Privacy Policy
Effective from 28 September 2026.
Who is the controller
The controller of the data we keep about you as an Ozef user is Roman Peterský, Company ID (IČO) 02372479, registered address Vlachova 1508/14, 155 00 Prague 5, Czech Republic. You can reach him through the Contact page.
Data from a particular session is different: the presenter decides what the audience is asked and what is stored. The presenter is therefore the controller of their sessions’ content, and Ozef acts as a processor in that role.
What we process
Account: email, name and, where applicable, a profile picture from Google, your plan (Free or Pro) and the date you signed up. Without this, your sessions would have nowhere to be stored.
Payments (Pro subscription and Buy Ozef a coffee): email and name, for the subscription also the billing address and for companies the company name and VAT ID, subscription and payment details and issued invoices. You enter card details directly with the payment service Stripe; they never reach us.
Withdrawal from the contract: a copy of your statement (name, the email for the confirmation, which contract it concerns and when you withdrew), the amount paid and refunded, a fingerprint of the account email and a fingerprint of the payment card. A fingerprint is a code computed from the email that cannot be turned back into the email; the card fingerprint is computed by Stripe and the card number cannot be derived from it.
Sessions: the session name and date, scenes, their settings and results.
Participants: the name a person enters in the respondent app, their answers, reactions and questions for the presenter. The presenter sees the name.
Operations: technical server logs and simple usage statistics. For plan changes and for support looking into an account, we keep a record of who did it and when.
Why we process it
We process account, session, subscription and payment data to provide the service to you — that is, to perform the contract. We also keep invoices and payment records because tax law requires us to. We email you the purchase and withdrawal confirmations because the law requires us to. We keep the record of withdrawals based on our legitimate interest: it proves that we received and handled a withdrawal, and it enforces the rule that we refund the full amount only the first time. We keep technical logs and statistics based on our legitimate interest in running the service securely and reliably. None of it is used for advertising and we do not sell it to anyone.
How long
We keep your account and sessions for as long as your account exists. When you close it, we delete the data; payment records, however, must be kept for the period required by tax law. On Free, a session summary is hidden after seven days but not deleted — you will see it again after switching to Pro. We keep the record of withdrawals for 3 years from the withdrawal, even if you close your account in the meantime; then it deletes itself. We keep operational logs for a matter of months.
Who receives the data
Ozef runs on services it could not work without: Lovable Cloud (database, sign-in, files and sending emails, built on Supabase) and Cloudflare (app delivery and traffic protection). If you sign in with Google, Google verifies you. Sign-up emails are sent by the sign-in provider.
Payments are processed by Stripe (Stripe Payments Europe, Ltd., Ireland). For payment data, Stripe is an independent controller and follows its own policy at stripe.com/privacy.
Some of these services may process data outside the EU, for example in the USA, always with safeguards under the GDPR. We do not pass personal data to anyone else.
Cookies and browser storage
Ozef uses only what it needs to run: sign-in and a few small settings your browser remembers (for example the name you last used in a session or the language you picked). Stripe’s payment page stores its own cookies needed for the payment and fraud prevention. No advertising or tracking cookies.
We estimate the app language from the country you connect from (from your IP address). We do not store the address for this; we only use it at that moment.
Your rights
You can ask what we keep about you and have it corrected, deleted or its processing restricted, or object to the processing. Just write to us. If you feel we are not handling your data correctly, you can contact the Czech Office for Personal Data Protection (uoou.gov.cz) or the data protection authority in your country.
For presenters
If you use Ozef at work, keep in mind that you are responsible for the content of your sessions.