vadilator
The controller of your personal data is Dudkiewicz Corp sp. z o.o., ul. Piramowicza 15/6, 90-254 Łódź, Poland (KRS 0000928791, NIP 7252313245, REGON 520260922). For data matters write to admin@vadilator.com.
This matters enough to say before anything else. When you use the measurement tool, the image you drop in is read and measured entirely by JavaScript running on your own machine. It is never uploaded to us, and we never see it. Closing the tab is all it takes to be rid of it.
There are two exceptions, and both are deliberate acts on your part: sending a file for a paid human review, and uploading a logo to a brand template. Those files are stored, and section 5 says for how long.
Account: email address, name, chosen language, password hash. Workspace: its name, plan, the people in it and their roles. Brand templates: client names, brand colours as hex values, logo files and the clear-space rules you enter. Billing: if you subscribe, the company name, address and tax ID needed for an invoice, plus a payment history. Card details are handled by Stripe and never reach our servers. Technical: see section 6.
Running your account and the service — necessary to perform the contract (Art. 6(1)(b) GDPR). Analytics — your consent (Art. 6(1)(a) GDPR), withdrawable at any time. Payments, subscriptions and invoicing — performance of the contract (Art. 6(1)(b)) and our tax and accounting obligations (Art. 6(1)(c)). Abuse prevention and rate limiting — our legitimate interest (Art. 6(1)(f)); for this we store a one-way hash of your IP address, never the address itself.
Files submitted for human review are deleted automatically after 30 days, together with the review. We do not keep copies, we do not use them as examples, and we do not show them to anyone else. Brand templates and logos are kept until you delete them or delete the workspace. Account data is kept until you delete the account. Invoices are kept for the period Polish tax law requires, currently five years from the end of the accounting year.
We use Google Analytics and Hotjar to understand how the product is used so we can improve it. Both load only after you consent in the cookie banner; refuse and everything still works. Hotjar may record anonymised interactions with the page — note that a design rendered on the canvas is not captured, because it is not part of the page markup.
A session cookie keeps you signed in. It is strictly necessary and is not covered by the consent banner.
Providers acting on our instructions: home.pl (hosting and email), Stripe (payments and invoicing), Google (analytics), Hotjar (analytics). If you use the brandbook import, the PDF you upload is sent to Anthropic solely to read the colour values out of it. Some of these providers process data outside the EEA under the safeguards required by GDPR.
You may access, correct, erase, restrict or port your data, object to processing based on legitimate interest, and withdraw consent at any time. You may also complain to the Polish supervisory authority (Prezes UODO, ul. Stawki 2, 00-193 Warsaw).
Vadilator reports measurable geometry, colour differences and format compliance. It does not judge whether a design is good, and an empty report does not certify that a file is free of problems. Nothing it produces is professional advice.
Questions: admin@vadilator.com. See also the Terms of Service.