Last updated: 20 October 2026

Privacy Policy

Controller

naSpotted sp. z o.o., al. Jana Pawła II 43A lok. 37B, 01-001 Warszawa, Poland, NIP (VAT ID) PL5273228667, KRS 0001255909. Contact: direct message to @worldtopdesign on Instagram.

What we collect and why

• Order details - email, Instagram handle, brand name, website, your description and the files you upload. We use them to review, prepare and publish your Feature and to send you updates (performance of the agreement, Art. 6(1)(b) GDPR).
• Payment - handled by Stripe. We receive the payment status and amount, never your card details.
• Accounting records - kept as required by Polish tax law (Art. 6(1)(c) GDPR).
• Server logs - IP address and technical data for security and to prevent abuse (legitimate interest, Art. 6(1)(f) GDPR).

We don't use advertising cookies or trackers on this site.

Who processes data for us

• Stripe - payments (EU and USA).
• Hetzner - server hosting (Germany).
• Anthropic - automated review of materials and caption writing (USA).
• Brevo - transactional email (EU).
• Meta (Instagram) - publication. Once published, your Feature is public on Instagram.

Transfers outside the EEA rely on the EU-US Data Privacy Framework or Standard Contractual Clauses.

How long we keep it

• Uploaded files: deleted 30 days after publication or refund. Unpaid orders: deleted after 2 days.
• Order and payment records: 5 years from the end of the year of payment (tax rules), then deleted.

Your rights

You can ask for access, correction, deletion, restriction, portability, or object to processing based on legitimate interest. You can also complain to the Polish supervisory authority (Prezes UODO, uodo.gov.pl) or to the authority in your country.