InstaCalendar Privacy Policy

1. Controller

The controller for data processed by the calendar maker is Piotr Markot, Poland. Contact: markotpiotr@gmail.com or the phone number available below.

2. Data we process

We may process your name, email, uploaded photos, crop and correction settings, selected year and template, session, order and payment identifiers, email-delivery status, IP address, security logs, analytics data and cookies depending on your consent settings.

We do not receive full payment-card details.

3. Purposes and legal bases

Data is used to perform the contract and deliver the PDF, handle payments and complaints, maintain security, comply with legal duties and operate limited analytics. Legal bases include contract performance, legal obligations, legitimate interests in security and claims handling, and consent where required for analytics.

4. Recipients

Data may be shared only as needed with hosting and email providers, 1Koszyk or Paddle for payment processing, Google Analytics subject to cookie choices, and technical service providers. Paddle acts as Merchant of Record for Paddle orders and processes buyer data under its own privacy notice.

5. Retention

Source photos are deleted after calendar generation. The finished PDF and private link are deleted after the period shown in the maker and email. Order, payment and complaint records may be kept for legally required periods and until claims expire. Security logs are retained only as long as necessary.

6. Your rights

You may request access, correction, deletion, restriction, portability or object to processing, and withdraw consent. You may complain to the Polish data protection authority or your local supervisory authority. Some records must be retained where required by law.

7. Security and international transfers

The service uses HTTPS, private download tokens and short file-retention periods. Providers such as Paddle or Google may process data outside the EEA using legally required safeguards.