SoloGrowth sells the AI Sales Booster — a digital playbook, a brand AI-visibility audit and a personalized report — from the public website at sologrowth.co. The controller is Ihor Parshutin, ul. Rejtana 20A, II piętro, 35-310 Rzeszów, Poland, NIP 8133900669, reachable at hello@sologrowth.co.
Contact for privacy requests: hello@sologrowth.co. We have not appointed a Data Protection Officer. Polish law would require us to notify PUODO within 14 days if we did.
Lead supervisory authority: Prezes Urzędu Ochrony Danych Osobowych (PUODO / UODO), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl.
We are the controller for everything on this page. There is no separate processor role here: we are not a data processor for anyone else's customers, and we do not hold a merchant's store data.
We collect only what is needed to sell you the bundle, deliver the audit, and — if you ask for it — tell you when the community opens:
We do not collect your card details, billing address or VAT number — those go to Gumroad directly. We do not record your country or IP as part of a purchase.
The wider SoloGrowth community is not open yet. On our homepage you can leave an email address to be told once, when it opens. It is entirely optional: nothing on this site requires it, and you can buy the playbook without ever giving it.
We store your email address, the exact consent wording you ticked, and the date. That is the whole record. We do not store your IP address, your browser, or where you came from, and we set no cookie for the form. The wording is kept because GDPR Art. 7(1) requires us to be able to show what you actually agreed to — an address on its own would prove nothing a year later.
The legal basis is your consent, Art. 6(1)(a), given by ticking the box next to the form. Consent is also what ePrivacy and Polish law require before we may send you a commercial message at all. It is not bundled with anything: the box is empty until you tick it, and the form does nothing if you do not.
The list lives in a database we run ourselves on Cloudflare (see section 6), not in a mailing tool. No email has been sent from it, and none will be sent to an address that has not confirmed itself. When the community is close to opening, we will write once to ask you to confirm, and only confirmed addresses get the announcement. If you never confirm, you never hear from us again.
To withdraw, or to have the row deleted outright, write to hello@sologrowth.co — one line is enough and we ask no reason. Once the community opens and the announcement has been sent, the list is either moved into a proper mailing tool with an unsubscribe link in every message, or deleted; we do not keep it sitting there indefinitely.
Checkout, payment, receipts and VAT/sales tax are handled by Gumroad, Inc. — they are the merchant of record for this sale, not us. Your payment data is processed under Gumroad's own privacy policy. Gumroad shares your email address and order reference with us so we can deliver the playbook, audit and report and handle support requests.
To produce your audit we do two things. We fetch public pages from your own site (homepage, robots.txt, llms.txt, sitemap) and run the technical checks on them, and we send your brand name, domain and category to the third-party services in the table below — one to read your homepage and name your brand and category, one to look that brand up in its database of recorded AI answers. We do not send your email address or payment details to either. The resulting report is sent to the email address from your purchase.
This website sets no cookie of our own. Font files are served from our domain. The checkout page is hosted by Gumroad on their own domain and is subject to their cookie and consent practices, not ours.
We are established in Poland, so sending personal data to a processor outside the EEA is a Chapter V transfer. Several processors below are in the United States. OWNER + legal: confirm the transfer mechanism for each (standard contractual clauses, Data Privacy Framework certification, or an adequacy decision) before this page is final.
| Who | For | What they see | Where |
|---|---|---|---|
| Gumroad, Inc. | Checkout, payment, VAT/sales tax, receipts, digital delivery | Your email, order and payment details (as merchant of record) | United States |
| Cloudflare, Inc. | Hosting this website, and running the database that holds the community waitlist | Standard request logs; the waitlist email addresses and their consent records; no purchase data | Global anycast |
| DataForSEO | Looking your brand up in its database of recorded prompts and answers from ChatGPT and Google's AI (a database query — we do not send your brand to the AI platforms themselves) | Your domain, category and market — never your email or payment data | United States |
| OpenRouter / Anthropic (Claude) | Reading your homepage once to identify your brand name, category and market for the audit | Your site URL and public homepage content — never your email or payment data | United States |
| Postmark (ActiveCampaign) | Sending the report and support email | Your email address and the message body | United States |
| Record | Kept for | Why |
|---|---|---|
| Order reference and the email it was delivered to | Statutory accounting period (Poland: 5 years from the end of the tax year) | Tax and accounting law |
| Brand/site details submitted for the audit | 90 days after the report is sent | Support and re-runs if you ask for a correction, then deleted |
| Community waitlist: your email, the consent wording and the date | Until you withdraw, or until the announcement has been sent and the list is retired | So we can tell you once that the community has opened, and can show what you consented to |
| Technical check rows: a website address, its score and checks (no IP, no person) | Indefinitely, until asked to delete | Held from technical checks we run on public sites; a company's public address is not personal data. Ask and we delete the rows |
| Your published report page and the audit data behind it | Indefinitely, until asked to delete | So the private link you were sent keeps working; ask us and we take the page down |
| Marketing consent and email, if given | Until you withdraw it | So we know who opted in and can honour a withdrawal |
| Support correspondence | 24 months | Handling follow-up questions and refund requests |
Under GDPR you have the right to access, correct, erase, restrict, object, receive a copy, and withdraw consent. Write to hello@sologrowth.co. Erasing your audit-input data does not undo a purchase already delivered; erasing your email stops future marketing but Gumroad keeps its own transaction records as required by law. You may complain to PUODO (lead authority, because we are established in Poland) or to the supervisory authority of your own Member State.
We hold the minimum data described above. Purchases, support and delivery live in our email and support tools; the community waitlist is the one thing we keep in a database of our own, and it holds nothing but an address, the consent wording and a date. When a breach is likely to result in a risk to people, GDPR Art. 33 requires us to notify PUODO within 72 hours of becoming aware of it. OWNER: write the actual incident playbook before a data-protection review.
If this page changes in a way that affects what we collect or why, we will update the date above.