Privacy Policy

The controller of personal data is MIPROM Piotr Romański, ul. Antonia Vivaldiego 78/7, 52-129 Wrocław, Poland, NIP 8862784423.

For privacy matters, contact: kontakt@citylightmanager.pl.

This policy describes how we process personal data when you use the Citylight Manager website and mobile app (the “Service”).

Depending on how you use the Service, we may process: account and sign-in data (an identifier, email or other access method, and session data); company and relationship data in the Service; order data and work documentation, including completion photos and related information; advertising-site location data, including address, map position, and related catalogue materials; device location; feedback you send us (the message, your email, company, app version, and platform); payment data when you buy a plan on the website; and technical data needed to operate the Service, including preferences, data stored temporarily on the device, and, on the website, essential cookies.

Phone location is processed on the device and is not sent to our servers. While the app is open, it is used to show your position on the map. Background location is read only with your consent each time, including when the app is closed or not in use, to detect that you left a site without taking a completion photo and to show a notification. It stays on the phone. The map provider receives the visible map area in order to draw the map, and a coordinate may be sent to Apple or Google to resolve a place name. We do not keep a GPS trail.

Order data, completion photos, and advertising-site locations are visible to people in the same company.

Card numbers are processed by Stripe. We do not receive or store the full card number.

We process data to provide and operate the Service, including accounts, orders, locations, and work documentation — on the basis of a contract (Article 6(1)(b) GDPR).

We also process data to keep the Service secure, reliable, and improving — on the basis of our legitimate interests (Article 6(1)(f) GDPR). We transmit data over an encrypted connection. Access to data in the Service is limited to your account and to people in the same company.

Device features such as camera, location, or photo library are used when you grant permission (Article 6(1)(a) GDPR). You can withdraw permission in your device settings. Background location is read only with your consent each time, and only to warn you if you leave a site without a completion photo.

Advertising-site locations added in the Service may be used to build and improve a global database of advertising locations, independently of any particular account. This concerns physical placement sites, not profiling or tracking people. Account data and documentation of specific jobs are not used for this purpose.

We do not sell personal data. We do not share it for marketing, advertising, or resale, and we do not use it to track you across apps or websites. We do not collect an advertising identifier.

People in the same company can see that company's orders, completion photos, and advertising-site locations.

We entrust data to service providers acting on our instructions, only as needed to run the Service. They protect personal data at least as stated in this policy. These providers are: Supabase (hosting and sign-in), Resend (email delivery), Stripe (payments on the website), Google Maps on Android (https://policies.google.com/privacy), Apple Maps on iOS, and Apple and Google as the stores that distribute the app.

Some of these providers, including Supabase, Resend, Stripe, and Google, may process data outside the European Economic Area. In those cases we use safeguards required by law, including standard contractual clauses.

We keep data for as long as you use the Service, and thereafter as required by law or to protect legal claims. Execution photos and PDF reports are kept according to the plan: 14 days on Free, 60 days on Pro, and a custom period on Enterprise. After retention expires we delete the files; the app still shows that a photo existed. Locations included in the global location database may remain in a form detached from the account.

When you delete your account we anonymise the sign-in email and your name, revoke access (including worker QR codes), and sign you out. We keep an internal user identifier, the date of deletion, and a one-way hash of the email so we can confirm a restoration request if you write to us from that address. We do not use that hash to sign you in or for marketing. We do not delete the company, its name, company or billing email, orders, advertising-site locations, completion photos, reports, or billing records. Those remain as company data, including where the law requires us to keep invoices. If the company email is your personal inbox, it stays as the company contact. Deleting the account does not cancel a subscription.

You can delete your account in the app profile settings, or by requesting deletion at kontakt@citylightmanager.pl. Deleting the account closes your sign-in. If you are the only owner, the company remains without an active owner. To restore an account or cancel a subscription, write to kontakt@citylightmanager.pl.

You have the right to access, rectify, erase, restrict, and port your data, and — where the law provides — to object to processing. Where processing is based on consent, you may withdraw it at any time, without affecting processing that took place before withdrawal. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO) in Poland, or with another competent supervisory authority.

You can delete your account in the app. You can exercise the other rights by contacting us at kontakt@citylightmanager.pl.

The website uses only cookies that are necessary for it to work, including remembering language preference. The mobile app does not use cookies.

The Service is intended for business use and is not directed at people under 16.

This policy may be updated. The current version is published on the website and in the app.