Privacy Policy

Privacy Policy – “Too Long Didn’t Listen” (TL;DL) WhatsApp Bot

Last updated: 26 May 2025

1. Who we are

The data controller for all personal data processed in connection with the TL;DL WhatsApp bot is Shell Power Dawid Wierzbicki, NIP PL 5223097660 (“we”, “our”, “us”).
Contact: dawid@realive.ai

2. What data we collect

- Whatsapp Phone Number

- Message History

- Message ID, timestamps

- Subscription and payments information

We do not intentionally collect special-category data. Please avoid sending sensitive information.

3. Why and how we use your data

- Deliver the TL;DL service (receive your voice note, generate a text summary, and send it back to you). Art. 6 (1)(b) – contract performance. Without the phone number and message, we cannot reply.

- Improve, debug, and secure the service - Art. 6 (1)(f) – legitimate interest - interest. We analyse anonymised logs to keep the bot reliable and safe.

4. Who we share data with

OpenAI, L.L.C. Message text/content is forwarded to OpenAI’s API to generate the summary you receive.Servers outside the EEA. Transfers rely on the EU–US Data Privacy Framework and/or Standard Contractual Clauses.

WhatsApp Inc. (Meta)Transport of your messages on the WhatsApp network.See WhatsApp’s own privacy policy.

5. Data retention

Messages & transcripts: deleted automatically 90 days after processing.
Phone numbers and minimal log data: kept for up to 24 months for abuse prevention and accounting, then irreversibly anonymised or deleted.

6. Your rights

Under the GDPR you can request:

Access to your data
Rectification or erasure
Restriction or objection to processing
Data portability

To exercise any right, email dawid@realive.ai.
You may also lodge a complaint with the Polish Data Protection Authority (UODO).

7. Security

We use industry-standard encryption in transit (HTTPS) and at rest, employ access controls, and perform regular audits to keep data secure.

8. International transfers

Where data is sent outside the EEA (e.g., to OpenAI in the US), we rely on approved safeguards such as the EU–US Data Privacy Framework or European Commission Standard Contractual Clauses.

9. Automated decision-making

The summaries you receive are generated automatically by OpenAI’s language model. No profiling that produces legal or similarly significant effects is performed.

10. Changes to this policy

We may update this notice as the service evolves. Material changes will be announced via a message from the bot and by updating the “Last updated” date above.

Questions? Contact us at dawid@realive.ai