This Privacy Policy explains how we process the personal data of users of the Process Auditor service, available at automationnex.io/en/process-auditor/ (until October 2026 at processauditor.automationnex.io). It fulfills the information obligation under Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).
1. Data controller
The controller of your personal data is:
- Controller: the AutomationNex organization — a process automation and AI studio and the maker of Process Auditor
- Registered office: Poznań, Poland
- Website: automationnex.io
- Data protection contact: office@automationnex.io
The controller has not appointed a Data Protection Officer. For any matter related to the processing of your data, contact us directly at the email address above.
2. Purposes, legal bases and retention periods
| Purpose of processing | Legal basis | Retention period |
|---|---|---|
| Preparing and sending the audit report | Art. 6(1)(b) GDPR — steps taken at your request prior to entering into a contract | Up to 12 months from the date the report is generated |
| Recording the request in the AutomationNex CRM (request and report history) | Art. 6(1)(f) GDPR — the controller’s legitimate interest (keeping a record of requests and answering questions about the report) | Up to 12 months from the date the report is generated |
| Email contact after the report (discussing the results, automation services) — only if you tick a separate, optional consent; you receive the report without it too | Art. 6(1)(a) GDPR — your consent given in the form; Article 398 of the Polish Electronic Communications Law | Until you withdraw consent, no longer than 24 months |
| Newsletter (emails with automation tips) — only if you tick a separate consent | Art. 6(1)(a) GDPR — your consent (confirmed via a link in an email) | Until you unsubscribe (link in every email) or withdraw consent |
| Website traffic statistics and analysis (Google Analytics, Microsoft Clarity) | Art. 6(1)(a) GDPR — your consent given in the cookie banner | Up to 14 months or until you withdraw consent |
| Establishing, pursuing or defending legal claims | Art. 6(1)(f) GDPR — the controller’s legitimate interest | Until the limitation period for claims expires |
3. Scope of data processed
Through the audit form we collect:
- your first name,
- your email address,
- the company name and its website address,
- the country of operation, currency and declared hourly rate,
- the industry, team size, tools in use and the problem areas you select,
- any optional additional information you enter in the free-text field,
- if you tick them — your consent to email contact after the report (date) and your newsletter consent (consent wording, date, IP address),
- technical request data: IP address and browser information (abuse prevention).
In addition, our system retrieves publicly available content from the website you provide. We do not log in to any systems and do not retrieve password-protected content.
Providing your data is voluntary, but it is necessary to prepare and send the report — without it we cannot deliver the service.
4. Automated processing and AI models
The report content is generated automatically: your answers and the public content of your website are analyzed by language models (AI) and compared against our library of automation scenarios.
The report is sent automatically, without human review before it goes out. What you do with its conclusions is always your decision.
This processing does not produce legal effects concerning you and does not similarly significantly affect you within the meaning of Article 22 GDPR — the report is purely informational and indicative. Its conclusions are estimates, not a binding quote or decision.
You have the right to ask us to have the report content reviewed by a human — write to office@automationnex.io.
5. Data recipients
Your data may be entrusted to the following categories of processors:
- Hostinger International Ltd. — server (VPS) hosting automationnex.io, where the tool runs.
- AutomationNex Owner’s Portal system (VPS server, hosting provider: Hostinger International Ltd.) — receiving the request, generating and sending the report, handling contact and the newsletter.
- Supabase Inc. — the Owner’s Portal database (servers in the European Union, Frankfurt).
- Apify Technologies s.r.o. — retrieving the public content of the website you provide.
- OpenRouter, Inc. (USA) — access to language models (AI) for the content submitted for analysis; the content is passed on to the provider of the selected model (currently Google — Gemini).
- Hostinger International Ltd. — the office@automationnex.io mailbox from which we send the report and messages.
- Google Ireland Limited — Google Analytics (only after you give consent) and Google Calendar, if you book a consultation.
- Microsoft Ireland Operations Limited — Microsoft Clarity, analysis of how the website is used (only after you give consent).
We do not sell your data or share it with third parties for their marketing purposes.
6. Transfers outside the EEA
Some of the providers listed above may process data outside the European Economic Area, in particular in the United States. Such transfers are based on a European Commission adequacy decision (EU–US Data Privacy Framework) or on standard contractual clauses approved by the European Commission.
7. Cookies
The service uses two categories of cookies and similar technologies:
- Essential — browser storage that keeps your cookie choice and — until you submit it — a draft of the audit form (current tab only, deleted when the tab is closed). These are always active and do not require consent.
- Analytics (Google Analytics 4 and Microsoft Clarity) — including the
_ga,_ga_*,_clckand_clskcookies, used for visit statistics and analysis of how the website is used. They load only after you give consent in the cookie banner.
You can change or withdraw your consent to analytics cookies at any time — . Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
8. Your rights
In connection with the processing of your data, you have the right to:
- access your data and receive a copy of it (Art. 15 GDPR),
- have your data rectified (Art. 16 GDPR),
- have your data erased — the “right to be forgotten” (Art. 17 GDPR),
- restrict processing (Art. 18 GDPR),
- data portability (Art. 20 GDPR),
- object to processing based on legitimate interest (Art. 21 GDPR),
- withdraw consent at any time, without affecting the lawfulness of processing carried out before the withdrawal (Art. 7(3) GDPR).
To exercise any of these rights, write to office@automationnex.io. We respond within 30 days.
9. Right to lodge a complaint
If you believe that the processing of your data infringes the GDPR, you have the right to lodge a complaint with the supervisory authority:
President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych)
ul. Stawki 2, 00-193 Warsaw, Poland
uodo.gov.pl
10. Data security
We apply technical and organizational measures appropriate to the risk, including encrypted transmission (HTTPS), access control to our systems and the data minimization principle — we collect only the information needed to prepare the report.
11. Changes to this Privacy Policy
We may update this Policy from time to time. Any change will be published on this page together with an updated date at the top of the document. In the case of material changes, we will also notify you by email if we have your address.