicing — Dodo Payments (Dodopayments.com), acting as the payment operator and Merchant of Record issuing invoices.
- Analytics and measurement — Google Analytics, PostHog (product analytics), Microsoft Clarity (behaviour analysis, heatmaps, session recordings), and sGTM.Space (server-side tag management / server-side GTM).
- Advertising and marketing — Google Ads, Microsoft Ads and Meta Ads (conversion measurement and remarketing campaigns).
- Cookie consent management — Cookietip.com (a platform for collecting and recording consents).
- Authentication and account management — Clerk (Clerk.com), handling sign-in, registration, and the management of users and sessions.
- AI models — OpenRouter (an intermediary providing access to the artificial intelligence models used to generate content).
We do not sell your personal data. We disclose it to public authorities only where required by law.
7. Transfers outside the EEA
Some providers may process data outside the European Economic Area. In such cases we ensure appropriate safeguards required by the GDPR, in particular standard contractual clauses approved by the European Commission.
8. Retention period
We retain account data and content for the duration of the contract and after its termination — for the period necessary for settlements and for pursuing or defending against claims, and billing data for the period required by tax regulations. Data processed on the basis of consent is retained until that consent is withdrawn.
After the account is deleted, we delete or anonymise the data, except to the extent that retention is required by law. You may export your content beforehand through the dashboard or the API.
9. Your rights (GDPR)
In connection with the processing of data, you have the following rights:
- to access your data and obtain a copy of it,
- to rectify (correct) your data,
- to erase your data (“right to be forgotten”),
- to restrict processing,
- to data portability in a structured, commonly used format,
- to object to processing based on legitimate interest,
- to withdraw consent at any time (without affecting the lawfulness of processing carried out beforehand).
To exercise your rights, write to office@beotechnology.com. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (PUODO).
10. Data security
We apply adequate technical and organisational measures to protect data, including encryption of connections (TLS), access control, password encryption, and regular backups. We strive to minimise data and limit access only to those persons for whom it is necessary.
In the event of a personal data breach that may pose a risk to your rights, we will inform you and the competent supervisory authority in accordance with the requirements of the GDPR.
11. Contact and changes to the policy
For matters concerning privacy and personal data, write to office@beotechnology.com. We respond without undue delay, at the latest within the time limits provided for by law.
We may update the Policy, e.g. in connection with a change in regulations or the scope of the Service. We publish the new version on this page and, in the case of material changes, we additionally notify you by e-mail. The current effective date is shown at the beginning of the document.