Privacy policy
Marketing website, demo and business enquiries. Updated: 5 November 2026.
Controller and contact
The controller is BRILUM sp. z o.o., ul. 29 Listopada 64, 99-300 Kutno, Polska, Poland, KRS 0001241371, tax ID 7752679245. Use the email below for privacy requests and enquiries.
Data and purposes
The form stores your name, work email, company, industry, message, selected plan and optional phone and readiness answers. We use these to respond and prepare a working relationship (GDPR Article 6(1)(b) for steps towards your contract, or Article 6(1)(f), our legitimate interest in handling business enquiries). Providing data is voluntary; required fields are needed to process the form. An enquiry does not subscribe you to marketing.
Demo, accounts and security
Demo changes are stored locally in your browser. After ChatGPT sign-in, the preparation workspace stores your account identifier, company information and product drafts on the server to provide account features. To prevent abuse, we process technical request data, a short-lived IP hash for submission limits and an administrator access log (legitimate interest, GDPR Article 6(1)(f)). The readiness assessment is informational and makes no decisions with legal effects.
Recipients and transfers
Authorised operator staff and infrastructure providers needed to run the site can access data: OpenAI (ChatGPT Sites and sign-in) and Cloudflare (hosting, database and network). Email correspondence also uses email providers. Processing may occur outside the EEA under the relevant provider terms and GDPR transfer mechanisms, including adequacy decisions or standard contractual clauses. Contact the controller for information about safeguards. This website form does not automatically send data to the production passport provider.
Retention
We retain enquiries while handling correspondence and preparing cooperation, then only as needed to evidence arrangements or defend claims until the applicable limitation period ends. Preparation account data is retained until use ends or deletion is requested, subject to the same claims exception. Local demo data, language and consent settings remain until changed or browser storage is cleared. Campaign parameters expire with the session unless included in a submitted enquiry.
Cookies and measurement
Necessary browser storage supports language, consent choices, demo data and authentication. Optional analytics and advertising tools, when configured, load only after consent (GDPR Article 6(1)(a)). With analytics consent, UTM campaign parameters may accompany your enquiry. Withdraw consent through Cookie settings in the footer; this does not affect the lawfulness of earlier processing.
Your rights
You may request access, correction, erasure, restriction and, where GDPR provides, portability. You may object to processing based on legitimate interests and withdraw consent. You may complain to the Polish supervisory authority, the President of UODO (uodo.gov.pl), or your competent supervisory authority. Contact the controller and identify the relevant enquiry or account.