Privacy Policy
Last updated: 27 July 2026
This policy explains how Soft 3.0 processes the personal data of people using the soft30.dev platform, including course participants.
Data controller
The data controller is IT-OPES Usługi Informatyczne, NIP PL5291686297. For matters concerning personal data, contact us at .
What data we collect
You sign in with a Devs 3.0 account at devs30.com. Soft 3.0 stores a copy of basic profile data, that is your email address, display name, optionally your first and last name and your time zone, along with its own sign-in session. When you buy the course we collect the data needed to issue an invoice, including the tax id and address for business buyers. We use your email address to send service messages and access links about your account and purchase.
Signing in with a Devs 3.0 account
Soft 3.0 does not run its own sign-in. You create your account and sign in at devs30.com, which acts as the identity provider for the whole Devs 3.0 ecosystem and has the same data controller. Signing in with Google or GitHub happens on devs30.com, not directly in Soft 3.0. After sign-in, Soft 3.0 receives your account identifier, email address and name from devs30.com and opens its own session. A global sign-out or an account deletion performed at devs30.com is propagated to Soft 3.0.
Purpose and legal basis
We process account and purchase data to perform the contract for course access (Art. 6(1)(b) GDPR). We process billing data to meet tax obligations (Art. 6(1)(c) GDPR). We collect traffic statistics based on your consent (Art. 6(1)(a) GDPR). We process messages sent to the chat and the assistant, and the measures that protect the service from abuse, on the basis of our legitimate interest in supporting users and protecting the service (Art. 6(1)(f) GDPR).
Cookies and analytics
We use cookies that are necessary to run the platform, including a sign-in session cookie, temporary cookies for the Devs 3.0 sign-in flow, a cookie that stores your cookie choice, and a cookie that stores your language. These necessary cookies do not require consent. The platform also uses Google Analytics 4 to measure traffic and visit statistics. We collect statistics only after you consent to cookies. Until you consent, analytics runs without cookies. You can withdraw consent at any time via the Manage cookies link in the footer.
Course chat and assistant
The platform includes a course chat. Your messages leave the browser and reach our backend, where they are handled by an agent running on our own infrastructure. We do not pass those messages to an external language model provider and we do not keep them as a persistent conversation history. The Devik assistant is a separate feature that answers questions about our offer and the Devs 3.0 ecosystem. If you use it, your question is sent to Ollama Cloud, an external language model provider that processes it outside the European Economic Area. Before the question is sent we strip contact details and identifiers from it, meaning email addresses, phone numbers, national identification numbers, bank account and card numbers, IP addresses and personal names, replacing them with markers, and we restore them in the answer shown to you. This is a safeguard rather than a guarantee, because name recognition works automatically and can miss some. We do not store assistant conversations in our database. Before a question is sent we ask you to pass an anti-bot check, and we limit the number of requests based on your IP address. Please do not enter data in the chat or the assistant that you do not want to share with us.
Processors
Payments are handled by Stripe. Service emails and access links are delivered through Resend. Traffic measurement is provided by Google Analytics 4 (Google Ireland Limited). Invoices are issued through the National e-Invoicing System (KSeF). Answers from the Devik assistant are generated by Ollama Cloud, an external language model provider. devs30.com as the identity provider, our internal billing service and our internal protection service operate under the same data controller and are not separate recipients of your data. We share data with these parties solely for the described purposes. Some of these providers, including Stripe, Resend and Google, may process data outside the European Economic Area on the basis of the European Commission standard contractual clauses. Questions sent to the Devik assistant are also processed outside the European Economic Area.
Retention period
We keep account data for as long as you use the platform. Data from a checkout that was started but never paid, including the email address and the company details entered in the cart, is anonymized 30 days after the checkout was started. We keep billing data and issued invoices for the period required by tax law, including after the account is deleted. We keep your analytics consent until you withdraw it.
Your rights
You have the right to access, rectify, erase, restrict, and port your data, and to withdraw consent. You delete your account in the account settings at devs30.com, and the deletion is propagated to Soft 3.0 and the other services in the ecosystem, where it irreversibly anonymizes personal data. We do not delete issued invoices, because the obligation to keep them follows from the law. You also have the right to lodge a complaint with the supervisory authority, the President of the Personal Data Protection Office (PUODO). To exercise these rights, write to .