Privacy Policy

This policy explains how CLEAR-SOLUTIONS sp. z o.o. ("Mavka", "we", "us") handles personal data collected through the mavka.ai website. We aim for plain language over legalese — if anything is unclear, email info@mavka.ai.

For review.mavka.ai, this policy covers the cookies and analytics on its website pages. It does not cover accounts or code processed by the Code Review by Mavka product. commit.mavka.ai has its own privacy policy.

1. Who is the data controller

CLEAR-SOLUTIONS sp. z o.o., Pl. Bankowy 2/1309, 00-095 Warszawa, Poland. NIP 5213934232. Contact: info@mavka.ai. We have not appointed a Data Protection Officer — we are not required to under Art. 37 GDPR.

2. What we collect, when, and why

We only collect personal data you submit through the contact form on this site. That data comprises:

  • Your name.
  • Your business email address.
  • The free-text message describing your request.
  • Optional file attachments (PDF or DOCX, up to 3 files of 10 MB each) you choose to share with your inquiry.
  • Whether you have requested an NDA before we respond.

The legal bases for processing this data are Art. 6(1)(b) GDPR — taking steps at your request prior to entering into a contract — and Art. 6(1)(f) GDPR — our legitimate interest in responding to business inquiries. You can withdraw at any time by asking us to delete your data (see Section 6).

3. Analytics and cookies

We use Google Analytics 4 to see which pages people read and which sources bring visitors to this site. It runs on every page and stores two first-party cookies in your browser, _ga and _ga_S3G5QVT6XN, which let us recognise a returning browser so that one person visiting twice is not counted as two people. They expire two years after your most recent visit.

The same Google Analytics property is used on mavka.ai, commit.mavka.ai and review.mavka.ai, and the _ga cookie is set on the shared mavka.ai domain, so a browser that visits more than one of these sites is recognised as the same browser. Each site asks for your consent separately and stores your choice for that site only. commit.mavka.ai also uses Google Tag Manager with a second Google Analytics property, under the same consent.

What Analytics records is limited to how the site is used: pages viewed, time spent on them, scroll depth, approximate location at country and city level, and the site or search engine you arrived from. Google states that Analytics 4 does not log or store individual IP addresses. We do not connect Analytics to any advertising product, we do not use it to build profiles of individuals, and we make no attempt to identify you from it.

Beyond Google Analytics this site carries no advertising trackers, no pixels, no fingerprinting, and no other third-party script that observes you. Beyond transient request-serving logs kept by our hosting provider, we do not persistently log IP addresses.

If you are in the EEA, the UK, or Switzerland, Analytics storage is switched off before you have said anything: the first thing this site tells Google is that analytics cookies are not allowed. Nothing is stored in your browser until you accept in the banner. Our legal basis is your consent, Art. 6(1)(a) GDPR, together with the consent requirement for storing information on your device. Declining costs you nothing and changes nothing else about the site.

Elsewhere Analytics runs by default and no banner is shown. You can turn it off at any time with the Cookie settings link in the footer, which is available on every page and works wherever you are. The same link is how you withdraw consent after giving it — we keep your choice in your browser under the key mavka-consent, not on our servers.

Advertising signals are refused for everyone, everywhere, and always: ad_storage, ad_user_data and ad_personalization are set to denied in code rather than left to a setting, because this site runs no advertising at all. Google Signals is switched off on our property, so Analytics does not build cross-device profiles from our data.

You can also opt out of Google Analytics, on this site and on every other, by installing Google's own Analytics Opt-out browser add-on, or by blocking googletagmanager.com in your browser.

4. Who processes data on our behalf

To host this site, operate the contact form, deliver email, and measure site usage, we rely on the following processors, each under a written Data Processing Agreement:

  • Amazon Web Services EMEA SARL — site hosting (AWS Amplify), serverless request handling (AWS Lambda), and outbound email delivery (Amazon SES). Processing region: eu-central-1 (Frankfurt, Germany). Data processing terms: the AWS standard Data Processing Addendum.
  • Google Ireland Limited — site usage measurement (Google Analytics 4), and delivery of email sent to info@mavka.ai via Google Workspace. Data processing terms: Google's data processing terms for Analytics and the Google Workspace Data Processing Addendum.

Where a transfer of personal data outside the European Economic Area is involved, it is protected by the European Commission's Standard Contractual Clauses and, where applicable, by the EU-US Data Privacy Framework.

We do not sell, rent, or share personal data with any other third parties.

5. How long we keep the data

Contact-form submissions are retained for 24 months from our last meaningful interaction with you, after which they are deleted.

If an engagement starts, the relevant contact data moves into the contract record and is retained for the duration legally required under Polish tax and accounting law (typically 10 years from the end of the calendar year of the last invoice).

6. Your rights

Under Articles 15 to 22 GDPR you have the right to:

  • Access the personal data we hold about you.
  • Ask us to correct inaccurate data.
  • Ask us to erase your data ("right to be forgotten").
  • Restrict our processing of your data.
  • Receive your data in a portable, machine-readable format.
  • Object to processing based on our legitimate interest.

To exercise any of these rights, email info@mavka.ai. We respond within one month, as required by Art. 12(3) GDPR.

7. Right to lodge a complaint

You may lodge a complaint with the Polish supervisory authority:

Urząd Ochrony Danych Osobowych (UODO)
ul. Stawki 2, 00-193 Warszawa, Poland
uodo.gov.pl

8. Changes to this policy

If we change this policy in a material way, we update the "Last updated" date at the top of this page and publish the revised policy here. We do not send individual notifications, because we do not operate a mailing list.