Privacy Policy

Last updated: July 2026

This is a baseline version for our interest-validation phase (trial period), not a final legal document. Before a full launch — especially with higher traffic or paid plans — we'll have it reviewed by a lawyer.

This is an English translation provided for convenience. In case of any discrepancy, the Czech version is binding.

1. Who processes your data

The operator of the Vyreportuj To website and app (referred to below as “we” or “the service”). For any privacy-related questions, you can reach us at kontakt@vyreportujto.cz.

2. What data we process

  • Login credentials — email and password (we never see the password itself; it’s managed by Supabase Auth).
  • Data you upload to the app — files (CSV/Excel), SQL/DAX queries, and their analyses.
  • Technical data needed to run the service — your login session (cookies), basic site traffic (Vercel Analytics — anonymized, no third-party cookies).

3. How we handle uploaded data

This is the core of our architecture, and we take it seriously:

  • We read column meaning from a sample only. When you upload a file, we send the AI model only its structure and a handful of leading rows to recognize what each column means — never the full file.
  • You trigger any deeper analysis. Creating a report, dashboard, answering a question, or the SQL/DAX advisor always requires your explicit action — nothing runs automatically in the background without your knowledge.
  • Your files stay in your account (Supabase Storage), and our app has no access to other users’ data — every query and operation is always scoped to the signed-in user.

4. Who we share data with (processors)

To run the service, we use these processors:

  • Supabase (database, authentication, file storage).
  • Vercel (app hosting, basic anonymous traffic analytics).
  • An AI model provider (depending on current configuration — Google, or possibly Anthropic or OpenAI) — receives only the text needed to process a specific request (see item 3).

5. Retention period

We retain data for as long as your account exists. After account deletion (or at your request), we remove login credentials and uploaded data within a reasonable time.

6. Your rights

You have the right to access your data, correct it, have it erased, restrict its processing, port it, and object to its processing. You may also contact the Czech Office for Personal Data Protection (uoou.cz). To exercise your rights, contact us at the email above.

7. Cookies

We only use technical cookies necessary for sign-in (Supabase Auth session). Your theme choice inside the app is stored locally in your browser, not in a cookie. We don’t use marketing or third-party tracking cookies.