ArchiFlow
Start for free

Privacy Policy

Last updated: 9 September 2026

1. Data controller

The data controller is ValueAdd sp. z o.o., ul. Jana Kazimierza 5, 01-248 Warsaw, Poland, KRS 0000518166, NIP (VAT ID) 5272718725, REGON 147364337. For anything related to your personal data, write to archiflow@udb.pl.

2. Scope

This policy covers the website archiflow.udb.pl and the ArchiFlow application at archiflowtool.udb.pl.

3. What data we collect

  • Account data — when you register in the application: email address, name, office name. When signing in with Google: email address and name from your Google account.
  • Data you enter into the application — projects, stages, messages, your office's client records, and file links you add while using the service.
  • Data of people signing documents — name and email address entered by the office, date and time of uploading the signed file. The signed document itself goes to the office folder on Google Drive or Dropbox; ArchiFlow keeps no copy.
  • Google Drive and Dropbox integration data — access tokens issued after your consent (encrypted in our database), identifiers of the folders you point to and the list of files in them. Google Drive access covers only files created by ArchiFlow or selected by you (drive.file scope); Dropbox access covers the project folder you choose. You can disconnect an integration in office Settings with one click, which deletes the tokens.
  • Client portal activity — the date a tab was last opened, used to show the client what is new.
  • Contact form — name, email address, office name, and message content.
  • Technical data — IP address, browser type, and visit time (server logs).
  • Analytics data — visit statistics collected by Google Analytics (see the Cookies section).

4. Why we process data

  • Providing the ArchiFlow service — maintaining your account, projects, and client portal (basis: contract)
  • Responding to contact form messages (basis: legitimate interest)
  • Billing paid plans and issuing invoices (basis: legal obligation)
  • Analysing website traffic to improve the site (basis: legitimate interest)

5. Who processes data on our behalf

  • Vercel Inc. — website and application hosting
  • Neon Inc. — application database
  • Google LLC — visit statistics (Google Analytics), Google sign-in, email, Google Drive (the project folder selected by the office)
  • Dropbox, Inc. — the project folder selected by the office, if the office connected Dropbox

Some of these providers process data outside the European Economic Area. In those cases, transfers rely on Standard Contractual Clauses approved by the European Commission.

6. Cookies and analytics

The website uses Google Analytics 4 (loaded via Google Tag Manager) to collect visit statistics: page views, traffic sources, and pages visited. For this purpose, Google stores cookies with a random browser identifier. You can block them in your browser settings or install the Google Analytics opt-out add-on — the site works normally without them.

7. How long we keep data

  • Account data and data entered into the application — for as long as you use the service; deleted when your account is removed
  • Contact form messages — up to 2 years after the correspondence ends
  • Billing data — for the period required by tax law (5 years)
  • Google Analytics statistics — up to 14 months

8. Your rights

You have the right to access, rectify, delete, restrict, and port your data, and to object to processing. Just email archiflow@udb.pl. You can also lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (uodo.gov.pl).

9. Changes to this policy

We will announce significant changes on this page and notify application users by email. The last update date is always shown at the top of this document.