Tropio
|

Tropio — Privacy Policy (Diner Side)

1. Who is responsible for your data (data controller)

The controller of your personal data is Yves Mugabo, an individual who operates the Tropio service. Tropio is currently run as a private, unregistered undertaking (no registered company). Contact for any privacy matter: kontakt@tropio.pl.

Administratorem Twoich danych osobowych jest Yves Mugabo, osoba fizyczna prowadząca serwis Tropio. Tropio jest obecnie prowadzone jako prywatna, niezarejestrowana działalność (bez zarejestrowanej firmy). Kontakt w każdej sprawie dotyczącej prywatności: kontakt@tropio.pl.

2. What this policy covers

This policy explains how we handle personal data when you use Tropio as a diner / member of the public — through the website (tropio.pl) and the mobile app. Restaurant-owner accounts are covered separately.

3. What data we collect and why

a) Contact / lead form. When you contact us or express interest, we collect the details you provide — such as your name, email address, phone number, and message, and the language of your request.

  • Purpose: to respond to you and follow up.
  • Lawful basis: our legitimate interest in responding to enquiries, and/or taking steps at your request (Art. 6(1)(f) and (b) GDPR).

b) Live feedback posts. If you post to the live feed, we collect the username, text, and any photo you submit, plus a device identifier used only to apply posting limits and prevent abuse.

  • Purpose: to display the feedback publicly, moderate it, and prevent spam/abuse.
  • Lawful basis: your action of submitting content, and our legitimate interest in operating and protecting the feed (Art. 6(1)(f) GDPR). Please do not include personal data about yourself or others in posts or photos — content you post may appear publicly.

c) Technical data. Basic technical information needed to run the Service (e.g. request and error logs). We aim to minimise this.

We do not knowingly collect data from children, and Tropio is not directed at children.

4. Automated content moderation

Live-feed posts are checked by automated moderation (including an AI language model) to filter out spam, abuse, and inappropriate content before publication. This processes the text of your post; it does not make legal or significant decisions about you.

5. Who processes data on our behalf (sub-processors)

We use trusted third-party providers to run the Service. These may include:

  • Supabase — database, authentication, and file storage;
  • Vercel — website/app hosting;
  • Vercel Web Analytics — cookieless website traffic analytics;
  • Resend — sending transactional emails;
  • Anthropic — AI models used for analysis and content moderation;
  • Hostinger — hosting for the kontakt@tropio.pl email inbox.

6. Public review data

Our restaurant analyses are based on publicly available business review data obtained from third-party sources (e.g. Google, via data providers). This is about businesses and their public reviews, not about you as a Tropio visitor.

7. How long we keep data

We keep personal data only as long as needed for the purposes above. The periods below are our current proposal and are still to be confirmed with a lawyer / DPO:

  • Contact / lead data — up to 24 months after our last contact with you;
  • Live-feed posts — until removed by you, by moderation, or on request;
  • Abuse-report records — up to 12 months;
  • Technical logs — up to 90 days.

8. Your rights

Under the GDPR you have the right to: access your data; correct it; delete it (“right to be forgotten”); restrict or object to processing; data portability; and to withdraw consent where processing is based on consent. You may also lodge a complaint with the Polish supervisory authority (Prezes Urzędu Ochrony Danych Osobowych, UODO).

To exercise any right, contact kontakt@tropio.pl.

9. Cookies / local storage

We use only functional / strictly necessary first-party cookies — none for advertising or cross-site tracking — so no cookie consent banner is required under EU/Polish law. You can still manage or delete cookies at any time in your browser settings.

  • tropio_chat_visitor — a functional, first-party identifier used for the restaurant chat feature. HttpOnly and Secure.
  • tropio_device_id — a functional, first-party identifier used for posting / reaction rate-limiting and anti-abuse. HttpOnly and Secure.
  • tropio_locale — remembers your language preference (Polish/English).
  • On some pages, a Cloudflare Turnstile security cookie may be set to confirm you are not a bot. For logged-in restaurant owners and admins, a Supabase authentication cookie keeps you signed in. Both are functional.

Local storage. The website also stores a small, client-side list of usernames you have chosen to block in the live feed. This list stays in your browser and is never sent to us.

Analytics. We use Vercel Web Analytics, which is cookieless, collects no personal data, and does not track you across sites.

10. Changes

We may update this policy. Material changes will be shown by updating the date below.

11. Contact

Privacy questions or requests: kontakt@tropio.pl.

Last updated: 19 August 2026

Ostatnia aktualizacja: 19 sierpnia 2026