Privacy Policy

1. Data Controller

The data controller for findmydomain.dev (“the Service”) is:

Ola Piętka (sole proprietorship / jednoosobowa działalność gospodarcza)

ul. Zawodzie 20, 80-726 Gdańsk, Poland

NIP: 5833430945 · REGON: 389087991

For privacy-related inquiries, please use our contact form and select the “Legal / Privacy” category.

2. Information We Collect

Account information: When you create an account, we collect your email address and password (hashed). If you sign in with Google, we receive your name and email from Google.

Usage data: We store the domain name searches you generate, project details, favorited names, and voting activity associated with your account.

Payment information: Premium payments are processed by Stripe. We do not store your credit card details — Stripe handles all payment data securely.

Analytics: We use Vercel Analytics to collect anonymous usage statistics such as page views and device type. No personally identifiable information is collected through analytics.

3. Legal Basis for Processing (GDPR)

We process your personal data on the following legal bases:

• Contractual necessity — To provide the Service, manage your account, process payments, and deliver AI-generated domain name suggestions (Art. 6(1)(b) GDPR).
• Legitimate interest — To enforce rate limits, prevent abuse, monitor AI generation quality, and improve the Service through anonymous analytics (Art. 6(1)(f) GDPR).
• Legal obligation — To comply with applicable tax, accounting, and regulatory requirements (Art. 6(1)(c) GDPR).
• Consent — Where required, such as for optional marketing communications. You may withdraw consent at any time (Art. 6(1)(a) GDPR).

4. How We Use Your Information

• To provide and operate the domain name generation service
• To manage your account and premium access
• To save your projects, generated names, and favorites
• To enable shared voting lists and anonymous voting
• To enforce rate limits and prevent abuse
• To improve the service through anonymous analytics
• To monitor and trace AI generation quality (via LangSmith)

We do not sell, rent, or share your personal information with third parties for marketing purposes.

5. Third-Party Services

We use the following third-party services that may process your data:

• Supabase — Authentication and database hosting
• Stripe — Payment processing for premium purchases
• OpenAI — AI-powered name generation (free tier). Your project descriptions are sent to OpenAI to generate domain name suggestions.
• Anthropic (Claude) — AI-powered name generation (premium tier). Your project descriptions and instructions are sent to Anthropic to generate domain name suggestions.
• Namecheap — Domain availability checking. Domain names are sent to Namecheap's API to verify availability and pricing.
• LangSmith (LangChain) — AI generation tracing and quality monitoring. Prompts and generated results may be logged for debugging and quality assurance.
• Vercel — Hosting and anonymous analytics

Each third-party service processes data according to its own privacy policy. We encourage you to review their policies.

6. International Data Transfers

The Service is operated from Poland (EU). However, our third-party providers (including Supabase, Stripe, OpenAI, Anthropic, Namecheap, and Vercel) may process data in the United States and other countries outside the European Economic Area (EEA).

Where personal data is transferred outside the EEA, we rely on appropriate safeguards such as the service provider's adherence to Standard Contractual Clauses (SCCs), adequacy decisions, or other mechanisms recognized under GDPR. By using the Service, you acknowledge these transfers.

7. Cookies

We use essential cookies for authentication (maintaining your login session) and for anonymous voter identification on shared voting pages. We do not use advertising or tracking cookies.

8. Data Retention

Your account data, projects, and generated names are retained as long as your account is active. If you wish to delete your account and associated data, please contact us via our contact form. Upon account deletion, we will remove your personal data within 30 days, except where retention is required by law.

9. Data Security

We use industry-standard security measures including encrypted connections (HTTPS), hashed passwords, and secure third-party services. However, no method of transmission over the internet is 100% secure.

In the event of a data breach that affects your personal information, we will notify affected users and any relevant supervisory authorities without undue delay and in accordance with applicable law, including GDPR Article 33.

10. Children's Privacy

The service is not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected data from a child under 16, we will delete that information promptly. If you believe a child under 16 has provided us with personal data, please contact us.

11. Your Rights

Under GDPR and other applicable data protection laws, you have the following rights regarding your personal data:

• Access — Request a copy of the personal data we hold about you
• Correction — Request correction of inaccurate personal data
• Deletion — Request deletion of your personal data
• Portability — Request a machine-readable copy of your data
• Restriction — Request that we restrict processing of your data
• Objection — Object to processing of your data based on legitimate interest
• Withdraw consent — Where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, use our contact form and select “Legal / Privacy”. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority. For users in Poland, this is the President of the Personal Data Protection Office (UODO).

You can also delete your projects and generated names directly through the dashboard at any time.

12. California Residents

Under the California Consumer Privacy Act (CCPA/CPRA), California residents have additional rights including the right to know what personal information is collected and how it is used, the right to delete personal information, and the right to opt out of the sale of personal information. We do not sell your personal information. To exercise your rights, use our contact form.

13. Changes to This Policy

We may update this privacy policy from time to time. We will notify users of significant changes by updating the date at the top of this page. For material changes, we will make reasonable efforts to notify you via the email associated with your account.

14. Contact

If you have questions about this privacy policy, please use our contact form and select the “Legal / Privacy” category.

Ola Piętka · ul. Zawodzie 20, 80-726 Gdańsk, Poland · NIP: 5833430945