PRIVACY POLICY
This Privacy Policy explains what personal data Analytics Brain, at brain.witbee.com (the “Website”), collects, why, and what rights you have over it. It applies to the Website and the Services described in our Terms of Service - the webinars, newsletters, knowledge base, and connectors (including the Analytics Brain MCP connector) we make available through it.
Capitalized terms used but not defined here have the meaning given to them in the Terms of Service.
This is a separate document from the privacy policy of Witbee's main website, www.witbee.com - Analytics Brain is a distinct product with its own, smaller footprint of data.
I. Who we are
Witbee - WITBEE spółka z ograniczoną odpowiedzialnością z siedzibą w Warszawie, address: ul. Ordynacka 9/33, 00-364 Warsaw, Poland, KRS: 0000623475, NIP: 5252662720, REGON: 364731210, registry court: Sąd Rejonowy dla m.st. Warszawy w Warszawie – XII Wydział Gospodarczy Krajowego Rejestru Sądowego, share capital: 30.000,00 PLN – the controller of the personal data described here.
II. What we collect
To create an Account, we ask for an email address, a password, and your first and last name. Your profile also stores a display language and time zone, and optionally a short bio and a profile picture - all of which you control and can change at any time.
If you connect an AI assistant through the Analytics Brain MCP connector, we issue that assistant an access token scoped to your Account, so it can read the same knowledge-base content you can already see when signed in. We do not receive or store your conversations, prompts, or the assistant's replies - the connector answers a tool call and returns knowledge-base content, nothing more. See Section IV of the Terms for what the connector can and cannot do.
We keep a small internal log of security-relevant events - sign-ins, registrations, and account removals - for fraud prevention and troubleshooting. This log is not used for marketing or shared with advertisers.
III. Cookies
The Website sets three cookies, all first-party and all functional:
- a session cookie that keeps you signed in;
- a cookie that remembers your light/dark theme preference;
- a cookie that remembers your chosen language.
None of these are used for advertising or cross-site tracking, and the Website does not load any third-party analytics or advertising scripts - no Google Analytics, no Facebook Pixel, no LinkedIn or Bing ad tags. If that ever changes, we will update this Policy and, where the law requires it, ask for your consent first.
IV. Why we process your data
- To create and operate your Account, and to let you sign in - necessary to perform our contract with you (Article 6(1)(b) GDPR).
- To send you account-related email - confirming your address, resetting your password, or reminding you about a webinar you registered for - also necessary to perform that contract. These emails are sent through our provider, SendGrid.
- To keep the security log described above, and to investigate abuse or a security incident - our legitimate interest in keeping the Service safe (Article 6(1)(f) GDPR).
We do not use your data for advertising, and we do not sell it.
V. Who we share data with
We use a small number of processors to run the Website, each bound by their own data-processing terms with us:
- Google Cloud, which hosts the Website and its infrastructure, and stores the security log described above;
- SendGrid, which delivers the account-related emails described above.
Beyond these processors, we do not share your personal data with third parties, except where required by law or to protect our legal rights, as described in our Terms of Service.
Your data is processed in the European Economic Area, or by processors that provide appropriate safeguards for data transferred outside it under Chapter V GDPR.
VI. How long we keep it
We keep your Account data for as long as your Account exists. If you close your Account, we delete or anonymize the data described in Section II within a reasonable time, except where we are required to keep it longer by law, or need to for the establishment, exercise, or defense of legal claims.
VII. Your rights
Under the GDPR, you have the right to:
- ask us to confirm whether we process your personal data, and to access it;
- ask us to correct inaccurate data, or complete incomplete data;
- ask us to erase your data;
- ask us to restrict processing;
- ask us to transfer your data to you or another controller;
- object to processing based on our legitimate interest;
- lodge a complaint with a supervisory authority - in Poland, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).
To exercise any of these rights, contact us at info@witbee.com. We may ask you to verify your identity before acting on a request.
VIII. Security
We use industry-standard safeguards to protect your data, including encryption in transit and access controls on the systems that store it. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security - if you believe your data has been compromised, please contact us immediately.
IX. Children
The Website is not directed at, and we do not knowingly collect data from, anyone under 18.
X. Changes to this Policy
We may update this Policy from time to time. If we make a material change, we will make the updated Policy available through the Service and indicate the date of the latest revision.
XI. Contact
company name: Witbee spółka z ograniczoną odpowiedzialnością z siedzibą w Warszawie,
address: ul. Ordynacka 9/33, 00-364 Warsaw, Poland,
KRS number: 0000623475,
NIP: 5252662720,
REGON: 364731210,
by e-mail, to the address: info@witbee.com