Privacy policy

Last updated: 19 October 2026. Controller: Adrian Zieliński, sole trader (JDG) registered in CEIDG, Poland (“Avisly”).

What we collect

Merchant account data (name, email, company name, billing). Phone numbers that a user typed into a merchant form in order to receive a booking, order or login message. Delivery logs (time, status, destination country). Support emails.

Why

To provide the SMS service the merchant asked for, to authenticate logins, to bill the account, and to meet telecom record-keeping rules. Legal bases: contract (Art. 6(1)(b) GDPR) and legal obligation (Art. 6(1)(c)).

SMS content

We send only transactional messages: confirmations, reminders for a booking the user made, order status, and one-time login codes. We do not sell numbers. We do not run marketing campaigns on Avisly.

Processors

Hosting in the EU. SMS delivery via regulated CPaaS providers (including Twilio) acting as processors. They receive the destination number and message body in order to deliver the SMS.

Retention

Message logs: 12 months. Account data: for the life of the contract plus 6 years for invoices. A user who replies STOP is dropped from further sends immediately.

Rights

Access, correction, deletion, restriction, portability, complaint to PUODO (uodo.gov.pl). Email kontakt at the address on the contact page.

We do not use the data for profiling that produces legal effects. No children’s product.