Last updated: October 26, 2026
Privacy Policy
This Privacy Policy describes how TWELVEDEVS SP. Z O. O. ("we," "us," or "our"), located in Warsaw, Poland, collects, uses, stores, and shares your personal information when you visit our websites at platform24.ai and its subdomains, or when you submit an enquiry or contact form on any of these sites.
We are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), the Australian Privacy Act 1988, and the New Zealand Privacy Act 2020.
If you do not agree with our policies and practices, please do not use our Services. If you have questions, please contact us at business@twelvedevs.com.
1. What personal data we collect
A. Information you provide voluntarily
When you submit a contact or lead form on any Platform24 site, we collect:
- Identity Data: First name and last name
- Contact Data: Email address
- Professional Data: Company name
- Message Data: Any additional information you choose to provide
B. Information collected automatically
When you visit our sites, we automatically collect:
- Log and Usage Data: IP address, browser type, device characteristics, operating system, language preferences, referring URLs, country and approximate location, and information about how and when you use our sites
- Analytics Data: Page views, session duration, traffic source, and user behaviour data collected via Google Analytics 4 (GA4) through Google Tag Manager (GTM) — only if you consent via our cookie banner
C. Form submission data
When you submit a form, your data is transmitted to:
- Resend — the email service that delivers your submission to our sales team and keeps the message for 30 days.
2. Our AI voice assistant
Our voice assistant is AI, not a person. Its name and voice may change. You can talk to it on platform24.ai and at our trade-show stand.
What we collect
- Your voice, while you talk to it
- A transcript of the conversation
- What you tell it, such as your name, company and phone number
- Public information about your company, from a web search
Why we use it
| Purpose | Legal basis |
|---|---|
| Answer your questions | Legitimate interest: answering enquiries you start |
| Remember you, so a second call picks up where you left off | Legitimate interest: not asking you twice |
| Look up your company | Legitimate interest: giving a relevant answer |
| Keep the service working and fix faults | Legitimate interest: a reliable service |
| Arrange a call back from Sales | Your request, before a contract |
Who processes it
| Provider | Role | Location |
|---|---|---|
| OpenAI | Speech and replies | US |
| LiveAvatar | The assistant's video | US |
| Pydantic | Service logs | EU |
| Resend | Email to Sales | US |
Transfers to the US rely on the EU–US Data Privacy Framework (LiveAvatar, Resend) or standard contractual clauses (OpenAI). Ask us for a copy at business@twelvedevs.com.
How long we keep it
| Data | Kept for |
|---|---|
| Audio | Not stored |
| What the assistant remembers about you | 96 hours |
| Transcripts | 30 days |
| Lead emails | 30 days at Resend; at Sales, until the follow-up is done |
3. How we process your information
| Purpose | Legal Basis (GDPR) |
|---|---|
| To respond to your enquiry | Contract / Pre-contractual: necessary to fulfill your request |
| To follow up via sales | Legitimate Interest: we have a legitimate interest in following up on commercial enquiries |
| To analyse website usage (GA4) | Consent: only if you opt in via the cookie banner |
| To ensure security (bot protection) | Legitimate Interest: protecting our forms from spam |
| To send administrative information | Legal Obligation / Contract |
4. When and with whom do we share your information
We do not sell your personal information. We may share your data with:
- Resend, Inc.: email delivery service that sends your form submission to our sales team and keeps it for 30 days. Data may be transferred to the US under the EU–US Data Privacy Framework.
- Google LLC: Analytics (GA4) and tag management (GTM) — only with your consent. Data may be transferred to the US under Standard Contractual Clauses.
- Affiliates: Companies within the Twelvedevs Group for customer support, marketing, and technical operations.
- Legal Obligations: Where required by law, court order, or governmental request.
5. International data transfers
If we transfer your data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, including the European Commission's Standard Contractual Clauses (SCCs), adequacy decisions, or the EU–US Data Privacy Framework.
6. Data retention
- Contact form submissions: kept by Resend for 30 days, and by our sales team until the enquiry is resolved and no longer needed for business purposes
- Analytics data: retained for 14 months (GA4 default, adjusted to minimum)
- Voice assistant data: audio is not stored — transcripts, what the assistant remembers, and lead emails follow the periods listed under "Our AI voice assistant" above
When we have no ongoing legitimate business need to process your personal information, we will delete or anonymise it.
7. Your privacy rights
These rights apply to everyone, wherever you live:
- Object. You can object at any time to processing based on our legitimate interests by emailing business@twelvedevs.com.
- Complain. You can complain to a data protection authority, such as Poland's UODO (uodo.gov.pl).
- Voluntary. You don't have to give us your data, but without contact details we can't reply or call you back.
A. EEA and UK residents (GDPR)
You have the right to: access your data · correct inaccurate data · request erasure ("right to be forgotten") · restrict processing · object to processing based on legitimate interest · withdraw consent at any time · data portability
B. California residents (CCPA)
You have the right to: know what personal information is collected · request deletion · not be discriminated against for exercising your rights. We do not sell your personal information.
C. Australia and New Zealand
We process your data under Australia's Privacy Act 1988 and New Zealand's Privacy Act 2020. You have the right to access and correct your data, and to lodge a complaint with the Office of the Australian Information Commissioner (oaic.gov.au) or the Office of the New Zealand Privacy Commissioner (privacy.org.nz).
8. Data security
We implement appropriate technical and organisational measures to protect your personal information. However, no transmission over the Internet can be guaranteed 100% secure.
9. Cookie consent
We use a cookie consent banner to obtain your consent before setting non-essential cookies. For a full list of cookies we use, see our Cookie Policy at platform24.ai/cookie-policy.
10. Updates to this policy
We may update this policy from time to time. The updated version will be indicated by a revised date at the top of this page. Material changes will be communicated by posting a notice on our site.
Contact us
TWELVEDEVS SP. Z O. O.
ul. Ostrobramska 101A, lok. 301, Warsaw 04-041, Poland
Email: business@twelvedevs.com