Legal
Privacy Policy
This policy explains what information Bazuka AI processes when you request a performance investigation, buy credits or use your account, and the choices you have over that information.
Last updated: 26 August 2026
On this page
1. Who we are
Bazuka AI is a service operated by Bazuka sp. z o.o., Kalwaryjska 69/9, 30-504 Kraków, Poland. National Court Register: KRS0001120685. EUID: PLKRS.0001120685. Regon: 529342679.
We operate a performance diagnostics service that analyses gaming hardware, game settings and performance measurements in order to explain underperformance and recommend fixes. In this policy, "we", "us" and "our" refer to Bazuka sp. z o.o. as the data controller for the information described below.
You can reach us at [email protected] or +48 512 892 202 for any question, request or complaint related to this policy.
2. Information we collect
Account information: first name, last name, email address and the password hash created during checkout registration.
Order information: the number of credits purchased, the selected currency, any promotional code applied, the chosen payment method and the resulting order reference. For bank transfers we also process the payment reference visible on the incoming transfer.
Investigation information: the game titles you submit, hardware and component names, driver and operating system versions, display and sync configuration, resolution and quality presets, and any performance figures you supply such as average FPS, one percent lows, frame times and temperatures.
Technical information: IP address, browser and device type, language, and the pages you view. We use this to keep the service secure and to understand which diagnostics are used.
3. What we do not collect
We do not install agents on your machine and we do not read live telemetry from your system. Everything we analyse is either provided by you or derived from our reference database.
We do not collect card numbers. Bank transfer instructions are sent by email and the transfer happens entirely within your own bank.
We do not knowingly collect information from children under the age of sixteen.
4. Why we process your information
To perform the contract: creating your account, delivering purchased credits, running the services you spend credits on and providing the resulting reports.
To pursue our legitimate interests: preventing abuse and fraudulent orders, improving diagnostic accuracy, and maintaining aggregated, de-identified performance reference data.
To comply with legal obligations: accounting, tax and record-keeping duties connected to your purchases.
With your consent: optional analytics cookies and, where you opt in, product update emails. You can withdraw consent at any time.
5. Legal bases
Where the General Data Protection Regulation applies, we rely on Article 6(1)(b) for contract performance, Article 6(1)(f) for legitimate interests, Article 6(1)(c) for legal obligations and Article 6(1)(a) for consent-based processing such as optional cookies.
6. Sharing and processors
We share information only with service providers that help us operate: hosting and infrastructure, transactional email delivery, error monitoring and, once enabled, payment processing. Each provider acts on documented instructions and may not use your data for its own purposes.
We do not sell personal data and we do not share it with advertising networks.
We may disclose information where required by law, court order or to protect our rights and the security of the service.
7. International transfers
Some providers process data outside the European Economic Area. Where that happens we rely on adequacy decisions or on Standard Contractual Clauses together with supplementary technical measures such as encryption in transit and at rest.
8. Retention
Account and order records are retained for as long as your account exists and afterwards for the period required by accounting law, typically up to ten years for invoice-related records.
Investigation inputs and reports are retained while your account is active so you can revisit past cases, and are deleted within ninety days of account closure.
Aggregated reference statistics that can no longer identify you may be retained indefinitely.
9. Your rights
Subject to applicable law you may request access to your data, correction of inaccurate data, deletion, restriction of processing, portability in a machine-readable format, and objection to processing based on legitimate interests.
Send requests to [email protected]. We respond within thirty days and may ask for information needed to verify your identity. You also have the right to complain to your local data protection authority.
10. Security
We use transport encryption, hashed passwords, least-privilege access to production systems and logging of administrative access. No system is perfectly secure, so we ask you to use a unique password of at least eight characters and to notify us immediately if you suspect unauthorised access.
11. Changes to this policy
We may update this policy as the service changes. Material changes are announced in the account area and by email where we have your address. The date at the top of this page always reflects the current version.