General Terms and Conditions of i2R s.r.o.
Translation notice
The Slovak version of these General Terms and Conditions is the legally binding version. This English translation is provided for convenience only; in case of any discrepancy, the Slovak version prevails.
Article IGeneral provisions
These General Terms and Conditions (hereinafter "GTC") govern the relationship between i2R s.r.o., ID No.: 52 465 098, with its registered office at Myslenická 169, 902 01 Pezinok, registered in the Commercial Register of the City Court Bratislava III, Section: Sro, File No. 138802/B, as the Contractor, and the Customer.
If you are a customer with a registered office in another EU member state, or in a country outside the European Union, you acknowledge that the governing law is the law of the Slovak Republic.
The application of any (general) terms and conditions of the other contracting party, or any other (general) terms and conditions, or amendments to these GTC, is hereby expressly excluded unless the parties agree otherwise in writing.
Amendments to or exclusion of these GTC, or any of their provisions, are binding on the parties only if agreed in writing in the Contract. To the extent that the provisions of the Contract differ from the provisions of the GTC, the diverging arrangements of the Contract shall prevail over these GTC.
Article IIDefinitions
II.IContractor, i2R s.r.o., ID No.: 52 465 098, with its registered office at Myslenická 169, 902 01 Pezinok, registered in the Commercial Register of the City Court Bratislava III, Section: Sro, File No. 138802/B, hereinafter also "We", "the Company", "Our company".
II.IICustomer, a legal entity or a natural person (entrepreneur) entering into a business relationship with the Company for the purpose of creating a computer program or for the provision of a service, hereinafter also "Client", "You". An entrepreneur is a legal entity or natural person whose business and legal relations are governed by the law of the state in which they are registered for the purpose of conducting business activities, or by other legal regulations, international law and the like. For the purposes of these GTC, the Customer is considered the end user.
II.IIIRegistered User, a Customer who has registered at app.polyreq.com.
II.IVOrder and/or Project, an expression of will by the Customer asserting their will to have a computer program and/or Service created and delivered under these GTC, on the basis of which the Contractor creates and delivers the computer program and/or makes the Service available to the Customer.
II.VComputer Program, a set of commands and instructions expressed in any form, used directly or indirectly in a computer or similar technical device, which is the result of the creative intellectual activity of the Author; created as a copyrighted, co-authored, joined, and/or analogous work within the meaning of the Laws, in particular the applicable generally binding legal regulations of the Slovak Republic governing copyright in accordance with the provisions of Directive 2009/24/EC of the European Parliament and of the Council on the legal protection of computer programs. Commands and instructions may be written or expressed in source code or machine code. The supporting material used to create the computer program is also part of the computer program. A Software Application is also considered a computer program.
II.VIUser Interface (UI), the graphical part of the computer program through which the user communicates with the program and its functionalities (includes icons, buttons, images, charts, etc., including their layout).
II.VIIUser Experience (UX), the overall design of the computer program so that the user's experience while interacting with the program is intuitive.
II.VIIIDemo Version, a trial version of a draft of the computer program created by the Contractor.
II.IXSource Code, a sequence of commands intelligible to humans, written in a programming language; it may be split across several text files and may also constitute a collection of files that can be translated from a human-readable format into the equivalent machine-executable (binary) form.
II.XEnd User, a legal entity or natural person (entrepreneur) who is the direct and final recipient and user of the computer program.
II.XIService, an electronic service, including additional and other services (such as service support and third-party services) provided by the Contractor to the Customer for monthly fees according to the current price list available at polyreq.com/pricing, consisting of the currently available electronic services of the Contractor. The relevant contractual terms governing the provision of services by the Contractor are published on the Contractor's website. Services also include the provision of temporary, time-limited licenses owned by the Contractor, or licenses of third parties on a contractual basis.
II.XIIIntellectual Property Rights, all substantive and procedural rights, directly and/or indirectly related to the protection of the Computer Program, Device, and/or Products under the Laws and, where applicable, generally binding legal regulations of other countries, as well as such intellectual property rights and/or industrial rights protecting patents, trademarks, utility models, and designs.
II.XIIIDocumentation, in particular, but not limited to, manuals, handbooks, service catalogs, which the Company typically delivers together with Computer Programs, Software Applications, or Services.
II.XIXGTC, these General Terms and Conditions of Our company.
II.XXContract, the purchase contract concluded by the Customer for the purpose of purchasing the Work and/or Service, regardless of the form of the contract. Each Contract must contain basic identification details of the contracting parties.
II.XXIPrice, the fixed price stated on the website polyreq.com/pricing at the time the Customer submits the order, hereinafter also "Purchase Price".
II.XXIISubscription, financial consideration paid in advance for the use of the Services.
II.XXIIICredit, a virtual unit intended for use of the Services.
II.XXIVLegal Regulations, applicable legal regulations of the Slovak Republic, including applicable EU legislation, regulations, decrees, and other generally binding legal regulations of public authorities.
II.XXVCommercial Code, Act No. 513/1991 Coll., the Commercial Code, as amended.
II.XXVILaws, any generally binding legal regulations of the Slovak Republic, generally binding legal regulations of the state under which the Contractor is established and which it observes when conducting its business, and of the European Community and/or international organizations of which the Slovak Republic is a member, the regulations of which may directly and/or indirectly relate to the legal relations of the contracting parties, the Works and/or trading therein.
Article IIIPurchase contract
III.IA proposal to conclude a purchase contract is the Order submitted by the Customer for the creation of a Computer Program and/or part thereof via polyreq.com/pricing; the purchase contract itself is concluded at the moment the Contractor's binding consent to the Customer's confirmed order is delivered to the Customer. An Order may be created only after the Customer has registered at app.polyreq.com. The Contractor is not liable for any errors in data transmission. The Contract is concluded in the Slovak language, or its English equivalent.
III.IIBy submitting an order, the Customer confirms that they have read these GTC and accept them in their entirety.
III.IIIOur company reserves the right to refuse an Order without giving a reason. A refusal of the Order on Our part does not result in the conclusion of a Contract. Any payments made before the Order is refused shall be considered an advance and shall be refunded to the Customer's bank account within 14 working days of the Order's refusal.
III.IVThe subject of the Contract is the Contractor's obligation to deliver the Computer Program and/or part thereof to the Customer and to transfer ownership rights to the Customer, and the Customer's obligation to take over the Computer Program and/or part thereof and to pay the Purchase Price.
III.VThe Contractor is obliged to deliver the Computer Program and/or part thereof within the agreed deadline and at the price stated on the Contractor's website.
III.VIIn the order, the Customer is obliged to provide the basic identification details corresponding to the entry in the Commercial Register or the Trades Register, or the entry in another register prescribed by Legal Regulations, which are necessary for the proper conclusion of the Contract and/or the Order.
III.VIILegal relations not expressly governed by these GTC or the Contract between the Contractor and the Customer are governed by the relevant provisions of the Commercial Code as amended, and related regulations. In the event of any discrepancies between the GTC and the individual Contract, the text of the contract prevails.
Article IVProcedure for concluding a distance purchase contract
IV.IAfter completing registration based on the Contractor's offer published at app.polyreq.com, after entering the requirements for the Computer Program and creating the Demo Version, the Customer selects the Computer Program and/or part thereof from the published offer with a price. The Customer is obliged, as part of the Order, to provide their personal data to the extent necessary to conclude the Contract: name and surname, billing address, email address, and telephone contact.
IV.IIBased on the accepted order, the Contractor will, within the period stated on the Contractor's website, create a draft of the Computer Program and/or part thereof, which is available to the Customer free of charge as a Demo Version for 14 calendar days, together with a price quote in the Customer's registered account.
IV.IIIBy making the Demo Version available, the Contractor does not grant the Customer any rights, copyright, intellectual property rights, licenses, or similar to the Demo Version. The Demo Version is the exclusive property of the Contractor.
IV.IVThe Customer has the right to familiarize themselves with the Demo Version, its UX and UI, functionalities and features for 14 calendar days from the date it is made available. Within that period, they may accept the proposal or propose changes. Changes are charged in the form of credits.
Third-party software
If the implementation of third-party computer programs, development frameworks and their components (including their modules) is required, the Contractor undertakes to inform the Customer in a reasonable manner of their intended use and/or implementation, indicating the type of license, the material licensing conditions together with a link to them, and their prices, which are stated separately and form part of the purchase price. If the Customer does not agree, they shall communicate their disagreement to the Contractor without undue delay.
IV.VIf the Customer confirms the Demo Version in a specific development version as the final version, they select from the Contractor's offer for creating the Computer Program and/or part thereof, and pay the purchase price stated in the offer.
IV.VIWhen the Contractor confirms acceptance and processing of the Customer's Order, the order becomes binding. The exact delivery date for the Work may be confirmed to the Customer by the Contractor subsequently.
IV.VIIBy submitting the Order, the Customer confirms that they have familiarized themselves with the parameters of the Computer Program and/or part thereof, its scope, functionalities, visuals (UI and UX), and agree to its price.
IV.VIIIA concluded contract cannot be unilaterally amended. The contract may be terminated by mutual agreement of both parties. In the event of cancellation of an order already confirmed and accepted by the Contractor, the Contractor is entitled to charge the Customer a cancellation fee in the amount of the costs already incurred for creating the Work.
IV.IXAfter creation of the Computer Program and/or part thereof, the Customer may, for a fee, revise the Computer Program. After the revision is completed, the Contractor will make the new version available to the Customer.
IV.XThe purchase contract is concluded at the moment the Customer submits their Order via the Contractor's website, the Contractor accepts it, and the Customer pays the purchase price. The Contractor confirms acceptance of the order to the Customer by sending an informational email.
IV.XIThe Contractor is obliged to fulfill the order and deliver the Computer Program and/or part thereof to the Customer within the period stated on the Contractor's website; the Contractor will inform the Customer of the exact delivery date by email and/or via the Customer's registered account.
IV.XIIThe Customer is entitled to provide Materials to the Contractor for the purpose of carrying out activities under this Contract; the Contractor is not entitled to further distribute Materials in any way. Materials are provided exclusively for the purpose of developing and creating Works ordered under this Contract.
Article VService usage agreement
V.IThese GTC also govern the rights and obligations arising in connection with the provision of Services by Our company and the use of the Services by the Client.
V.IIThe rights and obligations governed by these GTC are also subject to the Terms of Service, with which you should familiarize yourself and which are binding on you.
V.IIIThe Client is required, before first using the Services and/or creating an Order, to register at app.polyreq.com and create a customer account.
V.IVWhen using the Services, the Client is obliged to pay the fee associated with the use of the Services according to the chosen Service package and the current price list. Upon payment, the Contractor will promptly send access credentials to the Client and/or make the Services available.
V.VThe Client acknowledges that by paying the fees for the use of the chosen Services, they become the holder of a paid, non-exclusive, time-limited, non-transferable, territorially unrestricted license to use the Services. Use of the Services lasts for the period during which the fees are paid in the form of Subscription.
V.VIThe Subscription is paid in the form of monthly or annual fees for the use of the Services.
V.VIIThe rights and obligations of the parties are governed by the Terms of Service. The right to use the Services is granted to the Client for consideration in the form of a subscription and lasts for the period during which the Service is provided.
V.VIIIThe Client becomes a duly authorized holder of a temporary license to use the Services only after paying the fee for their use. The amount of the fee is stated at polyreq.com/pricing.
V.IXPayment of the fee for use of the Services (Subscription) does not give rise to any ownership right of the Client to the software and Service, nor does the Contractor transfer to the Client any rights, copyright, intellectual property rights, licenses, or similar to the software and Service, except for a temporary license to use the Services.
Article VIPurchase price
VI.IThe purchase price of the Computer Program and/or part thereof is the price stated at polyreq.com/pricing, or the price individually agreed in the Contract and/or Order. The purchase price is payable in advance.
VI.IIPrices on polyreq.com/pricing are always current and valid. Payment is processed via the STRIPE payment service.
VI.IIIThe Client may choose a variant listed on Our company's website; the price is stated as a one-time amount for the Computer Program and/or part thereof. The Customer may also purchase credits.
VI.IVThe tax document will be sent to the Customer at the email address provided, together with these GTC, after payment of the price for the Computer Program and/or part thereof and/or Service.
Article VIITrial operation and defects
VII.IThe Contractor will hand over the Computer Program and/or part thereof to the Customer for trial operation lasting thirty (30) days from the date of delivery, during which time the Contractor will, at its own expense, remedy any defects manifested during use (hereinafter "defects").
VII.IIDefects include, among others:
- non-functionality of individual modules including their response,
- individual modules failing to communicate with each other despite the fact that they function correctly individually,
- features of the Computer Program and/or part thereof not corresponding to the agreed and approved features,
- missing agreed and/or necessary functionalities.
VII.IIIAfter the trial operation period expires, the Customer is not entitled to free remediation of any subsequently identified defects.
Article VIIIDelivery and acceptance
VIII.IThe Computer Program and/or part thereof shall be deemed delivered and accepted by the Customer in the confirmed final version on the day access credentials with a link to the website are sent to the Customer's email address listed as their contact email.
VIII.IIThe Computer Program and/or part thereof is delivered in the form of Source Code and accompanying documentation.
Article IXLiability for damage
IX.IThe breach of any legal obligation gives the other contracting party the right to compensation for damage to the extent and under the conditions arising from the Laws.
Article XThird-party services
X.ILinks to websites may point to third-party services. The Contractor assumes no responsibility for the functionality, security, and availability of these services. The Contractor provides these links to third-party services "AS IS" and "AS AVAILABLE". Third-party services are governed by the contractual terms, license terms, terms of use, and/or other applicable terms of those third parties. Before using third-party services, the Customer is recommended to familiarize themselves with all applicable third-party terms. The Contractor makes no representations or warranties with respect to third-party services and is not liable, directly or indirectly, for any damage, including lost profits and consequential damages, or for any claims arising from or in connection with third-party services.
Article XIPersonal data protection
XI.IOur company declares that, in the case of processing personal data of natural persons, it will proceed in accordance with Act No. 18/2018 Coll. on the protection of personal data and on amendments to certain acts, and Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).
XI.IIFor more information on the processing of personal data, please visit polyreq.com/legal, in the Privacy Policy section. The Customer acknowledges that they are obliged to provide the Contractor with personal data in correct and truthful form and is also obliged to inform the seller of any change to their personal data.
Article XIIIFinal provisions
XIII.IThese GTC enter into force on the day of their issuance. By submitting the order, the buyer confirms that they have read them, understood their content, and unreservedly accept them.
XIII.IIFor relations not governed by these GTC, as well as by other documents published on Our website in the polyreq.com/legal section, the relevant provisions of the Civil Code, Commercial Code (where the buyer does not act as a consumer), and Act No. 22/2004 Coll. on electronic commerce shall apply.
XIII.IIIIf any of the provisions of the GTC is/becomes invalid, ineffective, or unenforceable, the validity of the remaining provisions remains unaffected.
XIII.IVThe parties undertake to resolve disputes primarily through negotiation and mutual agreement. If the parties fail to reach an agreement on a dispute, either contracting party is entitled to file a lawsuit with the court having jurisdiction under the procedural Legal Regulations; the parties hereby agree on the jurisdiction of the courts of the Slovak Republic. The parties hereby also exclude the application of any conflict-of-law rules contained in bilateral and/or multilateral international treaties.
XIII.VThe UN Convention on Contracts for the International Sale of Goods (CISG) shall not apply, in accordance with Article 6 thereof.
Effective date
These GTC enter into force on April 1, 2026 and supersede the previous General Terms and Conditions. Our company reserves the right to amend or supplement these GTC without prior notice to the Client. The current and valid version of the GTC is available at polyreq.com/legal.
Terms of Service (B2B EU Version)
Translation notice
The Slovak version of these Terms of Service is the legally binding version. This English translation is provided for convenience only.
Article IContractual relationship and its nature
These Terms of Service (hereinafter "Terms") constitute a complete and legally binding agreement between i2R s.r.o., ID No.: 52 465 098, with its registered office at Myslenická 169, 902 01 Pezinok, registered in the Commercial Register of the City Court Bratislava III, Section: Sro, File No. 138802/B, and a natural person, entrepreneur or legal entity that registers for the Services (hereinafter the "Client").
I.IConsumer exclusion: The Services are provided exclusively in a Business-to-Business (B2B) regime. The Client expressly declares that they order the Services for the purpose of their business activity. Consumer protection provisions, in particular the right to withdraw from the contract without giving a reason within 14 days under Directive 2011/83/EU, do not apply to this relationship.
I.IIAuthorization: The person accepting these Terms on behalf of a legal entity represents and warrants that they have full authority to bind that entity. Otherwise, they are personally liable for any resulting damage.
I.IIIChanges to Terms: The Provider reserves the right to unilaterally amend the Terms. Changes will be announced by email or in the Service interface 15 days in advance. Continued use of the Service after the changes take effect constitutes acceptance.
Article IIDefinitions and technical specifications
II.ISubscription: Represents an authorized, limited scope license to use the Services.
II.IICredits (Paid & Free): Represent a limited license scope for use within the PolyApp platform. Credits are not a financial asset, money, or a deposit within the meaning of banking regulations.
- Paid Credits: Credits purchased by the Client.
- Free / Promotional Credits: Credits granted as part of a trial or promotional campaign.
II.IIICustomer Data: Any digital content (code, text, database schemas) uploaded by the Client.
II.IVProvider Materials: Includes the platform, proprietary algorithms, UI/UX design, documentation, and code-generation methodologies, all of which are protected by the Provider's copyright.
Article IIILicensing and intellectual property
III.IGrant of license: The Provider grants the Client a paid, non-exclusive, non-transferable, time-limited license to use the Provider's Service solely for the purpose of using the features of the Service.
III.IIOwnership of Output: In line with B2B standards, the Provider hereby transfers to the Client all proprietary rights to the specific code and applications created via the Service, at the moment they are fully generated and on the condition that all due fees are duly paid.
III.IIIRestricted Acts: Under threat of immediate account termination and contractual penalty, the Client undertakes:
- Not to use the Service to train any AI models.
- Not to perform automated scraping of the Provider's interface.
- Not to attempt to reverse-engineer the Provider's "Prompt engineering" technology.
- Not to share access credentials with third parties without written consent.
Article IVSubdomain management, identity, and hosting
IV.ISubdomain rights: The subdomains expressly listed are the property of the Provider. The Client is granted only a temporary right to use them.
IV.IIReclaim Policy: The Provider reserves the right to reclaim an assigned subdomain if:
- it has been inactive for more than 90 days,
- it infringes a third party's trademark rights,
- it is misleading or imitates state authorities or other brands.
IV.IIINotice: The Client will be informed of the reclamation 7 days in advance, except in cases of legal violations, in which case the reclamation occurs immediately.
IV.IVHosting: The Provider mediates hosting services from selected third parties for a fee. In this contractual relationship, the Provider acts as an intermediary and assumes no responsibility for the functionality, security, and availability of these services; it provides these third-party links "AS IS" and "AS AVAILABLE". For details, see the GTC, "Third-party services" section.
Article VPayment terms, taxes, subscriptions, and credit system
V.IInvoicing: Prices are stated excluding VAT (Net).
V.IIEU VAT:
- EU-based Client (outside SR) with valid VAT ID: Reverse-charge regime applies.
- Client without a valid VAT ID or based in SR: VAT will be added at the statutory rate.
V.IIISubscription:
- Monthly subscription: If the subscription is canceled, prepaid amounts are non-refundable if the Service or any part of it has begun to be used in the month covered by the subscription.
- Annual subscription: If the subscription is canceled, the unused portion is refunded starting from the month following the cancellation. The month in which the cancellation occurred is not included, even if the Service or any part of it was not used.
V.IVCredit Rollover:
- Monthly cycle: Unused credits roll over to the next month, up to a maximum of 100% of the monthly package. Any excess above this limit expires.
- Annual cycle: Rollover is possible up to 12× the monthly allocation.
V.VNo-Refund Policy: Given the nature of the Service (digital content and computational power) and the B2B nature of the relationship, no payments for credits or subscriptions are refundable, even if the Client terminates use of the Service early.
Article VIData protection and GDPR
VI.IRoles in processing: The Client acts as Controller and the Provider acts as Processor within the meaning of Article 28 of the GDPR.
VI.IIDPA: By accepting these Terms, the parties enter into the Data Processing Addendum (DPA), which forms Annex No. 1.
VI.IIIAI Training Opt-out: The Provider may use anonymized technical data to improve the Service. Clients on the "Enterprise/Business" tier have the right to disable, in their settings, the use of their data for training future generic models.
VI.IVSub-processors: The Client grants general consent to the engagement of sub-processors (e.g., Stripe, AWS, Neo4j, GitHub, Websupport).
Article VIILiability and warranty disclaimer
VII.IOutput Disclaimer: The Provider does not warrant that the generated code will be error-free, secure, or fit for any particular purpose. The Client bears full responsibility for testing, reviewing, and deploying the outputs.
VII.IISLA (Availability): The Provider will use commercially reasonable efforts to achieve 99.5% availability, excluding scheduled maintenance.
VII.IIILiability Cap: The Provider's maximum aggregate liability for all breaches of these Terms is limited to the amount actually paid by the Client to the Provider in the 12 months preceding the damage. This limitation does not apply to damage caused intentionally or by gross negligence.
VII.IVIndirect damages: The Provider is in no event liable for lost profits, lost business opportunities, or loss of reputation of the Client.
Article VIIICompliance with AI regulation (EU AI Act)
VIII.ITransparency: The Client undertakes to inform end users that they are interacting with AI-generated outputs, where required by Article 52 of the AI Act.
VIII.IIProhibited uses: The Service must not be used to create social-scoring systems, real-time biometric identification, or other prohibited practices under the AI Act.
Article IXGoverning law and dispute resolution
IX.IChoice of law: These Terms and any claims arising from them are governed by the substantive and procedural law of the Slovak Republic, with the exclusion of conflict-of-law rules and the CISG.
IX.IIJurisdiction: All disputes fall within the exclusive jurisdiction of the general courts at the Provider's registered office.
Acceptable Use Policy (AUP)
Translation notice
The Slovak version of this AUP is the legally binding version. This English translation is provided for convenience only.
Article 1Purpose and scope
1.1The purpose of this AUP is to ensure legal, ethical, and safe use of our software-generation platform.
1.2This AUP applies to all queries, generated code, deployed applications, and any other interaction with the Services.
1.3A breach of this AUP is considered a material breach of the contractual terms (TOS/GTC) and may lead to immediate suspension of the Services without entitlement to a refund.
Article 2Prohibited activities (General Abuse)
The Client undertakes not to use the Services for:
2.1Illegal activity: Generating code intended to commit criminal activity, fraud, or to violate the laws of SR, the EU, and target jurisdictions.
2.2Security disruption: Creating malware, ransomware, spyware, viruses, or scripts designed to bypass third-party security measures (exploit kit).
2.3Phishing and deception: Generating websites or applications that impersonate other entities for the purpose of obtaining login credentials or other sensitive information.
2.4Spam and Denial of Service: Automated generation of systems for sending spam or carrying out DoS/DDoS attacks.
Article 3Specific programming restrictions
It is strictly prohibited to:
3.1Reverse-engineer models: Attempt to obtain the parameters (weights), training data, or system instructions (system prompts) of our platform or third-party model providers.
3.2Data Poisoning: Intentionally insert incorrect or harmful data with the aim of influencing the quality and integrity of outputs.
3.3Bypass safety filters: Use jailbreaking techniques or other sophisticated prompt-engineering methods to generate content that would otherwise be blocked by safety filters.
3.4Train competing systems: Use the outputs of our platform to train, fine-tune, or validate your own models, including machine-learning models that directly compete with our Service.
Article 4Content restrictions and ethical standards
The Service must not be used to generate code or applications that serve to:
4.1Discrimination and hate: Create algorithms that promote discrimination based on race, religion, gender, or other protected characteristics.
4.2Sexually explicit content: Generate code for platforms distributing pornographic or other inappropriate content.
4.3Disinformation: Create deepfake generators or automated bots to spread false information (fake news).
Article 5Deployment responsibility
5.1Self-Review obligation: The Client acknowledges that the Computer Program and/or part thereof may contain code with security vulnerabilities. The Client is required to perform a security audit and testing before deploying any generated code into a production environment.
5.2Third-party licenses: The Client is responsible for ensuring that the generated code does not infringe open-source library licenses or third-party copyrights.
Article 6Monitoring and Enforcement
6.1Automated oversight: The Provider uses automated systems to detect suspicious queries and outputs (Safety Moderation API).
6.2Right to audit: The Provider reserves the right to inspect anonymized query logs in cases of reasonable suspicion of an AUP breach.
6.3Sanctions:
- Level 1 (Warning): For unintentional breaches (e.g., attempting to generate borderline content).
- Level 2 (Suspension): Temporary access block for repeat violations.
- Level 3 (Termination): Permanent account closure without compensation, and reporting of the incident to the relevant authorities (in the case of serious criminal activity).
Article 7Abuse Reporting
If a third party discovers that an application hosted on our infrastructure violates this AUP, they may submit a report to: abuse@polyreq.com.
Privacy Policy (GDPR)
Translation notice
The Slovak version of this Privacy Policy is the legally binding version. This English translation is provided for convenience only.
Article IIntroductory provisions
I.IController: i2R s.r.o., ID No.: 52 465 098, with its registered office at Myslenická 169, 902 01 Pezinok, registered in the Commercial Register of the City Court Bratislava III, Section: Sro, File No. 138802/B (hereinafter "Provider").
I.IIData subjects: These rules apply to natural persons acting on behalf of the Client (statutory representatives, employees) and individual entrepreneurs (sole traders).
Article IICategories of processed data
We process data to the minimum extent necessary for the technical operation of the B2B platform:
Data for managing the contractual relationship and invoicing
- Identification data: First name, last name, title, role at the Client.
- Contact details: Work email address, phone number, ID in communication tools (where integrated).
- Billing details: Company name, registered office, ID No., Tax ID, VAT ID, banking details, payment and subscription history.
Technical and security data (Metadata)
- Access data: IP address, login/logout timestamps, session ID.
- Diagnostic data: Browser version, operating system, technical error logs, metadata about the volume of data transferred (tokens, lines of code).
Article IIILegal bases and purposes of processing
In accordance with Article 6(1) of the GDPR, we process data for the following purposes:
| Purpose of processing | Legal basis | Justification |
|---|---|---|
| Providing platform features | Art. 6(1)(b) GDPR (Performance of contract) | Necessary to create an account, give access to the editor, and manage prepaid credits. |
| Invoicing and tax records | Art. 6(1)(c) GDPR (Legal obligation) | Obligation under the Accounting Act, the VAT Act, and verification in the VIES system. |
| IT infrastructure security | Art. 6(1)(f) GDPR (Legitimate interest) | Protection against cyberattacks (DDoS, brute force), prevention of credit abuse, and protection of intellectual property. |
| B2B communication and support | Art. 6(1)(f) GDPR (Legitimate interest) | Informing existing clients about critical updates and technical changes in the API. |
Article IVRecipients and sub-processors
To ensure top technical quality and security, we use the following vetted sub-processors, with whom we have entered into data-processing agreements (DPAs):
| Sub-processor | Purpose of processing | Location / Regulatory framework |
|---|---|---|
| Amazon Web Services EMEA SARL | Cloud infrastructure (hosting, compute, and database services), user authentication. | EU (Frankfurt, Ireland) / GDPR; SCC + DPF for any transfer outside the EU. ISO 27001, SOC 2. |
| Neo4j Sweden AB | Hosting and management of the graph database (Neo4j AuraDB). | EU / GDPR. ISO 27001, SOC 2. |
| Websupport, s. r. o. | Web application hosting, domain management, email services. | EU / GDPR. ISO 27001. |
| GitHub, Inc. | Source-code hosting, versioning, and management of development environments. | USA / EU Standard Contractual Clauses (SCC) per Decision 2021/914; EU-U.S. Data Privacy Framework (certified). |
| Anthropic PBC | Provision of AI models (Claude) via API. Inputs and outputs are not used for model training (default API policy). | USA / EU SCC; DPA per GDPR Art. 28. Anthropic is a DPA signatory with EU clients. |
| X.AI LLC | Provision of AI models (Grok) via API. | USA / EU SCC under xAI's DPA. |
| Stripe Payments Europe, Ltd. | B2B payment processing, invoicing, VAT-ID verification in VIES. | EU + USA / Globally (PCI DSS certified). |
Technical tools: Services for error logging and stability monitoring that process only technical metadata without PII.
Article VTransfers to third countries (outside EU/EEA)
If the technical solution requires data transfer outside the EU (e.g., the use of services hosted in the USA), the Provider guarantees the security of the transfer through:
- Standard Contractual Clauses (SCC) approved by the European Commission.
- Application of the Data Privacy Framework regime (for certified US entities).
Important
We do not consider prompts (code-generation inputs) themselves to be personal data, provided the Client complies with the prohibition on inserting PII into prompts.
Article VIData retention period
We apply strict rules to minimize retention:
- Contractual and accounting data: 10 years following the year in which the last invoice was issued (statutory archival period).
- Data in the user profile: For the duration of the registration. After the account is deleted, data is immediately deactivated and irreversibly erased after 30 days (backup retention period).
- Security logs (IP addresses): 6 to 12 months, unless required for an ongoing investigation of a security incident.
Article VIIRights of data subjects
You have the right to exercise the following claims at any time:
- Right of access: Request confirmation of processing and a copy of your data.
- Right to rectification: Update your contact details in the system.
- Right to erasure: Request closure of the account and deletion of data (to the extent that this is not overridden by an archival obligation).
- Right to object: Against processing based on legitimate interest.
- Right to lodge a complaint: With the Office for Personal Data Protection of the Slovak Republic (Hraničná 12, Bratislava).
Article VIIIFinal privacy statement
The Provider confirms that the process of generating code with AI is a technical transformation of data. The Client is solely responsible for not entering personal data of their clients or employees into the Service. The Provider is not liable for the processing of data inserted by the Client into the Service in violation of its purpose (software development).
Annex No. 1: Data Processing Addendum (DPA)
Translation notice
The Slovak version of this DPA is the legally binding version. This English translation is provided for convenience only.
Article ISubject and scope
This Addendum applies in all cases where, as part of providing the Services, the Provider processes Personal Data on behalf of the Client (hereinafter "Personal Data").
I.IStatus of the parties: The Client acts as Controller and the Provider acts as Processor within the meaning of Article 28 of the GDPR.
Article IIClient's instructions
II.IThe Provider processes Personal Data exclusively on the basis of the documented instructions of the Client, as set out in the TOS and this Addendum.
II.IIThe Client instructs the Provider to process data for the purposes of:
- provision and maintenance of the Services (Platform, Cloud);
- technical support and incident handling;
- ensuring the integrity and security of the platform.
Article IIISpecification of processing
III.ISubject matter: Provision of cloud services and code-generation services under the TOS.
III.IIDuration: The duration of the contractual relationship under the TOS, plus the backup / deletion period (30 days).
III.IIINature and purpose: Automated processing of data inserted into the Service, application hosting, code generation via AI models.
III.IVCategories of data subjects: Client's employees, end users of applications created by the Client, test subjects.
III.VType of personal data: Identification data (name, email, IP address), authentication data, usage metadata, any content inserted into Customer Data (where it contains PII).
Article IVProvider's obligations
The Provider undertakes to:
IV.IConfidentiality: Ensure that persons authorized to process Personal Data are bound by statutory or contractual confidentiality.
IV.IISecurity (Art. 32 GDPR): Implement appropriate technical and organizational measures, in particular:
- encryption of data in transit (TLS/SSL) and at rest (encryption at rest);
- regular testing of system resilience;
- access-rights management (Principle of Least Privilege).
IV.IIICooperation: Assist the Client in fulfilling its obligation to respond to data subjects' requests to exercise their rights (access, rectification, erasure).
IV.IVNotification of breach: Inform the Client without undue delay (no later than within 48 hours) after becoming aware of a personal data breach.
Article VSub-Processors
V.IThe Client grants the Provider general authorization to engage further processors. The current list includes:
- Amazon Web Services EMEA SARL: Cloud infrastructure (hosting, compute, and database services), user authentication.
- Neo4j Sweden AB: Hosting and management of the graph database (Neo4j AuraDB).
- Websupport, s. r. o.: Web application hosting, domain management, email services.
- GitHub, Inc.: Source-code hosting, versioning, and management of development environments.
- Anthropic PBC: Provision of AI models (Claude) via API.
- X.AI LLC: Provision of AI models (Grok) via API.
- Stripe Payments Europe, Ltd.: B2B payment processing, invoicing, VAT-ID verification in VIES.
V.IIThe Provider will inform the Client of any intended change (addition or replacement of a sub-processor) by email or through the Service interface. The Client has the right to object within 10 days.
Article VITransfers to third countries
VI.IIf the Service uses sub-processors outside the EU/EEA (in particular the USA), the Provider will ensure the lawfulness of the transfer through:
- an adequacy decision (e.g., the EU-U.S. Data Privacy Framework); or
- Standard Contractual Clauses (SCC) adopted by the European Commission.
Article VIIAudit rights
VII.IThe Provider will allow the Client to perform an audit or inspection of data processing once a year, in the form of providing certifications (e.g., SOC 2, ISO 27001) or responses to a security questionnaire. A physical audit at third-party data centers (AWS) is not possible.
Article VIIIErasure and return of data
VIII.IUpon termination of the contractual relationship, the Provider, at the Client's choice, deletes or returns all Personal Data, unless EU or member-state law requires further retention (e.g., accounting purposes).