Legal documents

§ 1. General provisions

1. These Terms set out the types, scope and conditions of the services provided by electronic means on the Website and the Platform, the conditions for concluding and terminating contracts, and the complaints procedure. They constitute the terms and conditions (regulamin) referred to in Art. 8 of the Act of 18 July 2002 on Providing Services by Electronic Means (ustawa o świadczeniu usług drogą elektroniczną).
2. The Service Provider is #onFiRE Rafał Gołubowicz, an entrepreneur entered in the Central Register and Information on Economic Activity (CEIDG), Tax ID (NIP) 5423363362. Address of the Service Provider: as shown in the entry for NIP 5423363362 in CEIDG, the Polish business register.
3. The Service Provider can be contacted by email at kontakt@rezuto.pl on all matters, including complaints, withdrawal from a contract, personal data protection and notices of illegal content. Institutions may also write to uczelnie@rezuto.pl, and Companies to biznes@rezuto.pl.
4. These Terms are made available free of charge on the Website in a manner that allows them to be obtained, reproduced and recorded — they can be printed or saved as a file. On request, we will send their content by email.
5. Reading and accepting these Terms is a condition for concluding a contract. The rules for processing personal data are set out in the Privacy Policy, and the rules for using cookies and similar technologies in the Cookie Policy.
6. The use of the Platform by Institutions and cooperation with Companies are governed by separate agreements (§ 20). These Terms apply to matters not governed by those agreements.

§ 2. Definitions

Capitalized terms used in these Terms have the following meanings:

1. Service Provider (also “REZUTO” or “we”) — the entrepreneur identified in § 1(2).
2. Website — the website in the rezuto.com domain, containing information about REZUTO, contact forms and the waitlist sign-up.
3. Platform — the REZUTO web application, accessible through a browser at the address indicated on the Website, through which the Services requiring an Account are provided.
4. User — a natural person using the Website or the Platform; with regard to Services requiring an Account — a person who has created an Account.
5. Consumer — a User who is a natural person concluding a contract with the Service Provider that is not directly related to their business or professional activity, within the meaning of Art. 22¹ of the Civil Code (Kodeks cywilny).
6. Entrepreneur with Consumer Rights — a natural person concluding a contract directly related to their business activity, where the content of the contract shows that it is not of a professional nature for that person, as arising in particular from the subject of their business activity disclosed in CEIDG, within the meaning of Art. 385⁵ of the Civil Code and Art. 7aa of the Consumer Rights Act of 30 May 2014 (ustawa o prawach konsumenta). The provisions of these Terms concerning Consumers apply to such a person to the extent provided for in those provisions.
7. Minor — a User who is under 18 years of age.
8. Guardian — a parent or legal guardian of a Minor.
9. Account — the User's individual account on the Platform, protected by an email address and a password, in which the User's data, User Content and results are stored.
10. Services — the services provided by electronic means by the Service Provider on the Website and the Platform, described in § 3. The Services available on the Platform are digital services within the meaning of the Consumer Rights Act.
11. Plan — the scope of the Services available on the Platform: the Free Plan, which is free of charge, or one of the paid Plans (Advisor or Full), described in § 7 and on the Pricing Page.
12. Subscription — a contract for paid access to a paid Plan, concluded for a Billing Period and renewed automatically for subsequent Billing Periods until it is canceled.
13. Billing Period — a month or a year, as chosen by the User, for which the Subscription price is paid in advance.
14. Trial Period — a 14-day period of free use of a paid Plan, described in § 7(4)–(6).
15. Pricing Page — the Pricing page of the Website, which sets out the current scope and prices of the Plans.
16. Iskra — a career advisor based on artificial intelligence, with which the User converses on the Platform in the form of a chat.
17. Simulation — an interactive career scenario in which the User takes on a specific role and performs tasks typical of it. Simulations are provided within the Platform feature called Work Simulator. An extended Simulation format that recreates an entire day in a given position is called Work Day.
18. Skills Profile — a summary of assessments of six of the User's competencies, created on the basis of the User's decisions and answers in Simulations and the information provided to Iskra.
19. Match — an indicative score, expressed as a percentage, of how well the User's Skills Profile and interests correspond to the requirements of a field, degree program or occupation.
20. Certificate — a document generated on the Platform confirming that the User has completed a Simulation or a path of Simulations, containing the User's full name, the names of the completed Simulations, the date and a summary of the results.
21. User Content — content entered by the User on the Platform, in particular messages to Iskra, answers and decisions in Simulations, and notes.
22. Institution — a school, university, educational establishment or entity providing career guidance that has concluded a license agreement with the Service Provider.
23. Educator — a teacher, career counselor or other person acting on behalf of an Institution who manages a Class.
24. Class — a group of Users created on the Platform by an Educator, which is joined using a class code shared by the Educator.
25. Company — an entrepreneur that, under a separate agreement, co-creates, together with the Service Provider, Simulations recreating work in positions within its organization.

§ 3. Types and scope of the Services

1. On the Website, the Service Provider provides the following Services free of charge:
   1. making information about REZUTO and its offering available;
   2. contact forms — general, for Institutions, for Companies and for partnerships — enabling messages to be sent to the Service Provider;
   3. the waitlist, i.e. a one-time email notification of the launch of the Platform, sent with the consent of a User who is 16 or older (§ 5(1)(c)).
2. On the Platform, the Service Provider provides the following Services, to an extent that depends on the Plan:
   1. maintaining the Account;
   2. conversations with Iskra, which helps identify interests, understand results and plan next steps; Iskra may remember completed Simulations, degree programs explored and the content of earlier conversations (Iskra's memory);
   3. Simulations, including Work Day, together with feedback after their completion;
   4. the Skills Profile and the Match with fields, degree programs and occupations;
   5. a catalog of occupations and degree programs, and comparisons of degree programs and indicative earnings;
   6. My Path, i.e. a plan of further educational and career steps with a timeline;
   7. the Certificate;
   8. participation in a Class — for Users who join it using a class code.
3. The Services are intended for self-discovery and career orientation. They are not psychological testing, a diagnosis or psychological and educational counseling (poradnictwo psychologiczno-pedagogiczne), and they do not constitute legal, financial or medical advice. Their results are not intended for making decisions on recruitment, employment or admission to a school or university, or for assessing students.
4. The Platform runs in a web browser on computers, tablets and phones, without the need to install additional software, provided that the requirements set out in § 4 are met (functionality and compatibility). It does not integrate with the User's other software, except for integrations agreed with an Institution in a separate agreement; the Certificate can be saved on a device and shared with persons of the User's choice (interoperability).
5. The Service Provider provides updates, including security updates, necessary to keep the Services in conformity with the contract. Because the Platform runs in a browser, updates are deployed automatically and require no action by the User.
6. The Service Provider may develop the Platform, in particular by adding new Simulations, fields and features, on the terms set out in § 21.

§ 4. Technical requirements and security

1. Using the Website requires a device with internet access and a web browser in a version supported by its developer. Using the Platform additionally requires:
   1. JavaScript to be enabled in the browser;
   2. the browser to allow the storage of strictly necessary cookies and data in browser storage required for logging in (Cookie Policy);
   3. an active email account.
2. The User is prohibited from providing content of an unlawful nature.
3. The use of services provided by electronic means involves risks typical of the internet, such as:
   1. malicious software, e.g. viruses, on the User's device;
   2. obtaining login credentials by impersonating the Service Provider (phishing);
   3. takeover of an Account as a result of using a weak password or a password also used on other websites;
   4. unsolicited messages (spam).
4. To limit these risks, the User should use up-to-date software and antivirus protection, use a strong and unique password, not share login credentials and check the website address before logging in. The Service Provider never asks for a password by email or by phone. The safeguards we use are described in the Security document.

§ 5. Conclusion of the contract and the Account

1. The contract for the provision of Services on the Website is concluded:
   1. with regard to making information available — upon entering the Website, for the duration of its use;
   2. with regard to a contact form — upon starting to fill it in; the contract expires when the form is sent or when the User decides not to send it;
   3. with regard to the waitlist — upon signing up, which involves giving consent to receive the notification of the Platform's launch and confirming that the User is 16 or older. Only persons aged 16 or older may join the waitlist; if we learn that a younger person has signed up, we will remove their email address from the list. This Service is free of charge and is provided on the basis of that consent, which the User may withdraw at any time by clicking the unsubscribe link in a message from us or by writing to kontakt@rezuto.pl. The contract expires when the notification is sent, when consent is withdrawn or when the email address is removed from the list.
2. To create an Account, the User:
   1. fills in the registration form, providing their full name, email address, password, information about their age and their stage of education or work;
   2. accepts these Terms and confirms having read the Privacy Policy;
   3. confirms their email address by clicking the link sent in a message.
3. The contract for maintaining an Account on the Free Plan is concluded upon confirmation of the email address, for an indefinite period, and is free of charge. A person aged 13–15 may conclude it only with the consent of a Guardian — in that case, the contract is concluded only once both the email address and the Guardian's consent have been confirmed (§ 6(2)).
4. The Account is personal: one person may have one Account. The Account may not be made available to other persons, and another person's Account may not be used.
5. The User provides true information, in particular regarding their age, and keeps it up to date in the Account settings. Login credentials must be protected against access by third parties, and the Service Provider must be notified without delay of any suspected unauthorized access to the Account.
6. Educators' Accounts are created on the basis of an agreement with an Institution (§ 20).

§ 6. Minors

1. A person who is 16 or older may create an Account on their own. Although a Minor aged 16–17 has limited capacity to perform legal acts (Art. 15 of the Civil Code), we regard the free contract for maintaining an Account as a contract commonly concluded in minor everyday matters, which the Minor may conclude without a Guardian's consent (Art. 20 of the Civil Code); this does not apply to paid Plans, which may be ordered only by an adult (paragraph 5). From the age of 16, a Minor may also consent on their own to the processing of their personal data in information society services (Art. 8 of Regulation (EU) 2016/679 — GDPR).
2. A person aged 13 to 15 may create an Account only with the consent of a Guardian. In the registration form, they provide the Guardian's email address, to which we send information about the Platform, links to these Terms and the Privacy Policy, and a link to confirm consent. Until consent is confirmed, the Account remains inactive. If consent is not confirmed within 14 days, we delete the registration request together with the data provided.
3. A person under 13 may not create an Account. If we learn that such a person has created an Account, or that the Account of a person aged 13–15 was created without a Guardian's consent, we will delete it together with its data.
4. The Guardian of a Minor aged 13–15 may at any time, by writing to kontakt@rezuto.pl, withdraw consent or request the deletion of the Account, and may also exercise on the Minor's behalf the rights described in the Privacy Policy. Withdrawal of consent is equivalent to termination of the contract for maintaining the Account: we delete the Account without undue delay after receiving the Guardian's statement and erase the data within the time limits set out in section 11 of the Privacy Policy.
5. Only an adult may order a paid Plan. A Guardian may order a Subscription for a Minor — in that case, the party to the Subscription contract and the payer is the Guardian, who is entitled to the rights of a Consumer.
6. The Service Provider does not direct marketing content to Minors and does not profile them for marketing purposes. The Platform's content is designed for persons aged 13 and over.

§ 7. Plans, prices and the Trial Period

1. The Plans shown in the table are available on the Platform. The detailed and current scope of each Plan, including the limits applicable in the Free Plan, is set out on the Pricing Page.

2. Prices shown on the Pricing Page and during ordering are final prices in Polish zloty (PLN) and include all applicable taxes. The Service Provider does not charge additional fees for the use of any payment method.
3. The price applicable to the User is the price shown at the time the order is placed. The rules for changing the price during a Subscription are set out in § 10. When announcing a price reduction, we also state the lowest price from the 30 days before the reduction was introduced.
4. A User who has not previously used a Trial Period may use a chosen paid Plan free of charge for 14 days. A Trial Period may be used only once.
5. If the User started a Trial Period without ordering a Subscription, the Account automatically returns to the Free Plan when the Trial Period ends — without any charges and without loss of data.
6. If, when starting a Trial Period, the User ordered a Subscription and provided a payment method, the first payment will be taken only after the Trial Period ends, unless the User cancels the Subscription earlier in the Account settings. At least 3 days before the end of the Trial Period, we will send an email reminder stating the date and amount of the first payment.
7. After a Subscription or Trial Period ends, the User's data, results and history remain in the Account, and access to features is limited to the scope of the Free Plan.

§ 8. Ordering a Subscription and payments

1. To order a Subscription, the User:
   1. selects a Plan and a Billing Period;
   2. reviews the order summary, which includes the Plan, the price, the Billing Period, information on automatic renewal and on how to cancel, and — for a Trial Period — the date of the first payment;
   3. selects a payment method;
   4. may — if they wish — request that performance begin before the withdrawal period expires (§ 11(4));
   5. confirms the order using a button clearly indicating an obligation to pay, e.g. “Order with obligation to pay”.
2. The Subscription contract is concluded upon confirmation of the order. Without undue delay thereafter, we send to the User's email address a confirmation of the conclusion of the contract on a durable medium, together with these Terms in the version in force at the time of the order and — if the User made it — a confirmation of the request referred to in § 11(4).
3. Payments are handled by a licensed payment institution. The available payment methods, e.g. payment card, fast bank transfer or mobile payment, are presented when ordering. The User provides card details directly to the payment institution — the Service Provider has no access to the full card number or the security code.
4. By ordering a Subscription, the User authorizes the chosen payment method to be charged the price for subsequent Billing Periods (recurring payments) until the Subscription is canceled. The price is charged in advance, at the beginning of each Billing Period.
5. If payment for a subsequent Billing Period fails, we will inform the User by email and retry the charge; during this time, the User may change the payment method. If the payment cannot be completed within 7 days, the Subscription expires and the Account moves to the Free Plan — without additional charges and without loss of data.
6. After each payment, we send a payment confirmation by email. On request, we issue an invoice, including one bearing a Tax ID (NIP).

§ 9. Renewal and cancellation of the Subscription

1. The Subscription renews automatically for subsequent Billing Periods of the same length until the User cancels it. We provide this information before the order is placed and in the order confirmation.
2. At least 7 days before a yearly Subscription renews, we send an email reminder stating the renewal date, the amount and how to cancel the Subscription.
3. The User may cancel the Subscription at any time, without giving a reason — in the Account settings or by writing to kontakt@rezuto.pl. Cancellation takes effect at the end of the current, paid Billing Period: until then, the User retains access to the paid Plan, after which the Account moves to the Free Plan. We send a confirmation of cancellation by email.
4. No refund is given for the unused part of a paid Billing Period, unless provided for by law or these Terms, in particular in the event of:
   1. withdrawal from the contract (§ 11);
   2. lack of conformity of a Service with the contract (§ 12);
   3. termination of the contract by the Service Provider (§ 18(4));
   4. termination of the contract by the User in connection with a change to these Terms or a material change to the Services (§ 21).
5. The User may change the Plan or the Billing Period in the Account settings. The effects of the change, including any additional payment and the date from which the change applies, are shown before it is confirmed. A switch to a lower Plan or a shorter Billing Period takes effect at the start of the next Billing Period.
6. Deleting the Account ends the Subscription. Before an Account with an active Subscription is deleted, we inform the User of the consequences, including the loss of access to the paid period, subject to paragraph 4.

§ 10. Changes to the Subscription price

1. The Service Provider may increase the Subscription price only for one of the following valid reasons:
   1. an increase in the costs of providing the Services, in particular the costs of infrastructure, artificial intelligence models or payment processing;
   2. a change in the law, including in the rates of taxes and public levies, affecting the cost of providing the Services;
   3. an increase in the prices of consumer goods and services announced by the President of Statistics Poland (Prezes GUS);
   4. a significant extension of the scope of the Plan.
2. We give notice of a price increase by email and on the Platform at least 30 days before the start of the Billing Period from which the new price would apply, stating the new price, the date from which it applies and the reason for the change.
3. The new price applies only if the User actively accepts it, e.g. by clicking the acceptance button on the Platform. A lack of response does not constitute consent.
4. If the User does not accept the new price before the end of the current Billing Period, the Subscription expires at the end of that period and the Account moves to the Free Plan. The existing price applies until the end of the paid period.
5. A price reduction does not require acceptance and applies from the next Billing Period.

§ 11. Right of withdrawal

1. A Consumer and an Entrepreneur with Consumer Rights may withdraw from a distance contract within 14 days, without giving any reason and without incurring any costs, except for the costs specified in paragraph 5.
2. The withdrawal period runs from the day the contract is concluded: for a Subscription, from the day the order is confirmed (§ 8(2)), and for the contract for maintaining an Account, from the day the email address is confirmed or, where the Account is created by a person aged 13–15, from the day on which both the email address and the Guardian's consent have been confirmed (§ 5(3)). To meet the deadline, it is sufficient to send the statement before the period expires.
3. The statement of withdrawal may be submitted by email to kontakt@rezuto.pl or by letter to the Service Provider's address (as shown in the entry for NIP 5423363362 in CEIDG, the Polish business register), in any form — including by using the model form set out in Annex 1, although this is not mandatory. We will confirm receipt of the statement by email without delay.
4. We begin providing paid Services before the withdrawal period expires only at the express request of the Consumer, made by ticking a separate, optional checkbox when ordering, which is not ticked by default. Without such a request, access to the paid Plan begins after that period expires, and the first Billing Period is counted from the day access begins. During a Trial Period, performance is free of charge, so no request is needed.
5. A Consumer who made the request referred to in paragraph 4 and then withdraws from the contract pays for the Services provided up to the moment of withdrawal. The amount is calculated in proportion to the number of days the paid Plan was used, based on the price for the Billing Period; we refund the remaining part of the price.
6. We make the refund without undue delay, and in any event no later than 14 days from the day we receive the statement of withdrawal, using the same means of payment as the Consumer used, unless the Consumer agrees to a different means that does not involve any costs for them.
7. After withdrawal from the contract, the Service Provider does not use User Content other than personal data, except for content that is useful only in connection with the Service, relates exclusively to the Consumer's activity within the Service, has been combined with other data and cannot be separated from it without undue difficulty, or has been generated jointly with other persons who can continue to use it. At the Consumer's request, we will make User Content other than personal data available to them free of charge, within a reasonable time and in a commonly used, machine-readable format.
8. Withdrawal from the Subscription contract does not result in the deletion of the Account — the Account moves to the Free Plan, unless the Consumer also withdraws from the contract for maintaining the Account; in that case, we will delete the Account.

§ 12. Conformity of the Services with the contract and complaints

1. The Service Provider supplies Services that are in conformity with the contract throughout the period of their provision and is liable to Consumers and Entrepreneurs with Consumer Rights for any lack of conformity that occurs or becomes apparent during that period, on the terms set out in the Consumer Rights Act, in particular in Arts. 43j–43o.
2. A complaint may be submitted by email to kontakt@rezuto.pl — preferably from the address associated with the Account — or by letter to the Service Provider's address (as shown in the entry for NIP 5423363362 in CEIDG, the Polish business register). To make it easier to handle, it is advisable to include contact details, a description of the problem, the date it occurred and the remedy requested; however, this is not a condition for the complaint to be considered.
3. The Service Provider responds to a complaint within 14 days of receiving it, by email or in another manner indicated by the User. If it does not respond within that period, it is deemed to have accepted the complaint (Art. 7a of the Consumer Rights Act).
4. In the event of a lack of conformity, the Consumer may demand that the Service be brought into conformity with the contract. The Service Provider brings the Service into conformity within a reasonable time of receiving the demand, without undue inconvenience and at no cost to the Consumer. It may refuse if bringing the Service into conformity is impossible or would require excessive costs.
5. The Consumer may submit a statement of price reduction or of termination of the contract if:
   1. bringing the Service into conformity with the contract is impossible or requires excessive costs;
   2. the Service Provider has not brought the Service into conformity with the contract;
   3. the lack of conformity persists despite attempts to bring the Service into conformity;
   4. the lack of conformity is so significant that it justifies a price reduction or termination of the contract without first demanding that the Service be brought into conformity;
   5. it is clear from the Service Provider's statement or from the circumstances that it will not bring the Service into conformity within a reasonable time or without undue inconvenience to the Consumer.
6. The reduced price bears the same proportion to the price under the contract as the value of the non-conforming Service bears to the value of a conforming Service; for a Subscription — for the period during which the Service was not in conformity with the contract. The Consumer may not terminate the contract if the lack of conformity is immaterial.
7. We refund amounts due as a result of a price reduction or termination of the contract without undue delay, and in any event no later than 14 days from the day we receive the Consumer's statement, using the same means of payment, unless the Consumer agrees to a different means that does not involve any costs for them.
8. Complaints concerning free Services, as well as complaints from Users who are not Consumers, are handled under the same procedure and within the same time limit.

§ 13. Out-of-court dispute resolution

1. A Consumer may use out-of-court complaint handling and redress procedures, in particular:
   1. seek free assistance from a municipal or district consumer ombudsman (miejski lub powiatowy rzecznik konsumentów) or from a social organization whose statutory tasks include consumer protection;
   2. apply for mediation or for the case to be heard by a permanent amicable consumer court (stały polubowny sąd konsumencki) operating at the Provincial Inspector of the Trade Inspection (wojewódzki inspektor Inspekcji Handlowej);
   3. contact another entity authorized to resolve consumer disputes out of court — the register of such entities and information on their procedures are published by the President of the Office of Competition and Consumer Protection (Prezes UOKiK) at polubowne.uokik.gov.pl.
2. Participation by the Service Provider in out-of-court dispute resolution is voluntary, and we decide whether to consent to it on a case-by-case basis. If we do not uphold a complaint, we will state in our response whether we consent to the out-of-court resolution of the dispute and, if so, through which entity.
3. Using out-of-court dispute resolution methods is voluntary and does not deprive the Consumer of the right to pursue claims in court.

§ 14. Rules for using the Website and the Platform

1. The User uses the Website and the Platform in accordance with the law, these Terms and principles of good conduct, respecting the rights of others.
2. In particular, the following are prohibited:
   1. providing content of an unlawful nature, including content that infringes personal rights or copyright, content that incites hatred or violence, and pornographic content;
   2. entering personal data of other people, e.g. colleagues, patients or clients — Simulations are fictional and do not require real data;
   3. attempts to circumvent the safeguards or limitations of Iskra and Simulations, including inducing Iskra to generate harmful content or content inconsistent with its intended purpose, or to disclose its instructions;
   4. automated downloading of content (scraping), use of the Platform by means of bots and scripts, and decompiling or reverse engineering the software — to the extent not permitted by mandatory provisions of law;
   5. actions that disrupt the operation of the Platform, including overloading it, distributing malicious software and security testing carried out outside the responsible vulnerability disclosure rules described in the Security document;
   6. making the Account available to other people, reselling access to the Platform and commercial use of the Services without the Service Provider's consent;
   7. circumventing Plan limits, e.g. by creating multiple Accounts or using the Trial Period more than once;
   8. impersonating other people and providing false information, in particular regarding age;
   9. using the Platform's content, including Simulations and Iskra's responses, to train artificial intelligence models or to create competing services;
   10. modifying the Certificate or presenting it in a misleading manner.
3. Please do not provide particularly sensitive data in conversations with Iskra or in Simulations — data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, genetic data, biometric data, data concerning health, sex life or sexual orientation, or data relating to criminal convictions and offences (Arts. 9 and 10 GDPR) — or passwords, identity document numbers or payment card details.
4. To protect Users, in particular Minors, the Platform uses automated safety filters that may block the sending of a message or the generation of a response that violates the law or these Terms. Decisions to suspend an Account or terminate a contract are always made by a human.
5. A breach of the rules set out in paragraph 2 may result in the removal of content, suspension of the Account or termination of the contract in accordance with § 17 and § 18.

§ 15. Iskra and content generated by artificial intelligence

1. Iskra is an artificial intelligence system, not a human. Artificial intelligence also drives the behavior of the characters in Simulations (e.g. a client, a manager or a patient) and generates feedback and summaries of results. We also disclose this directly on the Platform, in accordance with Art. 50 of Regulation (EU) 2024/1689 on artificial intelligence (the AI Act).
2. Iskra's responses and the content of Simulations are generated by an artificial intelligence model made available by an external provider, on the basis of instructions, scenarios and materials prepared by the Service Provider. The rules for transferring data to that provider are set out in the Privacy Policy.
3. Content generated by artificial intelligence may be incomplete, out of date or incorrect. It is for information purposes — before making an important decision, e.g. about choosing a degree program or changing jobs, it is worth verifying it, e.g. with a career counselor, a teacher, a university or an employer.
4. The Skills Profile, the Match, comparisons of degree programs and earnings, and the Certificate are not a psychological assessment or a diagnosis, and do not guarantee admission to university, employment or any particular earnings. Earnings data come from publicly available sources and are indicative. The Certificate confirms the completion of a Simulation on the Platform — it is not an official document and does not confirm professional qualifications.
5. Iskra does not provide medical, psychological, legal or financial advice and does not replace a specialist. Nor is it intended to provide support in crisis situations: if there is a threat to life or health, call the emergency number 112; children and young people can also call the free 116 111 helpline.
6. The Platform does not recognize Users' emotions and does not process their biometric data.
7. In the Iskra dashboard, the User may delete individual conversations and reset Iskra's memory.
8. The Service Provider does not use User Content to train artificial intelligence models and uses only providers that have contractually undertaken not to use it for that purpose either.
9. Incorrect or inappropriate responses from Iskra can be reported to kontakt@rezuto.pl. Reports help us improve the safety and quality of the Services.

§ 16. Intellectual property

1. The Website, the Platform, Simulations, scenarios, texts, graphics, software, the REZUTO and Iskra designations and their arrangement are protected by law, in particular by copyright and industrial property law. These rights belong to the Service Provider or to entities that have granted it a license, including Companies co-creating Simulations.
2. Upon conclusion of the contract, the Service Provider grants the User a non-exclusive, non-transferable license to use the Platform and its content to the extent necessary to use the Services, for the term of the contract. The license does not cover copying, distributing or commercially exploiting Simulations and other Platform materials, subject to paragraph 4 and the provisions on permitted use (dozwolony użytek).
3. User Content belongs to the User. The User grants the Service Provider a royalty-free, non-exclusive license to record, store and process it — including transferring it to the provider of artificial intelligence models — and to display it, solely to the extent necessary to provide the Services and for as long as that content is stored on the Platform. The license does not cover publishing User Content or using it to train artificial intelligence models.
4. Subject to § 14(2)(i), the User may freely use their results, Skills Profile, Certificate and the responses Iskra generated for them — including attaching the Certificate to a CV and sharing it with a university, an employer or a counselor. Only the User decides with whom to share them.
5. The Service Provider may use anonymized aggregate statistics that do not allow a User to be identified to develop Simulations and the Services.

§ 17. Point of contact and notices of illegal content

1. The point of contact referred to in Arts. 11 and 12 of Regulation (EU) 2022/2065 (the Digital Services Act), both for the authorities of the Member States, the European Commission and the European Board for Digital Services and for recipients of the Services, is the email address kontakt@rezuto.pl. We communicate in Polish or English, and messages are not handled solely by automated tools.
2. Anyone may report content available through the Website or the Platform that they consider to be illegal by writing to kontakt@rezuto.pl. The notice should include:
   1. an explanation of why the notifier considers the content to be illegal;
   2. a precise indication of the content, e.g. its web address or a description of where it is located;
   3. the notifier's name and email address — except for notices concerning certain offenses against children, e.g. child sexual abuse;
   4. a statement that the notifier is acting in good faith and believes that the information in the notice is accurate and complete.
3. We acknowledge receipt of the notice and process it in a timely, diligent, objective and non-arbitrary manner. We inform the notifier of our decision, indicating the available means of redress.
4. If we remove content or restrict the use of an Account because the content is illegal or incompatible with these Terms, we will provide the User with a statement of reasons that includes: the type of restriction and its duration, the facts and circumstances on which it is based, information on whether the decision was taken using automated means, a reference to the legal basis or the provision of these Terms, and information on the possibility of appeal.
5. The decision may be appealed within 6 months by writing to kontakt@rezuto.pl. Appeals are considered by a human within 14 days. This does not exclude the right to use out-of-court dispute resolution or to go to court.
6. If we obtain information about content indicating a criminal offense that threatens the life or safety of a person, we will notify the competent law enforcement authorities without delay.

§ 18. Suspension and termination of the contract

1. The User may terminate the contract for maintaining the Account at any time, without giving a reason, by deleting the Account in the settings or by writing to kontakt@rezuto.pl. Termination takes effect upon deletion of the Account. Before deleting the Account, it is worth saving any Certificates; the User may also obtain a copy of their data on request.
2. The Service Provider may terminate the contract with the User only for one of the following valid reasons:
   1. gross or persistent breach of these Terms, in particular of § 14(2), despite a request to cease the breaches — unless such a request is impossible or pointless given the nature of the breach;
   2. providing content of an unlawful nature;
   3. actions that threaten the security of the Platform or of other Users;
   4. providing false information about age that prevents the application of the rules set out in § 6;
   5. an obligation arising from the law, a court ruling or a decision of an authority;
   6. permanent cessation of the provision of the Services.
3. The Service Provider terminates the contract with 30 days' notice, by sending the User a notice of termination together with a statement of reasons by email. In the cases referred to in paragraph 2(a)–(c), termination may take effect immediately. We give at least 30 days' notice of the cessation of the Services and enable Users to download their data.
4. If the Service Provider terminates the contract, we refund to the User a proportionate part of the price for the unused, paid Billing Period.
5. In the cases referred to in paragraph 2(a)–(c), or where there is a reasonable suspicion that the Account has been taken over by an unauthorized person, the Service Provider may temporarily suspend the Account — for the time necessary to clarify the matter, but for no longer than 30 days — informing the User of this together with a statement of reasons (§ 17(4)).
6. If the User does not log in to the Account for 24 months and has no active Subscription, we send an email warning of the planned deletion of the Account. If the User does not log in within 30 days of that message, we delete the Account and the contract for maintaining it expires.
7. After the Account is deleted, the data are deleted within the time limits set out in the Privacy Policy.

§ 19. Liability

1. The Service Provider is liable to Consumers and Entrepreneurs with Consumer Rights in accordance with the law. These Terms do not exclude or limit that liability.
2. The Service Provider endeavors to ensure that the Website and the Platform operate without interruption. Technical work that may temporarily restrict access to the Services is carried out, where possible, during periods of lowest traffic and is announced in advance. Failures are remedied without delay.
3. Results, recommendations and content generated by artificial intelligence are indicative (§ 15). Educational and career decisions are made by the User.
4. With respect to Users who are neither Consumers nor Entrepreneurs with Consumer Rights, unless a separate agreement provides otherwise:
   1. the Service Provider is liable only for actual loss, excluding lost profits;
   2. the Service Provider's total liability is limited to the amount of the fees paid by that User in the 12 months preceding the event giving rise to the damage;
   3. the limitations referred to in points (a) and (b) do not apply to damage caused intentionally or to personal injury.
5. The User is liable for the content they enter and for using the Services in breach of the law or these Terms, in accordance with the general rules.

§ 20. Institutions and Companies

1. Institutions use the Platform under a separate license agreement specifying, in particular, the number of accounts, the license term, the price and the scope of support, together with a data processing agreement.
2. An Educator creates a Class on the Platform and shares the class code. A User joins a Class by entering the code in their Account. The rules set out in § 6 apply to Minors joining a Class. A User may at any time ask the Educator or the Service Provider to be removed from a Class.
3. The Educator sees the Class roster — the first name, last name, email address and join date of each person — and aggregate summaries, e.g. the number of completed Simulations, the most frequently chosen degree programs and the results of challenges between Classes. Summaries are available only for groups of at least 5 people. The Institution and the Educator never see the individual results, conversations with Iskra, notes or progress of a specific person, nor when that person uses the Platform.
4. With regard to Class management (Class roster, class codes, aggregate summaries), the Service Provider processes personal data on behalf of the Institution as a processor. The Service Provider is the controller of the data relating to the User's Account, conversations with Iskra, Simulations and results.
5. A User who belongs to a Class uses the features covered by the Institution's license free of charge for as long as they remain a member of the Class and the license remains in force. After that, the Account remains active on the Free Plan, or on a paid Plan if the User has a Subscription.
6. Companies co-create Simulations recreating work in positions within their organizations under separate agreements. Simulations co-created with a Company are labeled with its name. A Company receives only anonymous aggregate reports concerning groups of at least 5 people and does not receive Users' personal data, their results or information on who has tried on a given role.
7. A Simulation co-created with a Company is not a recruitment process. If the User wishes to apply for a job or an internship with the Company, they do so on their own, outside the Platform.
8. Agreements with Institutions and Companies may not limit the rights of Users arising from these Terms and the law.

§ 21. Changes to the Terms and the Services

1. The Service Provider may amend these Terms for the following valid reasons:
   1. a change in the law affecting the content of these Terms or the provision of the Services;
   2. a court ruling, or a decision, recommendation or guidance of a competent authority;
   3. the introduction of new Services or features, or the modification or withdrawal of existing ones;
   4. the need to ensure the security of the Services, prevent abuse or protect Users, in particular Minors;
   5. a change in the Service Provider's details, payment methods or the technical conditions for providing the Services;
   6. the need to remove ambiguities, errors or typos.
2. We send information about the changes — with a description of them and the date they take effect — by email and publish it on the Platform at least 14 days before they take effect, and for Users with an active Subscription — at least 30 days in advance. We apply a shorter period only where required by law or by a decision of an authority.
3. A User who does not accept the changes may, before the date they take effect, terminate the contract with immediate effect and without any costs — by deleting the Account or by terminating the Subscription contract in the Account settings or by email to kontakt@rezuto.pl. In that case, the User will receive a refund of a proportionate part of the price for the unused, paid Billing Period. If the User does not terminate the contract by the date the changes take effect, the changes become binding on the User.
4. Changes to these Terms do not affect rights acquired before they take effect; in particular, they do not change the price of a Billing Period already paid for. Price changes are governed exclusively by § 10.
5. The Service Provider may modify the Services — e.g. add features or change their appearance or the technologies used — for the reasons set out in paragraph 1, at no additional cost to the User. If a modification has a material and negative effect on access to or use of a paid Service, we will inform the Consumer of it in advance, on a durable medium. The Consumer may then terminate the contract within 30 days of the modification or, if later, of receiving information about it, and receive a refund of a proportionate part of the price for the unused period.

§ 22. Final provisions

1. These Terms are governed by Polish law. The choice of law does not deprive a Consumer of the protection afforded to them by provisions that cannot be derogated from by agreement under the law of the country of their habitual residence.
2. Disputes with Consumers and Entrepreneurs with Consumer Rights are resolved by the court having jurisdiction under the general rules. Disputes with other Users are resolved by the court having jurisdiction over the Service Provider's place of business.
3. These Terms are available in Polish, English and Spanish. The English and Spanish versions are translations; in the event of any discrepancy, the Polish version prevails. This is without prejudice to the rule that ambiguous provisions of these Terms are interpreted in favor of the Consumer (Art. 385 § 2, second sentence, of the Civil Code).
4. Matters not governed by these Terms are subject to the provisions of Polish law, in particular the Civil Code, the Consumer Rights Act and the Act on Providing Services by Electronic Means.
5. These Terms apply from the date indicated at the beginning of this document. Previous versions of the Terms are available on request.

Annex 1. Model withdrawal form

Complete and return this form only if you wish to withdraw from the contract. Using it is not mandatory.

1. Data controller and contact

The controller of your personal data is #onFiRE Rafał Gołubowicz, Tax ID (NIP) 5423363362 (hereinafter “we”).

For all matters concerning personal data, including to exercise your rights, write to kontakt@rezuto.pl or send a letter to our address (as shown in the entry for NIP 5423363362 in CEIDG, the Polish business register).

We have not appointed a data protection officer because we are not required to do so (Art. 37 GDPR). We handle data protection matters directly — you can contact us as described above.

“GDPR” means Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (text on EUR-Lex). When we manage a Class on behalf of an Institution, e.g. a school or university, we are not the controller but a processor — see section 8.

2. Where we get your data from

We receive most data directly from you — when you create an Account, talk to Iskra, complete Simulations, send a form or sign up for the waitlist. The rest comes from these sources:

• —From your activity on the Platform — based on your answers in Simulations and your conversations with Iskra, we generate results, the Skills Profile and the Match (section 5).
• —From a person aged 13–15 — the Guardian's email address, which they provide when registering so that we can ask the Guardian for consent.
• —From a school, university or company — the first name, last name, work email address and role of the people for whom the organization creates Educator accounts or whom it designates as contacts for us.
• —From the payment institution — payment status, transaction ID and type of payment method, without the full card number.
• —From your device — technical data, e.g. IP address and browser information, recorded automatically in server logs.

3. Purposes, legal bases and retention periods

The table lists all the purposes for which we process personal data, together with the categories of data, the legal bases and the retention periods. More on retention periods in section 11.

Where we process data on the basis of a legitimate interest, you may object (section 12). You may withdraw consent at any time, without affecting the lawfulness of processing carried out before its withdrawal.

4. Do you have to provide your data?

Providing data is voluntary, but without some of it we will not be able to provide the Services:

• —Account — your full name, email address, password and age information are a contractual requirement; without them, you cannot create an Account.
• —Guardian's consent — without the Guardian's email address, a person aged 13–15 cannot create an Account.
• —Subscription — without payment details, you cannot order a paid Plan. You provide invoicing details if you want to receive an invoice; keeping accounting documents is a statutory requirement.
• —Forms and the waitlist — without an email address, we cannot reply to your message or send you the notification.
• —Conversations and Simulations — what you write is up to you. Simulations are fictional, so you do not need to provide real data about yourself or other people in them.

5. Profiling

When creating the Skills Profile and the Match, we automatically evaluate certain of your characteristics — this is profiling within the meaning of Art. 4(4) GDPR. It works as follows:

1. Each Simulation consists of tasks and decisions assigned to six competencies, e.g. communication, analysis or decision-making. We assess your answers against criteria prepared with people working in the given industry; answers written in your own words are assessed by an artificial intelligence model against the same criteria.
2. We combine the results of Simulations into the Skills Profile. In paid Plans, the Skills Profile also includes a description of your preferences and working style, based on your choices in Simulations and on what you tell Iskra about your interests. It is not a psychological test or a personality diagnosis.
3. The Match percentage is derived from a comparison of your Skills Profile and interests with the requirements profile of a given field, degree program or occupation — the closer the fit, the higher the score.
4. The results are purely advisory and do not produce legal effects concerning you or similarly significantly affect you. We do not use them to make decisions on admission to a school, a university or a job, we do not share individual results with schools or companies, and we do not make prices or access to the Services dependent on them. We therefore do not make decisions based solely on automated processing as referred to in Art. 22 GDPR.
5. You may ask for an explanation of how your result was arrived at and for it to be reviewed by a human, and you may also object to profiling — write to kontakt@rezuto.pl. You may also choose not to use these features or delete your results.
6. We do not recognize emotions, do not process biometric data and do not profile minors for marketing purposes.

6. Iskra and artificial intelligence

1. Iskra, the characters in Simulations and the feedback are powered by artificial intelligence models from an external provider. To generate a response, we send the provider the content of your message or answer together with the necessary context, e.g. information about completed Simulations. We do not send data that is not needed for this purpose, e.g. your email address, password or payment details.
2. The model provider acts as our processor and may process data in the US, with the safeguards described in section 10. It may use the data we send it solely to generate responses and to detect abuse and protect the security of its service. It deletes the content sent and the responses generated after 30 days at the latest. It may keep them longer only if its safety systems have flagged them as violating its usage rules — solely to investigate that violation — or where required by law.
3. We do not use your conversations, answers or results to train artificial intelligence models. We use only providers that have contractually undertaken not to do so either.
4. Please do not give Iskra data revealing your racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, genetic data, biometric data, data concerning your health, sex life or sexual orientation (Art. 9(1) GDPR), data relating to criminal convictions and offences (Art. 10 GDPR) or data about other people. If, despite the request displayed, you provide data referred to in Art. 9(1) GDPR, we will process it solely to reply to your message — on the basis of your explicit consent, which you give by knowingly providing it (Art. 9(2)(a) GDPR). You can withdraw consent by deleting the conversation. If you provide data relating to criminal convictions or offences, delete the conversation or ask us to delete it — we will do so without undue delay.
5. In the Iskra dashboard, you can delete a single conversation and reset Iskra's entire memory. Deleted conversations disappear from the Platform immediately, and from backups within 35 days.

7. Children and young people

1. A person who is 16 or older may create an Account on their own. A person aged 13–15 needs the consent of a Guardian: they provide the Guardian's email address, and we send the Guardian information about REZUTO and a link to confirm consent. Until consent is confirmed, the Account remains inactive; if consent is not confirmed within 14 days, we delete the registration request. People under 13 may not have an Account. Only persons aged 16 or older may join the waitlist. The notification sent to them only announces the launch of the Platform and contains no offers.
2. We verify age and consent in a reasonable manner: on the basis of the age information provided at registration and the confirmation via a link sent to the Guardian's email address. If it turns out that an Account was created by a person under 13, or by a person aged 13–15 without a Guardian's consent, we will delete it.
3. The Guardian of a person aged 13–15 may exercise the rights described in section 12 on that person's behalf and may withdraw consent at any time — we will then delete the Account without undue delay and erase the data within the time limits set out in section 11.
4. We do not direct marketing to minors, do not profile them for marketing purposes and do not send them information about offers.

8. Institutions and Companies

Institutions

1. When you use REZUTO under the license of an Institution — a school, university, educational establishment or entity providing career guidance — we are the controller of the data relating to your Account, conversations with Iskra, Simulations and results, on the terms of this Policy.
2. We carry out Class management — creating Classes and class codes, the Class roster (first name, last name, email address, join date) and aggregate summaries for Educators — on behalf of the Institution, which is then the controller of that data. We act as a processor under a data processing agreement (Art. 28 GDPR), which we conclude with each Institution.
3. The Institution and Educators see the Class roster and — only for groups of at least 5 people — aggregate summaries. They never see your individual results, conversations with Iskra, notes or progress, or when you use the Platform.
4. For matters concerning data processed on behalf of the Institution, e.g. removal from a Class, you may contact the Institution or us — we will forward the request to the Institution and help to fulfill it.
5. When the license ends, we delete the Class data or return it to the Institution, in accordance with the data processing agreement. Your Account remains active.

Companies

6. Companies that co-create Simulations receive only anonymous aggregate reports concerning groups of at least 5 people, e.g. how many people tried on a given role and how the group performed on average. We do not share your personal data, your individual results or the fact that you are trying on a given role with Companies.
7. If you decide to share your Certificate or results with a Company, e.g. in your CV, you do so outside the Platform, and the Company processes that data as a separate controller.

9. Recipients of data

We do not sell your data. We share it only when this is necessary to provide the Services, and only to the extent necessary. We conclude data processing agreements (Art. 28 GDPR) with providers that process data on our behalf — they may use the data only in accordance with our instructions.

On request, we will send you a current list of the entities to which we transfer or entrust data — with their names and registered offices. Write to kontakt@rezuto.pl.

10. Transfers of data outside the EEA

We store Account data, conversations and results in the European Economic Area (EEA). However, some of the providers listed in section 9 process data in the US. We transfer data there only with a safeguard required by the GDPR:

• —the recipient's certification under the EU-U.S. Data Privacy Framework, for which the European Commission has found an adequate level of data protection (Commission Implementing Decision (EU) 2023/1795, Art. 45 GDPR), or
• —standard contractual clauses adopted by the European Commission (Commission Implementing Decision (EU) 2021/914, Art. 46(2)(c) GDPR) — together with a transfer impact assessment and supplementary protective measures, such as encryption of data transmitted over the network.

On request, we will provide you with a copy of the safeguards applied or tell you where they are available.

11. How long we keep data

The retention periods for each purpose are set out in the table in section 3. In addition:

• —Account deletion — we delete Account data, conversations, results and Certificates within 30 days of the Account being deleted, and from backups within a further 35 days, as the backups are automatically overwritten. We keep for longer only data that we must retain under the law, e.g. accounting documents, or that is needed to defend claims.
• —Inactive Accounts — if you do not log in to your Account for 24 months and have no active Subscription, we will warn you by email, and if you still do not log in within 30 days, we will delete the Account.
• —Limitation of claims — as a rule, claims become time-barred after 6 years, and claims for periodic performance and claims related to running a business after 3 years; the limitation period ends on the last day of a calendar year (Art. 118 of the Polish Civil Code).
• —Anonymization — instead of deleting data, we may irreversibly anonymize it. Such data is no longer personal data.

12. Your rights

You have the following rights:

• —access to your data and to a copy of it (Art. 15 GDPR);
• —rectification of inaccurate data and completion of incomplete data (Art. 16 GDPR) — you can change most of it yourself in the Account settings;
• —erasure of data (Art. 17 GDPR) — you can also delete a conversation, results or your entire Account yourself;
• —restriction of processing (Art. 18 GDPR);
• —data portability for data processed on the basis of a contract or consent — you will receive it in a structured, commonly used and machine-readable format (Art. 20 GDPR);
• —withdrawal of consent at any time, without affecting the lawfulness of processing carried out before its withdrawal (Art. 7(3) GDPR);
• —lodging a complaint with the President of the Personal Data Protection Office (Prezes UODO; ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl) or with the supervisory authority in the EU country where you live or work or where the infringement took place (Art. 77 GDPR).

To exercise your rights, write to kontakt@rezuto.pl, preferably from the address associated with your Account. If we have reasonable doubts as to whether the request comes from you, we will ask for additional information — only to the extent necessary. We will respond without undue delay and within one month at the latest; in particularly complex cases, this period may be extended by a further two months, of which we will inform you in advance. Exercising your rights is free of charge.

13. Data security

We apply technical and organizational measures appropriate to the risk (Art. 32 GDPR), including encryption of connections (TLS), encryption of data at rest, storage of passwords only as cryptographic hashes, access rules ensuring that everyone sees only their own data, and encrypted backups. We describe the details in the Security document.

If a personal data breach occurs, we will notify the President of the Personal Data Protection Office within 72 hours of becoming aware of it, unless the breach is unlikely to result in a risk to your rights or freedoms. If the breach may result in a high risk, we will also inform you without undue delay (Arts. 33 and 34 GDPR).

14. Cookies and similar technologies

The rezuto.com website does not store cookies in your browser and does not use analytics, advertising or tracking tools. The Platform uses only cookies and browser storage that are strictly necessary for logging in, security and remembering settings; for any others, we will ask for your consent first. Details are set out in the Cookie Policy.

15. Changes to the Privacy Policy

We update this Policy when the Services, our providers or the law change. The version number and the date from which it applies are shown at the beginning of the document. We will inform you of significant changes, e.g. new purposes of processing or new categories of recipients, by email or on the Platform before they are introduced. Previous versions are available on request.

1. Encryption

All communication with the website and the Platform takes place exclusively over HTTPS, using TLS version 1.2 or later. Data in the database and backups are encrypted at rest.

We store passwords only as hashes created with a strong, deliberately slow cryptographic function with a unique salt. A password cannot be recovered from its hash — which is why we cannot remind you of your password, only let you set a new one.

2. Access control

Access rules operating at the database level ensure that each User can read and modify only their own data — even if an error occurred in the interface. An Educator sees only the roster of their own Class and aggregate summaries for groups of at least 5 people.

Administrative access is limited to a small group of authorized persons, to the extent necessary to perform their tasks. We grant administrative privileges manually and revoke them when they are no longer needed.

3. Login and sessions

You confirm your email address via a link, and you can reset your password only via a link sent to that address. Sessions are based on signed, short-lived tokens that are renewed automatically; logging out ends the session on the device concerned.

We limit the number of login attempts and other sensitive operations to make password guessing and automated attacks more difficult. We protect the forms on the rezuto.com website against spam without cookies and without external tools.

4. Infrastructure and backups

The Platform runs in data centers of a cloud infrastructure provider located in the European Economic Area. Backups are made automatically, encrypted and kept for no longer than 35 days.

The rezuto.com website applies a strict Content Security Policy, which blocks scripts from outside our domain from running, and it does not load any resources from external services.

5. Providers

We select providers after checking the safeguards they apply. We conclude data processing agreements with them and provide them only with the data necessary to perform the service. The categories of providers and the places where data is processed are described in the Privacy Policy.

6. Incidents

We monitor the operation of the Platform and respond to unusual events. In the event of an incident, we contain its effects, determine the cause and implement fixes. We notify the President of the Personal Data Protection Office (Prezes UODO) of a personal data breach within 72 hours of becoming aware of it, and where the breach may result in a high risk, we also inform the persons affected without undue delay.

7. How you can protect your Account

• —Use a strong password that you do not use on other websites, and do not share it with anyone.
• —We never ask for your password by email, text message or phone. Before logging in, check that the website address is correct.
• —Log out when you use a shared or public device.
• —Keep your browser and operating system up to date.
• —If you suspect that someone has gained access to your Account, change your password and write to kontakt@rezuto.pl.

8. Reporting vulnerabilities

If you find a vulnerability on the website or the Platform, write to kontakt@rezuto.pl. Describe the problem, the steps needed to reproduce it and its possible impact. We will acknowledge receipt of your report within 5 business days and keep you informed of progress. Please follow these rules:

• —do not access or modify other people's data — beyond the minimum needed to demonstrate the problem;
• —do not carry out denial-of-service attacks, social engineering tests or attempts to gain physical access;
• —do not disclose the vulnerability publicly until we have fixed it — we will agree the publication date with you.

If you act in good faith and in accordance with these rules, we will not take legal action against you. We do not run a program offering monetary rewards for reports.

1. What cookies are

Cookies are small text files that a website stores on your device. Browser storage, in which a website can keep data, works in a similar way. Storing information on your device and reading it requires your consent — unless this is strictly necessary to provide the service you are using.

2. The REZUTO website

The rezuto.com website does not store cookies or data in browser storage on your device. That is why we do not display a consent banner — there is nothing to consent to.

• Strictly necessary

  The website does not need them: there is no login, and you send forms without anything being stored in your browser.

  Not used

• Analytics and functional

  We do not measure traffic, do not remember settings and do not embed content from other services. Fonts and all website files come from our own domain.

  Not used

• Advertising and tracking

  We do not display ads, do not use tracking pixels and do not share data with advertising networks.

  Not used

The website's server keeps standard logs, including the IP address and time of the visit — this does not require storing information on your device. We describe them in the Privacy Policy.

3. The REZUTO Platform

The Platform uses only technologies that are strictly necessary for its operation. They do not require consent, but we inform you about them below. If you block them, you will not be able to log in to the Platform.

When paying for a Subscription, you use a form provided by a licensed payment institution, which may use its own cookies — on the terms described in its own documents.

4. Optional technologies — only with consent

We currently do not use analytics or marketing cookies on the Platform. If we wish to use them, e.g. to see which features are used most often, we will first update this Policy and ask for your consent. Consent will be voluntary, and refusing it will not limit your access to the Platform. You will be able to withdraw it as easily as you gave it. We will not offer marketing technologies to minors.

5. How to manage cookies

In your browser settings, you can at any time delete stored cookies and site data or block them from being stored. You will find instructions in your browser's help pages. Please note that blocking strictly necessary cookies will make it impossible to use the Platform.

6. Changes to the Cookie Policy

The version number and the date from which the Policy applies are shown at the beginning of the document. We will inform you on the Platform of significant changes, in particular the introduction of technologies that require consent.