Privacy Policy

The controller of personal data is Marcin Łętowski, conducting business as Warsaw Residential Group Marcin Łętowski, ul. Grafitowa 5, 62-504 Posoka, Poland, VAT ID (NIP) 6653065982, REGON 528314936 (“MetronQ”). For personal data matters, write to contact@metronq.com. Capitalized terms (Input Files, Technical Data) have the meaning given in the Terms of Service.

1. What data we process

• Shop account data: name, e-mail address, an optional phone number, company name, VAT ID and data needed for billing. The phone number is given voluntarily at registration or later in the panel, and can be changed or removed at any time.
• Contact-form data: name, e-mail, company name, topic and the message itself, and for requests sent from the panel also attachments. Download-form data: name, e-mail and company name.
• The commercial-contact consent record: the date, time and IP address of it being given, and the date and time of its withdrawal.
• Data of end customers placing an order: name, e-mail, phone and delivery address - as provided in the order form.
• Input Files (CAD/CAM and technical documentation) uploaded for quoting - usually technical, not personal data.
• Technical Data - numeric parameters generated from Input File analysis, attached to the Shop's quote, with no ability to reconstruct geometry and no end-customer data.
• Session data: logs, IP address, device and browser information.
• Account security and service data: the history of sign-ins and failed sign-in attempts (e-mail address, IP address, browser), the settings change history (who changed what), openings of panel notifications, the log of e-mails sent and of bounce reports, support requests, and, when the API is used, the request log (IP address, request address and, for a refused request, its body).
• Data from analytics and marketing tools - only with your consent (section 4), except the traffic statistics on metronq.com, which use no cookies: the address and title of the page visited, the address of the page you came from, the browser's language and screen resolution, and the addresses of links clicked (section 4).
• Panel usage data: which screens were opened, which interface elements were clicked, the names of the fields that were edited, application errors, time spent on a screen, scroll depth, browser window size and the address of the page the visit came from - recorded as events with a date and time, linked to the Account and the user (section 4).
• Counterparty tax data: the tax identification number (NIP, EU VAT number, GSTIN or another national equivalent), the registered address and, for sales outside the European Union, the documents needed to settle withholding tax - a certificate of residence, a no-permanent-establishment declaration, forms required by the customer country and withholding certificates.
• Referrers' data in the affiliate portal: name, e-mail and the details needed to pay out the reward (e.g. a bank account number).

2. Purposes and legal bases

• Providing the service and performing the contract, including the service communication needed to run the account - confirmations, invoices, quote and order notifications, incident notices and changes to the terms (Art. 6(1)(b) GDPR). This communication needs no consent and cannot be opted out of while the account exists.
• Billing and accounting obligations (Art. 6(1)(c) GDPR).
• Security of the Account and the Service, and handling requests - sign-in history, settings change history, the log of e-mails sent and the API request log (legitimate interest, Art. 6(1)(f) GDPR).
• Tax settlement of cross-border sales - confirming taxable-person status (through VIES in the European Union, and elsewhere on the basis of a national tax identification number or a registration document), issuing an invoice without tax, the EU recapitulative statement and withholding tax documentation (Art. 6(1)(c) GDPR); and, as regards defending against tax authority claims, our legitimate interest (Art. 6(1)(f) GDPR).
• Answering an enquiry sent through the contact form, and day-to-day support (legitimate interest, Art. 6(1)(f) GDPR). We answer the enquiry itself without needing any consent.
• Commercial contact beyond the above - an onboarding call, configuration and solution proposals, information about new features and MetronQ offers, by phone and e-mail - based on your freely given consent (Art. 6(1)(a) GDPR and, for the communication channel, Art. 398 of the Polish Electronic Communications Law). The consent covers MetronQ's own services and products only.
• Analytics and online marketing (cookies, remarketing) - based on your consent (Art. 6(1)(a) GDPR), see section 4.
• Traffic statistics on metronq.com - how many people visit the site, where they come from and which pages they read, so that we can develop its content (legitimate interest, Art. 6(1)(f) GDPR). The statistics use no cookies and do not let us recognise any particular person, see section 4.
• Developing and improving the panel, and helping you use it - finding out which screens people struggle with, where errors appear and at which step users stop, also for a particular Account when we help it (legitimate interest, Art. 6(1)(f) GDPR). We build no marketing profiles on this basis, we take no decisions about you or your company, and we do not combine this data with any external source. You may object at any time (section 7).
• Demonstrating that consent was given: we store the date, time and IP address of it being given and the date and time of its withdrawal (Art. 7(1) GDPR; legal obligation, Art. 6(1)(c) GDPR).
• Checking that the Shop, its beneficial owners and the persons authorised to represent it are not subject to European Union or Polish sanctions, using the data given at signup and payment, the telephone number, the IP address and the company details given in the declaration, kept for the duration of the agreement (a legal obligation under the law on restrictive measures, Art. 6(1)(c) GDPR).

The commercial-contact consent is entirely optional. It is not a condition of creating an account, starting the trial or using the Service, and refusing it does not affect the scope, quality or price of the Service. You can withdraw it at any time with the toggle in the panel (Settings > Privacy) or by writing to contact@metronq.com - as easily as it was given.

3. Recipients and processors

• Hosting and infrastructure: Hetzner (servers in the European Union).
• Payments: Stripe.
• Analytics and advertising: Google (Google Analytics, Google Ads) - only with consent.
• Identification of visiting companies (sales intelligence): Apollo.io - only with marketing consent.
• Advertising on Meta services (Facebook, Instagram): Meta Platforms Ireland Ltd. (Meta Pixel) - only with marketing consent. Meta may transfer data to the USA under the EU-US Data Privacy Framework.
• Traffic statistics on metronq.com: Ahrefs Pte. Ltd., Singapore (Ahrefs Web Analytics) - no cookies, outside the consent banner (section 4). Ahrefs stores data in the USA; the transfer outside the European Economic Area is based on standard contractual clauses.
• E-mail: OVH (Zimbra) - hosting of our company mail and delivery of notification e-mails, servers in the European Union.
• Form abuse protection: Google (reCAPTCHA) - runs on sign-in, sign-up, password reset, the contact forms, the download form and the affiliate portal, independently of cookie consent, as a security measure.
• Booking onboarding calls: Google (Calendar and Meet) - if you book a call with us, your e-mail address goes into the invitation and the video call.
• Verification of European Union counterparties: the VIES system operated by the European Commission.
• Tax administration: the Polish National Revenue Administration (the National e-Invoicing System, JPK_V7, the EU recapitulative statement) and, for sales outside the European Union, the tax authorities of the customer country, to the extent needed to apply a double taxation treaty.
• We do not sell data. A transfer outside the European Economic Area happens only with appropriate Chapter V GDPR safeguards - standard contractual clauses, and, for tax documents filed with the authorities of the customer country, on the basis of Art. 49(1) GDPR (necessity for the performance of the contract and for the establishment, exercise or defence of legal claims).

4. Cookies and tracking technologies

We use essential cookies required for the service to work and - only with your consent - analytics and marketing cookies. The consent given in the banner covers third-party vendor tools and nothing else: the “Analytics” category means Google Analytics, and the “Marketing” category means Google Ads, Meta (Facebook) and Apollo.io. Those vendors' scripts load only after you give consent; withdrawing consent stops them, at the latest when the page is next loaded.

Your choice applies across all MetronQ services in the metronq.com domain (metronq.com, app.metronq.com, quoting.metronq.com and others) - we store it in a single cookie shared between these services, so we do not ask again on each of them. You can change or withdraw consent at any time: on the website via “Cookie settings” in the footer, and in the panel in the Settings tab.

Traffic statistics on metronq.com. On metronq.com (not in the panel, the widget or the quote pages) we use Ahrefs Web Analytics to know how many people visit the site, where they come from and which pages they read. The tool uses no cookies and no other browser storage - it stores nothing on your device, so it does not recognise you on a later visit and does not follow you to other sites. When a page is displayed, your browser sends Ahrefs its address and title, the address of the page you came from, and the browser's language and screen resolution, and when you click a link - that link's address. The IP address is used to determine an approximate location (the country, at most the city) and is combined with browser information and a random value that changes daily into a one-way hash, which makes it possible to count unique visits within a day. Ahrefs does not store the IP address itself and deletes the daily value after 24 hours, so visits from different days cannot be linked. We see only aggregate statistics. That is why this tool is not covered by the consent banner and runs on our legitimate interest (Art. 6(1)(f) GDPR). If you do not want to be counted in these statistics, block the script from analytics.ahrefs.com in your browser (for example with a content blocker) - the site then works without any limitation.

Panel product analytics. Separately from the cookies above, we run our own analytics of how the panel is used. No external vendor is involved and it sets no cookies: in the browser we store only a session identifier in the tab's memory, which disappears when the tab is closed. We collect what lets us improve the tool - which screen was open, what was clicked, the name of the field being edited, an application error and time on screen. The events are linked to the Account and the signed-in user, so that we can see where a particular Account runs into trouble and help it; only authorized MetronQ staff can see them. We also record the IP address the request came from; it is stored on individual events only, so it disappears with them after 14 days and never reaches the aggregate daily statistics.

The free demo on the website. If you use the free demo quote on metronq.com, we remember how far you got - whether the demo was opened, whether a file was uploaded and whether a price came out - along with the number of that demo quote. This is so that we can tell whether the demo leads to accounts being opened; it holds no personal data and nothing from your file. By default that note lives only as long as the open page, and if you consent to analytics we also store it in your browser for up to 30 days. If you open an account, we record beside it at registration where you came from (the website or the demo) and the number of the demo quote, if one was made within that time.

What analytics does not cover. The following applies to product analytics only and says nothing about the Service itself: we do of course process files, quotes and orders, because the Service could not work otherwise, and sections 1, 5 and 6 and the Terms describe how. What does NOT reach analytics is: the contents of the fields you fill in, the contents of quotes and orders, file names and file contents, your end customers' data, mouse movements or screen recordings. Addresses are stored as a screen pattern (for example /quotes/:id) rather than as a specific address, so an analytics record does not reveal which quote it concerned.

Basis and objection. Product analytics runs on our legitimate interest (Art. 6(1)(f) GDPR), not on the cookie banner's consent - that banner covers only the Google, Meta and Apollo.io tools named above. If you do not want your account's use of the panel analysed this way, write to contact@metronq.com: we will stop collecting for your account and delete the events already collected. The Service continues without any limitation, and refusing does not affect its scope, quality or price.

5. Storage and retention

• We store Input Files no longer than 90 days from upload, then permanently delete them. On request we delete them sooner, immediately and no later than within 7 days.
• Once an Input File is deleted we retain Technical Data and the quote record shown in the Shop's history (including the file name, part names, drawing number and the end customer's details) - until the quote or the Account is deleted. Technical Data contains no end-customer data and cannot reconstruct geometry; it is used to calibrate the Quoting Engine and check quoting accuracy, under the rules in section 6 of the Terms of Service.
• Account data is stored for the duration of the contract, and after it ends for the period required by law (e.g. tax law). Accounts that did not buy a plan after the trial stay inactive, and their data is not deleted automatically - we delete it on request made in the panel or by e-mail.
• The commercial-contact consent record (the date, time and IP address of it being given, and the date and time of withdrawal) is stored for as long as the user account it belongs to exists, and is deleted with it.
• Data is stored on servers in the European Union. Input Files and their 3D previews are encrypted in transit (TLS) and at rest (AES-256, with a key held solely by MetronQ - the object-storage provider does not store it, so without that key nobody can read the file, including them). Contact data from orders (name, e-mail, phone, delivery address, notes) and the contents of sent e-mails kept in the mail log are additionally encrypted inside the database itself (AES-256), with the key held outside the database. Other data is encrypted in transit and, in the database, protected by access control and by having no direct exposure to the internet at all.
• Invoices and cross-border tax documentation (tax identification numbers, certificates of residence, customer country forms and withholding certificates) are stored for the period required by tax law - as a rule 5 years, counted from the end of the calendar year in which the tax payment deadline fell.
• Traffic statistics on metronq.com (section 4) are aggregate and contain no IP address. Ahrefs deletes the random value used to count unique visits after 24 hours.
• Sign-in history and notification openings are kept for 365 days, the settings change history for 730 days, the log of e-mails sent for 180 days and the API request log for 30 days; they are deleted earlier together with the Account. Bounce reports are kept for 180 days. Support requests are kept for as long as the Account exists, and requests from people without an Account until they ask for them to be deleted. Referrers' data is kept until they leave the Referral program and ask for it to be deleted, and payout records for the period required by tax law.
• Product analytics events (section 4) are kept for 14 days and then permanently deleted. All that remains of them are aggregate daily statistics - screen opens, average time, error counts - attached to the Shop, with no session identifier and no IP address; those are kept for up to 2 years.
• Data stays on servers in the European Union also where the Shop is established outside the European Economic Area. Using the panel from outside the EEA means the Shop itself pulls its data into its own country, in its own name and on its own responsibility.
• We do not pass uploaded files to external providers of machine-learning or artificial-intelligence models and do not make them available for training third-party models. The Quoting Engine is a deterministic computational model, not a model trained on customer documentation. Using files to develop MetronQ's own models - running solely on our own infrastructure - requires the Shop's separate, prior consent, withdrawable at any time (section 6 of the Terms of Service).
• We do not share Input Files with third parties (except technical subcontractors bound by confidentiality). On our side, access is limited to named authorized individuals who need it to handle a support ticket, diagnose an error, assist with onboarding, or verify that a file was read correctly and that quotes are accurate - on individual accounts with two-factor authentication, with entries into a Shop's account recorded in an audit log. Those individuals are bound by a confidentiality undertaking and by the prohibitions in section 6 of the Terms of Service, including the ban on using files to manufacture parts or to compete with the Shop.

6. Data of the Shop's end customers

For personal data of end customers that a Shop processes through the Service (e.g. contact details from the order form), the Shop is the controller and MetronQ is the processor. The rules of this processing are set out in the data processing agreement (DPA) annexed to the Terms of Service.

7. Your rights

• You have the right to access your data, rectify it, delete it, restrict processing, port it and object to processing.
• You can withdraw the commercial-contact consent in the panel (Settings > Privacy) or by e-mail to contact@metronq.com, and the analytics and online-marketing consent via “Cookie settings” in the site footer. Withdrawal takes effect going forward and does not affect the lawfulness of processing done before it.
• You can lodge a complaint with the President of the Polish Personal Data Protection Office (PUODO).
• You may object to product analytics (section 4), which runs on our legitimate interest - write to contact@metronq.com. We will stop collecting for your account and delete the events already collected.
• You may also object to the traffic statistics on metronq.com (section 4). Because no identifier is stored with them, we cannot single out your visits in them - the effective way is to block the script from analytics.ahrefs.com in your browser. Questions about this go to contact@metronq.com.

8. Contact

For privacy and personal data matters, write to contact@metronq.com.