ProxyTalk Privacy Policy
Last updated: 12 October 2026
ProxyTalk is a service that lets you create an AI agent that talks to visitors on your behalf, for example after they scan a QR code. This policy explains what personal data we process, why, who we share it with, and what rights you have. The Polish version is the original; this English text is a translation.
1. Who we are
The controller of personal data is Paweł Przytuła, running a sole proprietorship under the name "Paweł Przytuła", ul. Heweliusza 11/811, 80-890 Gdańsk, Poland, tax ID (NIP) 5862217680.
For privacy matters, write to: kontakt@proxy.talk.
2. Who this policy applies to
This policy applies to three groups of people:
- Agent owner: a person who has a ProxyTalk account and creates agents.
- Chat visitor: a person who talks to an agent at
proxy.talk/{agent address}or after scanning a QR code. A chat visitor does not create an account. - Website visitor: a person who browses the ProxyTalk home page at
proxy.talk.
In each of these cases, the controller of your data is ProxyTalk, the entity named in section 1.
3. What data we process, why, and on what legal basis
3.1 Agent owner
| Data | Purpose | Legal basis |
|---|---|---|
| Email address, login data, account identifier. When signing in with Google, also your name, surname and profile picture from your Google account. | Creating and running your account, signing in | Art. 6(1)(b) GDPR (performance of a contract) |
| Agent configuration: name, web address, company or team name, avatar, header and background images, links to social profiles, knowledge, goal, behavior, greeting, languages and voices, QR code settings | Providing the service | Art. 6(1)(b) GDPR |
| Knowledge files (PDF, DOC, DOCX, TXT). We store only the text extracted from the file, not the original file. | Giving the agent its knowledge | Art. 6(1)(b) GDPR |
| History of your agents' conversations shown in the dashboard | Providing the service | Art. 6(1)(b) GDPR |
| Content of your correspondence with us | Answering your enquiry | Art. 6(1)(f) GDPR (our legitimate interest: handling enquiries) |
Providing the data needed to create an account is voluntary, but without it we cannot provide the service.
3.2 Chat visitor
| Data | Purpose | Legal basis |
|---|---|---|
| Content of your messages and the agent's replies | Holding the conversation and making its history available to the agent owner | Art. 6(1)(f) GDPR |
| A random visitor identifier and a conversation identifier stored in your browser (localStorage) | Keeping the conversation continuous | Art. 6(1)(f) GDPR |
| Selected chat language | Holding the conversation in the right language | Art. 6(1)(f) GDPR |
| Technical request data, including IP address and browser data, in server logs | Security, preventing abuse, diagnostics | Art. 6(1)(f) GDPR |
| Audio from your microphone if you turn on voice mode | Converting speech to text | Your consent given in the browser when you allow microphone access |
Our legitimate interest is providing the agent service to its owner, ensuring security and preventing abuse, and protecting against claims. You have the right to object to this processing at any time (section 8).
You do not have to provide any personal data to chat with an agent. Do not enter sensitive data in the conversation, such as data about health, beliefs, orientation, origin, or document or payment card numbers. The conversation is stored and may be sent to AI model providers (section 5).
3.3 Website visitor
We process technical request data (IP address, browser data) in server logs to keep the site secure and working, on the basis of Art. 6(1)(f) GDPR. We do not use analytics or advertising tools.
4. Who we share data with
We use providers that process data on our behalf or supply our infrastructure:
| Provider | What it is used for | Data involved | Location |
|---|---|---|---|
| Clerk | Accounts and sign-in | Email address, login data, profile data from Google | USA |
| Google (Google sign-in) | Signing in with a Google account | Information that you signed in to ProxyTalk, Google account data. Google is an independent controller of its own account data. | USA and other countries |
| Vercel | Application hosting, storing image files (Vercel Blob) | Technical request data, agent avatars and images | EU (Vercel Blob) |
| Neon | Database | Agent configuration, extracted file text, conversations | EU |
| OpenRouter and AI model providers | Generating the agent's replies | Conversation content and the agent's instructions (knowledge, goal, behavior, file text) | USA |
| Sentry | Detecting and diagnosing technical errors | Error information, technical events (agent identifier, language, message method) without conversation content, IP address | EU |
We do not sell personal data. Data may also be disclosed to public authorities where the law requires it.
The browser you use may process your speech in voice mode with its own provider (for example, Chrome uses Google's speech recognition services). That is a browser feature governed by its privacy rules, not our service.
Transfers outside the European Economic Area
Some providers (Clerk, Google, OpenRouter and AI model providers) process data in the United States. Transfers are made on the basis of an adequacy decision (the EU-US Data Privacy Framework) where the provider has joined it, and otherwise on the basis of standard contractual clauses approved by the European Commission. You can get a copy of the safeguards by writing to kontakt@proxy.talk.
5. AI models and training
The agents' replies are generated by external artificial intelligence models, which we access through OpenRouter. The model receives the conversation content and the agent's instructions, including its knowledge and the text of uploaded files.
In the free version of ProxyTalk we use free models provided by their vendors. Providers of free models may store the content sent to them and use it to further train their models under their own terms. For this reason, do not enter sensitive data or information that must not leave your organization into conversations, the agent's knowledge or uploaded files.
Replies are generated automatically. We do not make decisions about you that produce legal effects or similarly significantly affect you. The agent's replies may contain mistakes; do not treat them as legal, medical or financial advice.
6. How long we keep data
- Account, agent configuration, extracted file text and conversations: until the agent owner deletes them. In the dashboard, an owner can delete individual conversations, all of an agent's conversations, a whole agent (with its files and conversations), and the whole account in account settings. Deleting the account also removes uploaded images and QR codes.
- Clerk account: until the account is deleted.
- Correspondence with us: until potential claims become time-barred.
- Data in your browser (conversation identifiers): until you clear your browser data.
After deletion, data may remain for a limited time in backups or in providers' logs, according to their rules.
7. Cookies and browser storage
We use only items necessary for the service to work:
| Name | Type | Purpose | Duration |
|---|---|---|---|
locale | Cookie | Remembering your chosen interface language | 1 year |
| Clerk session cookies | Cookie | Signing in and keeping your session | As set by Clerk |
| Visitor identifier and conversation identifier | localStorage | Keeping the chat conversation continuous | Until you clear your browser data |
We do not use analytics or advertising cookies, so we do not show a cookie consent banner. You can clear browser storage in your browser settings, which starts a new conversation.
8. Your rights
You have the right to:
- access your data and get a copy of it,
- rectify your data,
- erase your data,
- restrict processing,
- data portability,
- object to processing based on our legitimate interest. If you object, we will stop processing unless we demonstrate compelling legitimate grounds that override your interests, or the data is needed to defend legal claims,
- withdraw consent at any time, where processing is based on consent. Withdrawal does not affect the lawfulness of processing before it.
Agent owners can delete their data themselves in the dashboard (section 6). We provide a copy of your data (export) on request sent to kontakt@proxy.talk. For anything else, including as a chat visitor, write to the same address. We will reply without undue delay and no later than one month after receiving your request. For chat visitors without an account, the visitor identifier from your browser helps, because without it we cannot find your conversations.
You also have the right to lodge a complaint with the supervisory authority: the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland.
9. Children
Only adults can create a ProxyTalk account. The service is not directed at children under 16. If you are a parent or guardian and believe a child has given us personal data, write to us and we will delete it.
10. Security
We apply technical and organizational measures appropriate to the risk, including encrypted connections, account authentication through a specialist provider, and limiting access to data to the minimum necessary. In the event of a personal data breach we act as required by law, including notifying the supervisory authority and, where required, the people affected.
11. Changes to this policy
We may change this policy, for example when the law or the service's features change. The current version is always available at proxy.talk/privacy, and the date of the last update is at the top of the document. We will notify agent owners of material changes at the email address linked to their account.
12. Contact
Send any privacy questions to kontakt@proxy.talk.