Book a meeting

Privacy Policy (GDPR)

Last updated: 26 August 2026

This Privacy Policy explains how One Bayt sp. z o.o. processes personal data when you visit onebayt.com, communicate with us, use OneBayt services, or connect a third-party platform such as LinkedIn or Meta to OneBayt Marketing Agent.

1. Who we are

The data controller is One Bayt sp. z o.o., registered at ul. Gajowicka 195, 53-150 Wrocław, Poland, KRS 0000624206, NIP 8971825612. Our office is located at ul. Buska 5a, 53-326 Wrocław, Poland.

For privacy questions or requests, contact us at hello@onebayt.com.

2. Scope of this Policy and our role

This Policy applies to the onebayt.com website and OneBayt services, including OneBayt Marketing Agent.

One Bayt acts as a controller for data used to operate accounts, secure the service, communicate with users, administer contracts and meet legal obligations. When a business customer uploads or connects data and determines why that data is processed, the customer may act as the controller and One Bayt acts as its processor under the applicable agreement and documented instructions.

3. Personal data we process

Depending on how you interact with us, we may process:

  • Website and technical data: IP address, date and time of a request, browser and device information, security events, server logs and necessary cookie identifiers.
  • Contact and business data: name, business email address, telephone number, company, job role and the content of your inquiry, correspondence or meeting request.
  • Account and access data: name, business email, authentication and session data, project membership, permissions and account status.
  • Project data: brand information, files, URLs, instructions, prompts, conversations, drafts, generated content and images that a user chooses to provide or create in the service.
  • Integration data: identifiers, permissions, access and refresh tokens, selected organization or Page identifiers, Page-authored content and supported analytics obtained after a user explicitly connects an external platform.
  • Usage and security data: feature usage, API events, errors, audit trails, cost and billing metadata, and information required to prevent abuse and diagnose incidents.

Please do not submit special-category personal data or confidential third-party information to the service unless this is necessary, lawful and expressly agreed with One Bayt.

4. Purposes and legal bases

We process personal data for the following purposes:

  • to provide, configure and support our services, perform contracts and take steps requested before entering into a contract — Article 6(1)(b) GDPR;
  • to authenticate users, maintain security, prevent abuse, troubleshoot incidents, improve reliability and protect legal claims — our legitimate interests under Article 6(1)(f) GDPR;
  • to respond to inquiries and manage business relationships — Article 6(1)(b) or 6(1)(f) GDPR, depending on the context;
  • to comply with accounting, tax, regulatory and other legal duties — Article 6(1)(c) GDPR;
  • to operate optional integrations, marketing communications or non-essential cookies where consent is the appropriate basis — Article 6(1)(a) GDPR. Consent may be withdrawn at any time without affecting prior lawful processing.

Where One Bayt acts as a processor, we process data on the customer controller’s documented instructions and under the applicable data processing agreement.

5. OneBayt Marketing Agent

OneBayt Marketing Agent is a business content-management service. It helps authorized users research their own brand context, prepare content, manage connected business social-media Pages and analyze supported performance signals. Generated text, images and recommendations are drafts or decision-support materials. They do not produce legal or similarly significant decisions about individuals, and content is not published unless the product’s authorized workflow permits and records an operator action.

5.1 LinkedIn integration

When a user chooses to connect LinkedIn, OneBayt Marketing Agent uses LinkedIn OAuth and the official LinkedIn APIs. The integration is limited to LinkedIn Company Pages that the authenticated user is authorized to administer.

Depending on the features enabled and permissions approved by LinkedIn, we may process:

  • the authenticated administrator’s LinkedIn identifier and limited profile information required for authentication and authorization;
  • the administrator’s organization roles and the list of Company Pages they may administer;
  • organization identifiers, Page name, logo and other supported Page information;
  • content authored by the connected organization, including posts, articles, media references and related metadata;
  • aggregate Page, follower and post-performance statistics;
  • where an approved Page-management feature requires it, comments, reactions or mentions and the minimum permitted member information necessary to display or manage that interaction.

We use this data only to let authorized Page administrators manage, analyze and prepare content for their connected LinkedIn Pages, provide requested Page analytics, and perform actions expressly initiated or approved by an authorized user.

We do not use the official LinkedIn integration to scrape LinkedIn, monitor competitor Pages, create a general LinkedIn feed, enrich CRM or lead profiles, build advertising audiences, recruit candidates, determine creditworthiness, or send mass messages. We do not sell LinkedIn data. We do not combine LinkedIn member data with unrelated data to profile individuals.

OneBayt Marketing Agent does not request access to private LinkedIn messages. The integration does not provide general access to posts from arbitrary personal profiles or unrelated organizations.

LinkedIn remains an independent controller of data processed on the LinkedIn platform. Your use of LinkedIn is also governed by the LinkedIn Privacy Policy.

5.2 Artificial intelligence processing

OneBayt Marketing Agent uses a OneBayt-controlled model gateway to route selected tasks to approved AI service providers. Depending on the requested feature and model configuration, these providers may include Anthropic for text processing and Google Gemini for image or multimodal processing.

Only the information needed for the user-requested operation is sent to an AI provider. For LinkedIn features, organization-authored content and aggregate Page information may be processed to summarize performance, identify content patterns or prepare a draft. LinkedIn member profile information and member social activity are not used for lead generation, advertising targeting, individual profiling or training OneBayt’s own general-purpose AI models.

AI output may be inaccurate and must be reviewed by an authorized user. One Bayt does not use AI output to make solely automated decisions that produce legal or similarly significant effects concerning individuals.

6. Recipients and service providers

We disclose personal data only when necessary and proportionate. Recipient categories may include:

  • hosting, database, storage, backup, security and observability providers;
  • email, authentication, support and business-communication providers;
  • AI service providers used for the task selected by the user, including Anthropic and Google Gemini where configured;
  • connected platforms such as LinkedIn or Meta when required to authenticate, retrieve permitted data or perform an authorized action;
  • professional advisers, auditors and public authorities where required by law or necessary to establish, exercise or defend legal claims.

Our personnel and providers receive access only on a need-to-know basis and are subject to confidentiality and data-protection obligations.

7. International data transfers

Some providers may process data outside the European Economic Area. Where required, we rely on an applicable European Commission adequacy decision, Standard Contractual Clauses or another lawful transfer mechanism, together with supplementary safeguards appropriate to the risk. Information about the applicable safeguards may be requested at hello@onebayt.com.

8. Retention and deletion

We keep personal data only for as long as necessary for the stated purpose, the service agreement, security, legal obligations and the establishment or defence of claims. We periodically review whether data remains necessary.

For LinkedIn Marketing API data, we apply LinkedIn’s requirements and any shorter period required by law or our product design:

  • profile data of a LinkedIn member who has not authenticated to OneBayt Marketing Agent: cached for no more than 24 hours;
  • LinkedIn member social activity, including member-authored posts, comments, reactions and mentions: retained for no more than 48 hours;
  • organization social activity: retained for no more than six weeks, or no more than six months when it relates to an organization authenticated to the application;
  • Page administration and aggregate reporting data: retained for no more than one year;
  • OAuth tokens: retained only while needed to maintain the authorized connection and deleted or invalidated after disconnection, revocation or expiry, subject to short-lived security backups.

When a user disconnects LinkedIn or requests deletion, we stop new synchronization, revoke or invalidate the connection where technically available, and delete or irreversibly anonymize LinkedIn data unless continued retention is required by law. Backup copies are removed through the normal backup-expiry cycle and are not restored for ordinary business use.

When a user closes their OneBayt Marketing Agent account, we treat this as a deletion request for all connected-platform data: we stop synchronization, revoke and delete stored OAuth tokens, and delete or irreversibly anonymize LinkedIn and Meta data on the same terms as upon disconnection, unless continued retention is required by law.

9. Your choices for connected platforms

You can choose whether to connect a supported social platform. You may disconnect it in OneBayt Marketing Agent when that option is available, revoke the application’s permissions in the platform’s settings, or contact hello@onebayt.com. Disconnecting a platform prevents future synchronization but does not affect processing already lawfully completed.

10. Cookies and embedded services

onebayt.com uses cookies necessary to operate the website and remember privacy preferences. If optional analytics, performance or advertising cookies are introduced, they will be disabled until the required consent is obtained.

The website may include third-party content or links, such as Google Maps or Microsoft booking services. Those providers may process data under their own privacy policies when their content is loaded or you choose to use their service. Cookie choices can be reviewed through the consent-preferences control displayed on the website.

11. Security

We use appropriate technical and organizational safeguards designed to protect personal data, including access controls, least-privilege permissions, encrypted transport, secret-management procedures, audit logging, data minimization, monitoring and backups. No service can guarantee absolute security. If you believe data has been exposed or an account has been compromised, contact us promptly.

12. Your GDPR rights

Subject to the conditions and exceptions in applicable law, you may request:

  • access to your personal data;
  • rectification of inaccurate data;
  • erasure of data;
  • restriction of processing;
  • data portability;
  • objection to processing based on legitimate interests;
  • withdrawal of consent at any time where processing is based on consent.

To exercise a right, email hello@onebayt.com. We may request information necessary to verify your identity and protect the data from unauthorized disclosure.

You also have the right to lodge a complaint with the competent supervisory authority. In Poland this is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych): uodo.gov.pl.

13. Children

Our business services are not directed to children. We do not knowingly offer OneBayt Marketing Agent accounts to children.

14. Changes to this Policy

We may update this Policy when our services, providers or legal requirements change. We will publish the current version at this URL and change the “Last updated” date. Where required, we will provide additional notice or request consent before materially changing a consent-based processing activity.

15. Contact

One Bayt sp. z o.o.
Registered address: ul. Gajowicka 195, 53-150 Wrocław, Poland
Office: ul. Buska 5a, 53-326 Wrocław, Poland
Email: hello@onebayt.com
Telephone: +48 881 981 785