1. Who controls your data
Kamil Dike, operating Kamil Dike Software and its FullHouseQA service, is the controller of the personal data described in this policy.
- Registered business
- Kamil Dike Software
- Operator
- Kamil Dike
- Registration
- Sole proprietorship registered in CEIDGNIP 7712920344 · REGON 522398493
- Business address
- Robotnicza 397-310 Wola MoszczenickaPoland
- VAT status
- Active VAT taxpayer
Use the email above for privacy questions or requests.
2. Data we collect
We may collect:
- Contact data: your email address and details you include in messages to us.
- Order data: selected testing hours, currency, order references, payment status, legal acknowledgements, and relevant dates.
- Testing brief: product URLs or build references, platforms, goals, priority flows, access preference, and environment or device details included with earlier orders.
- Access information: tester invitations or a one-time secret link when you choose to provide one. The link is forwarded to us and is not stored in the order database.
- Communications: emails, questions, feedback, and complaints.
- Technical data: IP address, browser or device information, request timestamps, and security logs generated when you use the website.
Stripe collects payment details on its checkout page. We do not receive or store your full card number.
3. Why we use it
We process personal data to:
- prepare for and fulfil your order, including testing, reporting, access setup, and customer support;
- process and confirm payments;
- keep accounting and tax records required by law;
- protect the website, prevent fraud or misuse, and diagnose technical problems; and
- handle complaints and establish or defend legal claims.
The legal bases are steps requested before a contract and performance of the contract, compliance with legal obligations, and our legitimate interests in operating a secure service and protecting legal rights. We will ask for consent if we introduce an optional use that requires it.
Your email address and testing brief are required to place and fulfil an order. Without them, we cannot provide the service.
4. Service providers
We share only the data needed for each provider to perform its role:
- Vercel hosts and delivers the website and provides aggregated web analytics.
- Supabase stores order and workflow data.
- Stripe processes payments and helps prevent payment fraud.
- Resend sends transactional order emails.
- Google supports business email and delivery of QA reports through Gmail and Google Sheets.
We may also disclose data when required by law, or when needed to establish, exercise, or defend legal claims. We do not sell or rent personal data.
5. International transfers
Some providers may process data outside Poland or the European Economic Area. Where required, transfers rely on an adequacy decision or safeguards such as the European Commission's standard contractual clauses.
6. How long we keep it
- Unpaid or abandoned testing briefs are kept for up to 30 days so you can resume payment or resolve a failed checkout.
- Order, report, and customer-support records are kept while we deliver the service and afterwards for up to three years when needed to handle claims.
- Payment and accounting records are kept for the period required by tax and accounting law, generally five years after the end of the relevant tax year.
- Security logs are kept only as long as reasonably needed to investigate abuse and maintain the service.
We may keep specific information longer when the law requires it or a dispute is ongoing. We then limit it to that purpose.
7. Data in products we test
Use a test environment and fictional data whenever possible. If your product exposes personal data during testing, you remain responsible for deciding why and how that data is processed. FullHouseQA will use it only on your instructions to provide the agreed service.
Tell us before testing if access to live personal data is unavoidable. We may require separate data-processing terms and a narrower test setup before starting.
8. How we protect it
We limit access to people and providers who need the data, use restricted server-side access to order records, and use secure payment and hosting providers. No internet service can promise absolute security.
Never send passwords by email or in the testing brief. Use a dedicated tester account, invitation, or expiring one-time link, and revoke access when testing ends.
9. Your rights
Depending on the circumstances, you can ask us to give you a copy of your data, correct it, delete it, restrict its use, or provide portable data. You may object when processing is based on legitimate interests and withdraw consent where consent is used. Withdrawing consent does not affect earlier lawful use.
Email fullhouseqa@gmail.com to exercise a right. We may need to verify your identity. You may also complain to the President of the Personal Data Protection Office in Poland (UODO) or your local supervisory authority.
We do not use personal data for automated decisions or profiling that produce legal or similarly significant effects.
11. Changes to this policy
We may update this policy when the service or legal requirements change. The effective date at the top shows the latest version. We will explain material changes where appropriate.