Privacy Policy

How Appstronauts collects and uses personal data when you visit appstronauts.co, contact us, book a call or apply for a job. Last updated: 30 October 2026.

1. Who we are

The controller of your personal data is Appstronauts Sp. z o.o., ul. Twarda 18, 00-105 Warsaw, Poland, registered in the National Court Register (KRS) under no. 0000579188 by the District Court for the Capital City of Warsaw, XII Commercial Division, NIP (VAT) PL7010510580, REGON 362674063, share capital PLN 10,000.

Where you sign a contract with our UK company, Appstronauts LTD, 71-91 Aldwych, London, WC2B 4HN, that company is the controller of the data needed for that contract.

Privacy questions: hello@appstronauts.co. We have not appointed a Data Protection Officer, as we are not required to.

2. What data we use and why

Situation	Data	Purpose	Legal basis (GDPR)	How long we keep it
Contact form or email	Company email, phone (optional), your message and anything else you choose to tell us	Replying to your enquiry and preparing an offer	Art. 6(1)(f) – our legitimate interest in answering business enquiries; Art. 6(1)(b) – steps before a contract	Up to 2 years after our last contact, unless a contract follows
Booking a call (Calendly)	Name, email, company, meeting time, anything you add to the booking	Arranging and holding the call	Art. 6(1)(f) and 6(1)(b)	Up to 2 years after the call
Marketing updates (only if you tick the box)	Name, email	Occasional updates about our services	Art. 6(1)(a) – your consent	Until you withdraw consent
Clients and partners	Business contact details of the people we work with	Performing the contract, invoicing, accounting	Art. 6(1)(b), 6(1)(c) and 6(1)(f)	For the contract and as long as tax and accounting law requires (usually 5 years after the end of the tax year)
Job applications	CV and the data you send us	Recruitment for the role you applied for (and future roles only if you agree)	Art. 6(1)(b) and Art. 22¹ of the Polish Labour Code; Art. 6(1)(a) for future recruitment	Until the recruitment ends; up to 12 months if you consent to future recruitment
Website analytics and marketing cookies (only after consent)	Cookie identifiers, pages visited, device and browser data, approximate location	Understanding how the site is used and measuring our campaigns	Art. 6(1)(a) – your consent given in the cookie banner	See section 4
Security and spam protection	IP address, technical logs, reCAPTCHA signals	Keeping the site and forms secure	Art. 6(1)(f)	Logs up to 90 days

Giving us your data is voluntary, but without the required fields we cannot reply to your enquiry. We do not make decisions about you based solely on automated processing.

3. Who receives your data

We share data only with providers who help us run the business, under data processing agreements:

website hosting and email providers,
Calendly (meeting booking),
Google (Google Workspace, Google Analytics, Google Tag Manager, reCAPTCHA) – analytics only after consent,
Microsoft (Microsoft 365, Microsoft Clarity) – Clarity only after consent,
Meta Platforms (Meta Pixel) – only after consent,
Clutch (review widget),
our accounting and legal advisers,
Appstronauts LTD (UK), where needed to serve UK clients.

Some of these providers process data outside the European Economic Area, mainly in the United States. In those cases transfers are based on the EU–US Data Privacy Framework (for certified companies) or on the European Commission’s Standard Contractual Clauses. Transfers to the UK are covered by the European Commission’s adequacy decision. You can ask us for a copy of the relevant safeguards.

4. Cookies

We use:

Necessary cookies – needed for the site to work, security and remembering your cookie choice. These do not require consent.
Analytics cookies (Google Analytics, Microsoft Clarity) – used only if you accept them.
Marketing cookies (Meta Pixel) – used only if you accept them.

You can accept, reject or choose categories in the cookie banner and change your choice at any time using the “Cookie settings” link at the bottom of every page. Analytics and marketing cookies are kept for up to 13 months. The full list of cookies is shown in the cookie settings.

5. Your rights

You have the right to:

access your data and get a copy of it,
correct it,
have it deleted,
restrict processing,
data portability,
object to processing based on our legitimate interest, and at any time to direct marketing,
withdraw consent at any time, without affecting what we did before you withdrew it.

To use any of these rights, write to hello@appstronauts.co. We reply within one month.

You can also complain to a data protection authority. Our lead authority is the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland, uodo.gov.pl. You may also contact the authority in your own country, for example the ICO in the UK or your local authority in Germany, Austria or Switzerland.

6. Changes

We update this policy when the way we use data changes. The date at the top shows the latest version.