AI Data Processing

This document explains where and how TanSecure uses artificial intelligence (AI) systems, what data they receive, and what safeguards we apply. It supplements the Privacy Policy and takes into account the GDPR and Regulation (EU) 2024/1689 (the AI Act). In force from 12 October 2026.

1. Controller

TANSECURE spółka z ograniczoną odpowiedzialnością, ul. Wielicka 42 lok. B3, 30-552 Kraków, Poland, KRS 0001148378, NIP 6772520369. Contact: [email protected].

2. Where we use AI

2.1. Drafting replies to messages

When you write to us in the chat on the Website, by email, or through messengers, an AI model may prepare a draft reply for our team. A member of our team reads every draft, edits it if needed, and decides whether to send it. The model does not send replies on its own and does not make decisions about you. The model receives the content of the conversation, and, if you gave them, your name and contact details.

2.2. Creating content

We use AI tools to help prepare articles, translations, images and videos for the blog and social media. These do not contain personal data of our Users. Each publication is reviewed by our team before it goes live. Images and videos that are generated or substantially altered by AI and that could be mistaken for real ones are marked as AI-generated.

2.3. AI solutions built for Clients

We build chatbots, assistants and automations for Clients. In such projects the Client is the controller of their customers' data, and we act as a processor under a data processing agreement (Article 28 GDPR). The rules for those chatbots (including informing people that they are talking to AI) are set out in the agreement with the Client and in the Client's own documents.

2.4. Tasks in the client panel

The text of a task and of your messages in it is sent to the AI provider to prepare a draft reply. A person reviews every draft before it is sent. Attached files and screenshots are not sent to the AI.

3. AI providers

• OpenAI (OpenAI Ireland Ltd / OpenAI, L.L.C.): language models used for drafting replies and for working with text.
• Google (Google Gemini): models used for working with text, images and video when creating content.

We use these models through their business APIs. Under the providers' terms, data sent through the API is not used to train their models, and is kept by the provider only for a limited time to detect abuse. Data transfers to the USA are covered by the safeguards described in the Privacy Policy.

4. Legal basis

Using AI to draft replies is based on our legitimate interest in handling enquiries quickly (Article 6(1)(f) GDPR), and on steps taken at your request before entering into a contract (Article 6(1)(b) GDPR). You can object at any time; we will then handle your messages without AI.

5. What we do not do

• We do not use AI to make decisions that produce legal effects concerning you or similarly significantly affect you.
• We do not use AI for profiling or for assessing people.
• We do not enter special categories of data (for example, health data) into AI tools. Please do not send such data in the chat.
• Our chat on the Website is handled by people. If we ever launch a chatbot that replies on its own, we will clearly tell you that you are talking to AI.

6. Limitations of AI

AI models can make mistakes. That is why every reply and every publication prepared with AI is reviewed by a person before it is sent or published. If you notice an error, please let us know at [email protected].

7. Your rights

You have all the rights described in the Privacy Policy, including the right to object to the use of AI to handle your messages.