Privacy Policy
Last updated: April 10, 2026
This Privacy Policy describes how 10 Seats Agency – Marcin Pastuszek ("we," "us," or "our") collects, uses, and shares information when you use the ShareOfAsk platform and related services (the "Service"). ShareOfAsk is an AI Brand Intelligence platform that tracks how artificial intelligence models recommend, rank, and describe brands.
By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.
1. Data Controller
The data controller responsible for your personal data is:
10 Seats Agency – Marcin Pastuszekul. Strażacka 466-446 Deszczno, PolandNIP: PL5993134291REGON: 081124785Email: marcin@10seats.agency
2. Information We Collect
2.1 Information You Provide
- Account Information. When you create an account, we collect your name and email address.
- Payment Information. When you subscribe to a paid plan, payment processing is handled by Stripe, Inc. We do not store your full credit card number, expiration date, or CVC on our servers. Stripe may collect and process your payment card details, billing address, and transaction history in accordance with their own privacy policy (https://stripe.com/privacy).
- Communications. If you contact us for support or other inquiries, we collect the content of your messages along with your name and email address.
2.2 Information Collected Automatically
- Usage Data. We collect information about how you interact with the Service, including pages viewed, features used, search queries entered, brands and competitors you track, and the date and time of your visits.
- Device and Log Data. We automatically collect your IP address, browser type and version, operating system, referring URL, and device identifiers.
- Cookies and Similar Technologies. We use cookies, local storage, and similar tracking technologies to maintain your session, remember your preferences, and analyze usage patterns. See Section 7 for details.
2.3 Information from Third Parties
- AI Model Outputs. The Service queries publicly available AI models (such as ChatGPT, Claude, Gemini, Perplexity, Mistral, and Grok) to generate brand visibility data. These queries do not contain your personal data.
- Stripe. We receive limited transaction data from Stripe, such as confirmation of successful payments and subscription status.
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the Service, including generating AI Visibility Scores, Position Rankings, Share of Voice metrics, Competitor Replacement Risk assessments, and Question Coverage reports.
- Process your payments and manage your subscription.
- Send you transactional emails (account confirmations, billing receipts, security alerts).
- Send you product updates and marketing communications, where you have opted in. You may unsubscribe at any time.
- Monitor and analyze trends, usage, and activity to improve the user experience.
- Detect, prevent, and address fraud, abuse, and technical issues.
- Comply with legal obligations.
4. Legal Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA), our legal basis for collecting and using your personal data depends on the specific data and context:
- Performance of a Contract. Processing your account and payment data is necessary to provide you with the Service under our Terms of Service.
- Legitimate Interests. We process usage and device data to improve the Service, ensure security, and communicate relevant product updates, provided these interests are not overridden by your rights.
- Consent. Where required, we rely on your consent for marketing communications and non-essential cookies. You may withdraw consent at any time.
- Legal Obligation. We may process data to comply with applicable laws, such as tax and accounting requirements.
5. How We Share Your Information
We do not sell your personal data. We share information only in the following circumstances:
- Service Providers. We share data with third-party service providers who perform services on our behalf, including:
- Stripe — payment processing
- Webflow — website hosting
- Analytics providers — usage analytics (e.g., Google Analytics, Plausible, or similar)
- Email providers — transactional and marketing emails
- Cloud infrastructure — hosting and data storage
These providers are contractually obligated to use your data only to perform services for us and in compliance with applicable data protection laws. - Legal Requirements. We may disclose your information if required to do so by law, regulation, legal process, or governmental request.
- Business Transfers. In connection with a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity.
- With Your Consent. We may share your data for other purposes if you provide explicit consent.
6. International Data Transfers
Your information may be transferred to and processed in countries outside the European Economic Area, including the United States (for services such as Stripe and cloud infrastructure providers). When we transfer data outside the EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission or reliance on the service provider's adequacy certification.
7. Cookies and Tracking Technologies
We use the following types of cookies:
- Strictly Necessary Cookies. Required for the Service to function (e.g., session authentication, security tokens). These cannot be disabled.
- Analytics Cookies. Help us understand how visitors interact with the Service by collecting aggregated usage information.
- Preference Cookies. Remember your settings and choices (e.g., selected brands, dashboard layout).
You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Service.
8. Data Retention
We retain your personal data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal, tax, or accounting purposes (typically up to 5 years for financial records under Polish law).
Usage data and analytics may be retained in aggregated, anonymized form indefinitely.
9. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access. Request a copy of the personal data we hold about you.
- Rectification. Request correction of inaccurate or incomplete data.
- Erasure. Request deletion of your personal data ("right to be forgotten").
- Restriction. Request that we limit the processing of your data.
- Data Portability. Receive your data in a structured, machine-readable format.
- Objection. Object to the processing of your data based on legitimate interests or for direct marketing.
- Withdraw Consent. Where processing is based on consent, you may withdraw it at any time.
To exercise any of these rights, contact us at marcin@10seats.agency. We will respond within 30 days as required by GDPR.
You also have the right to lodge a complaint with a supervisory authority. In Poland, this is the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, https://uodo.gov.pl.
10. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit (TLS/SSL), secure authentication, access controls, and regular security reviews.
No method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
11. Children's Privacy
The Service is not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child under 16, we will take steps to delete it promptly.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of the Service after changes are posted constitutes your acceptance of the revised policy.
13. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us at:
10 Seats Agency – Marcin Pastuszek
ul. Strażacka 4, 66-446 Deszczno, Poland
Email: marcin@10seats.agency