Privacy Policy

Service: cre.solviss.pl · Last updated: 13 July 2026

Template — review before relying on it. This is reasonable boilerplate for a private, single-operator tool; it is not legal advice. Adjust the operator/contact details and, if your users are Polish consumers, consider a Polish (RODO) version.

1. Who we are

cre.solviss.pl (“the Service”) is a private property-billing tool operated by Solviss (“we”, “operator”, the data controller). Contact for privacy and data-protection matters: kontakt@solviss.pl.

2. What data we process

Property & tenancy data you enter — flats, tenants, rent, utility bills you upload or paste.
Bank account information — when you choose to connect a bank account, we access, read-only, the account details and transactions of the account(s) you link, in order to reconcile incoming rent payments. We never initiate payments and never move money.

3. Open Banking (PSD2)

Bank access is provided through Enable Banking Oy, a licensed Account Information Service Provider (AISP) regulated in the EU, acting as our technical intermediary strictly to retrieve the account data you authorize. Each connection requires your explicit consent and strong authentication at your own bank; consent is time-limited (typically ~90 days) and re-confirmed at your bank. You can withdraw it at any time in your bank or by disconnecting in the Service.

4. Legal basis

Your consent (Art. 6(1)(a) GDPR) for accessing your bank account information, and our legitimate interest (Art. 6(1)(f)) in operating the billing/reconciliation Service you use.

5. Where data is stored

On the Service’s server (a VPS located in the EU) and/or locally in your browser. Data is not sold, rented, or shared with third parties for their own purposes. The only third party involved is the AISP named above, and only to deliver the bank data you requested.

6. Retention

We keep your data for as long as you use the Service. Bank-connection consents expire automatically. You can delete your data at any time; on deletion or account closure it is removed within 30 days, save where retention is legally required.

7. Your rights

Under the GDPR/RODO you may request access to, correction, or deletion of your data, restrict or object to processing, request portability, and withdraw consent at any time (without affecting prior lawful processing). To exercise any right, contact kontakt@solviss.pl. You may also complain to the Polish supervisory authority (UODO).

8. Security

Access to the Service is protected by authentication and served over HTTPS. Open Banking credentials (signing keys) are held server-side and never exposed to the browser.

9. Changes

We may update this policy; the “last updated” date reflects the current version.