Privacy policy

Last updated: 07.10.2026

This is a translation. The Polish version of this document is binding and prevails in case of any discrepancy.

1. Data controller

The controller of personal data is Andrii Sovietov, sole trader registered in Poland (jednoosobowa działalność gospodarcza), NIP 6762705765, REGON 543118126, address: ul. Szlak 77/222, 31-153 Kraków, Poland. Contact on personal data matters: [email protected], tel. +48 570 415 387. The website bevisible.social operates under the BeVisible brand. We have not appointed a data protection officer, as we are not required to; for any data matter, please write to the email above.

2. What data we process

• data from the request form: name and phone number or a Telegram or Instagram username;
• your Instagram username and the publicly available content of that profile, if you order a free profile review, and the channel you chose for receiving it;
• answers from the brief, if you fill it in: information about your business, services and way of communicating;
• data of subscribers and one-time payers passed to us by Stripe: name or company name, email, phone, tax ID and billing address, subscription and payment status (we do not receive card details);
• where you came to the site from (the referring page and the utm parameters of the link), saved together with a request or subscription;
• materials you send while working with us: photos, video and voice recordings, texts (see point 9);
• consents to a digital double sent through the form on the site: full name, email, account or company, date and time, text of the consent;
• correspondence by phone, Telegram or email;
• anonymous visit statistics: page, date, source of the visit, language, device type (phone or computer) and a daily identifier made from the IP address and browser with a hash function and a salt that changes every day; the IP address itself is not stored in the statistics, and the identifier does not allow the same person to be recognised on later days;
• technical data in server logs: IP address, date and time of the visit, browser type.

3. Purposes and legal grounds

• replying to a request, the free profile review and preparing an offer: Art. 6(1)(b) GDPR (steps taken at your request before entering into a contract);
• concluding and performing the contract, including the subscription: Art. 6(1)(b) GDPR;
• invoicing and accounting: Art. 6(1)(c) GDPR (legal obligation);
• visit statistics and checking which channels bring requests and subscriptions: Art. 6(1)(f) GDPR (the controller's legitimate interest in developing the site and assessing its own promotion);
• site security and establishing or defending claims: Art. 6(1)(f) GDPR (the controller's legitimate interest);
• a digital double of the client or an animated character based on their photo: Art. 6(1)(b) GDPR (performing the service they ordered); a digital double of another person: Art. 6(1)(a) GDPR (that person's consent), see point 9.

4. How long we keep data

• requests and profile reviews: 12 months from the request, then deleted automatically;
• briefs and other client data: for as long as we work together;
• consents to a digital double: while the double is used and 3 years after the consent is withdrawn or the cooperation ends, so that we can show the consent existed;
• client materials: for as long as we work together, and deleted no later than 6 months after it ends (earlier on request); finished Reels and a description of the cooperation may be shown as examples of our work, including in advertising of our services, under § 6 of the Terms;
• finished videos in your account (bevisible.social/account/): 30 days from delivery on Google Drive, and the records of your Reels (number, title, date) for as long as we work together;
• the log of your account logins (date and time, how you logged in, device type: phone or computer): for as long as we work together;
• subscriber data: for the length of the subscription and 3 years after it is cancelled (limitation period for claims), then deleted automatically;
• data of one-time payers (order with a balance): for the length of the cooperation, which ends when the balance is used up or expires (at the latest 6 months after payment), and 3 years after it (limitation period for claims), then deleted automatically;
• accounting documents: for as long as tax law requires (5 years from the end of the tax year);
• visit statistics: 24 months, then deleted automatically;
• server logs: as set by the hosting provider, usually a few weeks.

5. Who receives the data

• the site hosting provider (Fornex Hosting S.L., servers in Germany);
• Stripe (Stripe Payments Europe, Ltd.), which processes card payments and subscriptions; we do not see or store card details;
• the email provider through which we receive request notifications;
• Telegram, if you choose this channel for contact or sending files;
• providers of the tools that client materials pass through: Anthropic (writing scripts from recordings and descriptions), ElevenLabs (voice-over), HeyGen (digital double), Higgsfield (3D cartoons), Google Drive (file storage), Notion (organising work on the Reels) and Publer or Buffer (delivering finished Reels to your post scheduling service, if you ask for it);
• our accountant, within the scope of invoice data.

Some of these providers (Stripe, Telegram, Google, Notion, Publer, Buffer, Anthropic, ElevenLabs, HeyGen, Higgsfield) may process data outside the European Economic Area, mainly in the USA. This is based on a European Commission adequacy decision (including the EU-US Data Privacy Framework for companies that have joined it) or on standard contractual clauses approved by the Commission.

6. Your rights

You have the right to access your data, rectify it, erase it, restrict processing, port it, and object to processing based on legitimate interest. Where processing is based on consent, you may withdraw it at any time; this does not affect the lawfulness of processing before withdrawal. Just write to [email protected]; we reply without undue delay, within one month at the latest. You may also lodge a complaint with the President of the Polish Personal Data Protection Office (Prezes UODO, ul. Stawki 2, 00-193 Warszawa).

7. Providing data is voluntary

Providing data is voluntary, but without a name and a contact we cannot reply to your request. We do not make automated decisions about you and do not profile you.

8. Cookies and browser storage

Cookies are small files stored in your browser. Under Art. 399 of the Polish Electronic Communications Law (Prawo komunikacji elektronicznej), we use strictly necessary cookies without consent, because the website cannot work without them. All others (analytics and marketing) are switched on only after you consent in the banner (Art. 6(1)(a) GDPR).

At the moment the website uses only strictly necessary cookies and browser storage. All of them are ours, none are shared with other companies:

Name	What it is for	How long
bv_consent	remembers your choice in the cookie banner so we don't ask on every visit	12 months
bv_lang	remembers the site language you picked in the language switcher, so the site opens in that language next time	12 months
bv_client	set after you pay for a subscription: the home page then shows how to send your materials instead of the free trial button	12 months
bv_cab	keeps you logged in to your account at bevisible.social/account/ after you open the link from the bot or the email	30 days
bv_brief_en, bv_brief_uk, bv_brief_pl, bv_brief_es (localStorage)	a draft of your answers in the brief, only on this device, so they are not lost if you close the page	until the brief is sent
bv_lang (sessionStorage)	the language of the page you went to payment from, so the thank-you page opens in the same language	until the browser tab is closed
bv_calc_auth	access to a private calculator for those who know the password	up to 10 years or until cookies are deleted
wordpress_*, wp-settings-*	logging in to the admin panel, for website administrators only	until logout

If we add analytics or advertising tools (for example Google Analytics or the Meta Pixel), the banner will ask for consent separately for each category, and until then these tools will not run. We will then describe them in this table. The buttons “Only necessary” and “Accept all” are equal, and refusing does not limit your use of the website.

You can change or withdraw your consent at any time via the “Cookie settings” link in the website footer. You can also delete or block cookies in your browser settings; blocking the necessary ones may make the forms work worse.

Once you go to the Stripe payment page or to Telegram, the cookie rules of those services apply.

9. Client materials

Materials sent by clients (photos, video and voice recordings, texts) are used only to make the ordered Reels, photo posts, carousels and texts and are not passed to anyone except the tool providers listed in point 5.

If other people can be seen or heard in the materials (for example the client's customers or staff), the client is the controller of their data and we process it on the client's behalf, under the processing terms in § 13 of the Terms. The client is responsible for these people agreeing to the use of their image.

We make a digital double of the client (appearance and voice) or an animated character based on their photo at the client's order, from recordings and photos the client provides; the order means consent to the use of their appearance and voice for this purpose. We make a digital double of another person (for example a presenter) only with that person's explicit consent. In both cases this can be withdrawn at any time: we then stop making new Reels with the double and delete its data from the tools where it was created.

10. Changes to this policy

We may update this policy, for example after adding a new tool to the website. The current version is always on this page, and the date of the last change is shown at the top.