Privacy Policy

The controller of your personal data is BOOCARS Piotr Kwiatkowski, a sole proprietorship registered in Poland at ul. Prezydenta Gabriela Narutowicza 40/1, 90-135 Lodz, Poland, Tax ID (NIP) 7322210942, Business ID (REGON) 523961855 (the “Controller”, “we”).

For any matter concerning personal data, write to: info@getguru.pl.

The Controller has not appointed a Data Protection Officer; data protection matters are handled directly at the e-mail address above.

GetGuru.pl is a marketing management tool used by the Controller’s business customers. One of its features allows a customer to connect their own accounts on Meta platforms (Facebook, Instagram, Meta Ads) and on TikTok, so that the tool can read data about their advertising campaigns, Pages, profiles and videos, and publish content on those accounts on the customer’s instruction.

This policy explains what data we process in that context, for what purpose, on what legal basis, and what rights you have. It is issued under Regulation (EU) 2016/679 (GDPR).

Data you provide directly:

• identification and contact data: name, e-mail address, company name and phone number (if provided),
• billing data: company details, tax identification number and address, where the service is paid,
• the content of correspondence you send us,
• content you supply for publication on a connected account: video files, captions and publication settings.

Data retrieved from Meta platforms after you connect your account yourself and grant consent on the Meta permission dialog:

Data retrieved from TikTok after you connect your account yourself and grant consent on the TikTok permission dialog:

We do not collect friend lists, private messages, the identities of your followers, or data about third parties other than aggregate statistics made available by Meta or TikTok. We do not use data obtained from these platforms to build profiles of third parties, and we do not use it for any purpose unrelated to operating your account in the Service.

Connecting a Meta or TikTok account takes place through the standard OAuth authorisation flow operated by that platform. We do not ask for, and will never ask for, your password to Facebook, Instagram, Business Manager or TikTok.

The access token issued by Meta or TikTok is stored by a specialised provider (Nango Inc.) and is not stored in the Controller’s systems. Requests to Meta and TikTok interfaces are made through that provider, which means the value of the access token to your account never resides in our infrastructure.

We publish content on your TikTok account only after you have approved the final video, caption and privacy level in the panel. You choose the privacy level yourself from the options TikTok offers for your account.

You may revoke that access at any time, on your own and without our involvement: in the panel, in your Meta settings, or in the TikTok app under Settings and privacy → Security and permissions → Apps and websites. The procedure is described in the “Data Deletion Instructions” document.

Data may be entrusted to the following categories of recipients:

• Nango Inc. — provider of the authorisation and API-proxy service (storage of access tokens),
• our hosting provider, on whose infrastructure the panel runs,
• Meta Platforms Ireland Ltd. — as the source of the data and the recipient of requests sent to its interfaces,
• TikTok Technology Limited (Ireland) and TikTok Information Technologies UK Limited — as the source of data from connected TikTok accounts and the recipient of requests sent to TikTok interfaces, including content you instruct us to publish; content published on TikTok is then processed by TikTok under its own privacy policy,
• accounting and legal service providers, to the extent necessary for the Controller to meet its obligations,
• public authorities, solely where required by law.

We do not sell personal data and we do not make it available to third parties for marketing purposes.

Some of the providers we use are established outside the EEA, including in the United States. In such cases the transfer takes place on the basis of Standard Contractual Clauses approved by the European Commission or another mechanism provided for in Chapter V GDPR. A copy of the safeguards applied can be obtained by writing to info@getguru.pl.

• account data and data from connected Meta and TikTok accounts — for the duration of the service; after the integration is disconnected or the account deleted, the data is erased within 30 days,
• content supplied for publication (video files and captions) — for the time needed to complete the publication and present its result in the panel, and no longer than the account data above,
• billing data — for the period required by tax law, as a rule 5 years from the end of the calendar year in which the tax obligation arose,
• data needed to establish or defend claims — until the applicable limitation period expires,
• correspondence — for as long as needed to handle the matter, no longer than 3 years.

In connection with the processing of your data, you have the right to:

• access your data and obtain a copy of it,
• rectify inaccurate data and complete incomplete data,
• erasure of your data (the “right to be forgotten”),
• restriction of processing,
• data portability,
• object to processing based on legitimate interest,
• withdraw consent at any time, without affecting the lawfulness of processing carried out before its withdrawal,
• lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland), the supervisory authority competent for the Controller.

To exercise any of these rights, write to info@getguru.pl. We respond without undue delay and no later than one month from receiving the request.

Your data is not used for automated decision-making that produces legal effects concerning you or similarly significantly affects you, including profiling in that sense.

The panel uses cookies and similar technologies solely to the extent necessary for it to function — maintaining the logged-in user’s session and remembering their settings. We do not use marketing or tracking cookies for third-party advertising purposes.

We may update this policy, in particular where the scope of the service or applicable law changes. The current version is always available at the address where this document is published. We notify users of material changes in advance by electronic means.