Privacy notice

Controller

The controller is Matej Lukášik, business ID 50113801, Ulica Hlboká 5943/14, 91701 Trnava, registered with Okresný úrad Trnava, živnostenský register č. 250-37148. Contact for privacy questions and rights requests: matej@post.work.

The public record is available in the Slovak Trade Register.

Early-access waitlist

When you join, we process your email address, consent version and time, submission origin and, when present, a campaign code identifying the link that led to the form, plus essential technical data used to protect the form. We collect the data directly from you.

We use it to tell you about post.work availability and early access, and to measure which waitlist links result in signups. The legal basis is consent under Article 6(1)(a) GDPR. Providing it is optional; without it, we will not send those messages.

We keep the record for 12 months after consent and delete it no later than the following day, or earlier if you withdraw. Withdraw by emailing matej@post.work or using the direct unsubscribe method in a message.

Public website and security

When you visit, we may process the IP address, request time, browser details, requested path, and security events. We use this to deliver and protect the website, prevent abuse, and diagnose faults. The legal basis is our legitimate interests under Article 6(1)(f) GDPR; you have the right to object.

Operational and security logs are kept only as long as needed for their purpose, incident handling, or a legal obligation.

Application and paid services

Depending on the enabled features, we process account, organisation, permission, communication, customer-material, workflow, billing, feature-use, error, and security data. We use it for pre-contract steps, contract performance, support, security, and legal obligations. The legal basis is Article 6(1)(b), (c), or (f) GDPR as applicable.

We keep this data during the engagement and afterwards for the period required by law, needed to resolve claims, or specified in the relevant contract. Without contractually necessary data, we may be unable to create an account or provide the agreed service.

Optional analytics

Plausible and PostHog EU load on the public website only after consent. They may process path views, allowlisted product events, technical data, and—if separately enabled—masked session replay. PostHog automatic interaction capture is disabled; text, inputs, attributes, query strings, request bodies, and sensitive headers are blocked or masked.

The legal basis is consent. Change it at any time through “Cookie settings” in the footer. We do not use analytics for advertising profiles or sell personal data. See Cookies for details.

Recipients and transfers

Hosting, security, form-protection, email, payment, sign-in, analytics, and configured model or integration providers may process data as needed for their function. Professional advisers and public authorities may also receive data where legally required. Provider categories and currently used services are listed under Service providers.

For transfers outside the EEA, we use the applicable GDPR Chapter V mechanism, such as an adequacy decision or standard contractual clauses, depending on the provider.

Your rights

Subject to the legal conditions, you may request access, rectification, erasure, restriction, or portability. You have the right to object to processing based on legitimate interests and may withdraw consent at any time without affecting earlier processing.

Email matej@post.work; we respond without undue delay, normally within one month. You may also lodge a complaint with the Office for Personal Data Protection of the Slovak Republic or another competent supervisory authority.

Automated decisions

Waitlist and public-website data is not used for automated individual decision-making or profiling that produces legal or similarly significant effects. If a customer implementation required such processing, it would be addressed separately before activation.