PRIVACY & DATA PROTECTION
Privacy Policy
SecretPrompt.ai & Naomi AI Virtual Assistant
Last updated: September 13, 2026
1. Who is responsible for your personal data?
The controller of personal data processed through SecretPrompt.ai and the Naomi AI Virtual Assistant is:
Data Controller / Service Provider:
Jan Krzysztof Starzyński

SecretPrompt.ai

NIP: 5020071715
REGON: 545730140

Place of residence:
Opole, Poland
Address:
ul. Plebiscytowa 12/7/2
45-361 Opole
Poland
Email:
dreamventor@gmail.com
SecretPrompt.ai is the name of the service and brand operated by the person identified above.
For questions concerning privacy, personal data or the exercise of your data-protection rights, please contact us using the email address above.
2. Scope of this Privacy Policy
This Privacy Policy explains how personal data may be collected, used, stored and shared when you:
visit the SecretPrompt.ai website;
use the website contact or email form;
communicate with Naomi;
use Naomi's voice or real-time avatar functionality;
contact SecretPrompt.ai by email;
or otherwise interact with SecretPrompt.ai in connection with its services.
The exact data processed depends on how you use the website and Naomi.
3. Naomi is an artificial intelligence system
Naomi is an AI-powered virtual assistant.
When you communicate with Naomi, you are interacting with an artificial intelligence system and not with a human representative.
Naomi uses artificial intelligence to understand user input and generate responses. Depending on the configuration of the service, the interaction may also involve speech recognition, synthetic voice generation and a real-time digital avatar.
Information that Naomi provides may be automatically generated and may occasionally be incomplete or inaccurate. Users should not rely on Naomi as a substitute for professional legal, medical, financial or other regulated professional advice.
4. What personal data may we collect?
Depending on how you use SecretPrompt.ai, we may process information including your name, email address, the content of messages or conversations, information that you voluntarily provide to Naomi, and information submitted through website forms.
When you use voice interaction, audio or voice data and a transcription of your speech may be processed for the purpose of recognising your speech, generating an AI response and providing Naomi's spoken response.
The website and its infrastructure may also process limited technical information such as IP address, date and time of access, browser or device information, server logs, connection information and security-related data where this is necessary for the operation, security and delivery of the service.
Please avoid providing special-category or highly sensitive personal information unless it is genuinely necessary for your enquiry.
5. Contact and email form
SecretPrompt.ai provides a form through which you may submit your email address and, depending on the version of the form, other information that you voluntarily enter.
Providing your email address through the form is voluntary. However, if you want us to contact you, respond to your enquiry or continue a business conversation outside the Naomi interface, providing a valid means of contact may be necessary.
The email address submitted through the form may be used to:
respond to your request;
contact you in relation to the enquiry you submitted;
provide information you specifically requested;
continue discussions concerning SecretPrompt.ai services;
or take steps requested by you before potentially entering into a business relationship.
Submitting your email address through the form does not by itself constitute consent to receive newsletters, advertising campaigns or unrelated direct marketing communications.
Where separate consent is legally required for electronic marketing, it will be requested separately.
Depending on the technical configuration of the website, form submissions may be processed by the website platform, hosting provider or email service used to deliver the message or notification to SecretPrompt.ai.
6. Why do we process personal data and what is the legal basis?
Where you contact SecretPrompt.ai to request information about our services, obtain an offer or take steps toward establishing a business relationship, personal data may be processed under Article 6(1)(b) GDPR, where processing is necessary to take steps at your request before entering into a contract or to perform a requested service.
Where you send a general enquiry that is not directly connected with entering into a contract, processing may be based on Article 6(1)(f) GDPR, our legitimate interest in communicating with users, responding to enquiries and operating the SecretPrompt.ai service.
Limited technical and security information may also be processed under Article 6(1)(f) GDPR for our legitimate interests in protecting the service, preventing abuse, maintaining system security and ensuring reliable operation.
Where processing is necessary to comply with applicable legal obligations, Article 6(1)(c) GDPR may apply.
Where applicable law requires your consent, for example for certain optional marketing activities or non-essential tracking technologies, processing will be based on Article 6(1)(a) GDPR and you may withdraw your consent at any time.
Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
7. AI and technology service providers
SecretPrompt.ai relies on third-party technology and infrastructure providers in order to operate Naomi and the website.
HeyGen / LiveAvatar
HeyGen technology may be used to provide Naomi's real-time digital avatar, voice interaction and related live communication functionality.
Depending on how Naomi is used, audio input, voice data, conversation information, session data and technical information may be processed through the HeyGen / LiveAvatar infrastructure to provide this functionality.
OpenAI
OpenAI technology is used to provide the artificial intelligence model responsible for generating Naomi's responses.
Conversation text and other information necessary to understand the user's request and generate a response may therefore be transmitted to and processed through the OpenAI API.
Google / Gmail
Google services, including Gmail, may be used for email communication and to receive notifications or messages generated through SecretPrompt.ai contact functionality.
If you provide your email address for the purpose of being contacted, your email address and the content of the relevant communication may therefore be processed using these services.
Website, hosting and infrastructure providers
Website hosting, domain, server, network, security and form infrastructure providers may process limited personal and technical information where this is necessary to host, protect, maintain and deliver SecretPrompt.ai.
These providers are permitted to process personal data only to the extent required for their respective services and subject to applicable contractual and legal safeguards.
SecretPrompt.ai does not sell personal data.
8. International transfers of personal data
Some technology providers used by SecretPrompt.ai may process personal data outside the European Economic Area, including in the United States.
Where personal data are transferred outside the EEA, appropriate transfer mechanisms and safeguards required by applicable data-protection law are used.
Depending on the provider and circumstances, these may include a European Commission adequacy decision, participation of an eligible US organisation in the EU–US Data Privacy Framework, Standard Contractual Clauses approved by the European Commission, or other legally recognised transfer safeguards.
Users may contact us if they require additional information concerning applicable safeguards for international data transfers relating to their personal data.
9. How long do we keep personal data?
Personal data are not intended to be retained for longer than reasonably necessary for the purposes for which they were collected.
The applicable retention period depends on the nature of the interaction.
Contact-form submissions, email correspondence and conversation information may be retained for as long as necessary to respond to an enquiry, continue an active discussion or business relationship, document relevant communications, resolve disputes or establish, exercise or defend legal claims.
Where a business relationship develops, relevant information may be retained for the duration of that relationship and for any additional period required by applicable legal, accounting or other statutory obligations.
Technical and security records may be retained for periods reasonably necessary to protect and maintain the service.
Third-party technology providers may maintain certain technical, security or service records in accordance with their own contractual retention requirements.
When personal data are no longer required for the purposes for which they were processed and no legal reason requires further retention, they should be deleted or anonymised.
10. Is providing personal data mandatory?
Providing personal data is generally voluntary.
You are not legally required to provide your email address or communicate with Naomi.
However, some information may be necessary in order to provide a requested functionality. For example, if you want SecretPrompt.ai to respond to you by email, a valid email address is required.
Similarly, conversation input is necessary for Naomi to understand and respond to your request.
Failure to provide information necessary for a particular service may mean that the relevant functionality cannot be provided.
11. Your GDPR rights
Subject to the conditions and limitations provided by applicable data-protection law, you may have the right to:
access personal data concerning you;
request correction of inaccurate or incomplete personal data;
request deletion of your personal data;
request restriction of processing;
receive certain personal data in a portable format;
object to processing based on legitimate interests;
and withdraw consent where processing is based on consent.
You may exercise these rights by contacting:
dreamventor@gmail.com
We may need to verify your identity before fulfilling certain requests in order to protect personal data against unauthorised disclosure.
You also have the right to lodge a complaint with the competent data-protection supervisory authority.
In Poland, the supervisory authority is the:
President of the Personal Data Protection Office
(Prezes Urzędu Ochrony Danych Osobowych — UODO).
12. Automated processing and AI-generated responses
Naomi uses automated artificial intelligence to analyse user input and generate responses.
Naomi may automatically determine the content of its response based on information provided during the conversation.
However, SecretPrompt.ai does not intend Naomi to make decisions solely through automated processing that produce legal effects concerning users or similarly significantly affect them within the meaning of Article 22 GDPR.
Naomi is designed primarily as a communication, information, presentation and assistance system.
13. Voice and avatar interaction
If you choose to communicate with Naomi using voice functionality, your voice input may be transmitted to technology providers involved in speech recognition, AI processing, voice generation and real-time avatar presentation.
This processing is necessary to convert speech into information that the AI system can understand, generate Naomi's response and deliver the response through the digital avatar.
If you do not want your voice to be processed, you should use text-based communication where such an option is available.
14. Sensitive information
SecretPrompt.ai is not designed for the routine processing of highly sensitive personal information.
Please avoid sharing information concerning matters such as health, biometric identification, political opinions, religious beliefs, sexual life, criminal convictions or other special-category personal data unless disclosure is genuinely necessary for your specific enquiry.
Providing unnecessary sensitive information may increase privacy risks.
15. Marketing communications
Providing an email address through SecretPrompt.ai, communicating with Naomi or submitting a contact form does not automatically subscribe you to marketing communications.
We may use your email address to respond to the enquiry for which you provided it and to continue the relevant conversation.
Where applicable law requires separate consent before sending newsletters, promotional campaigns or unrelated electronic marketing, such consent will be requested separately.
You may withdraw marketing consent at any time where marketing is based on consent.
16. Cookies and similar technologies
The SecretPrompt.ai website may use technical technologies necessary for the operation, security and delivery of the website.
If optional analytics, advertising or other non-essential cookies or similar technologies are used, they should be activated only in accordance with applicable consent requirements.
Where appropriate, additional information concerning cookies may be provided through a cookie notice, consent interface or separate Cookie Policy.
17. Data security
We use reasonable technical and organisational measures intended to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, unauthorised access and other forms of misuse.
Access to personal data should be limited to persons and service providers who require the information for legitimate operational purposes.
However, no online service, internet transmission or computer system can guarantee absolute security.
Users should therefore avoid sending information that is unnecessary for the purpose of their enquiry.
18. Third-party services
SecretPrompt.ai may rely on external platforms and service providers whose services are governed by their own privacy and security terms.
Where you interact directly with a third-party service, that provider may independently process certain information in accordance with its own legal responsibilities.
SecretPrompt.ai is not responsible for independent processing activities carried out by third parties outside the scope of services provided on behalf of SecretPrompt.ai.
19. Changes to this Privacy Policy
This Privacy Policy may be updated from time to time, particularly where the SecretPrompt.ai service, Naomi's functionality, technology providers, website infrastructure or applicable legal requirements change.
The current version of this Privacy Policy and its most recent update date will be published on the SecretPrompt.ai website.
Material changes may also be communicated through the website or Naomi interface where appropriate.
20. Privacy questions and requests
For questions concerning this Privacy Policy, the processing of your personal data or the exercise of GDPR rights, please contact:
Jan Krzysztof Starzyński
Email:
dreamventor@gmail.com
Address:
ul. Plebiscytowa 12/7/2
45-361 Opole
Poland