Ochrana osobných údajov · Privacy policy
Časť A: Oslovovanie firiem a tvorcov s obchodnou ponukou (slovensky)
Kto je prevádzkovateľ: Michal Mráz, podnikajúci pod značkou Frost, Slovensko. E-mail: frost@heyfrost.com.
Čo robím: Oslovujem firmy (najmä predajcov a montážnikov tieniacej techniky) a tvorcov obsahu s ponukou svojich digitálnych produktov a aplikácie OrderBot, prípadne spolupráce, a odpovedám na reakcie. Správy píšem s pomocou AI a pred odoslaním ich kontrolujem; každá taká správa to uvádza.
Aké údaje a odkiaľ: názov firmy alebo vaše meno či prezývka, zverejnený firemný e-mail, web firmy alebo kanál, zameranie a región, história našich správ a vaše odpovede. Kontaktné údaje beriem len z toho, čo ste sami zverejnili (napríklad kontaktná stránka vášho webu alebo sekcia „O kanáli“ na YouTube). Zoznamy kontaktov nekupujem. Ak odo mňa nakúpite cez Whop, Whop mi poskytne vaše meno, e-mail a údaje o objednávke; Whop je pri svojom spracúvaní samostatným prevádzkovateľom (whop.com/privacy).
Prečo a na akom právnom základe: aby som vám mohol predložiť obchodnú ponuku a nadviazať na ňu, podľa čl. 6 ods. 1 písm. f) GDPR (oprávnený záujem ponúkať svoje produkty tým, ktorí na tento účel zverejnili firemný kontakt). Priamy marketing na zverejnené kontaktné údaje podnikateľov a právnických osôb sa opiera o § 116 ods. 15 zákona č. 452/2021 Z. z. o elektronických komunikáciách. Ak právo vašej krajiny vyžaduje na marketingové správy predchádzajúci súhlas, oslovím vás až po jeho udelení cez môj web a opieram sa o čl. 6 ods. 1 písm. a) GDPR; súhlas môžete kedykoľvek odvolať odpoveďou „stop“ alebo e-mailom na frost@heyfrost.com a odvolanie písomne potvrdím. Odpovede a nákupy spracúvam, aby som vám odpovedal a splnil zmluvu (čl. 6 ods. 1 písm. b) GDPR).
Kto ďalší údaje vidí: Google (Google Workspace, moja e-mailová schránka) a Anthropic (Claude, ktorý pomáha písať správy), obaja ako sprostredkovatelia na základe zmlúv o spracúvaní so štandardnými zmluvnými doložkami EÚ; Whop pri nákupoch. Údaje sa môžu spracúvať v USA na základe rámca EU-US Data Privacy Framework alebo štandardných zmluvných doložiek.
Ako dlho: ak neodpoviete, 12 mesiacov od mojej poslednej správy; ak odpoviete, 3 roky od nášho posledného kontaktu; záznamy o nákupoch po dobu, ktorú vyžadujú slovenské účtovné a daňové predpisy. Ak namietnete, ponechám si len to, čo je potrebné na to, aby som vás už nikdy nekontaktoval.
Vaše práva: prístup k údajom, oprava, vymazanie, obmedzenie spracúvania, prenosnosť a právo kedykoľvek namietať proti priamemu marketingu; námietka je účinná okamžite a nemusíte ju zdôvodniť, zo všetkých zoznamov vás vymažem do 48 hodín. Napíšte na frost@heyfrost.com alebo odpíšte „stop“ na ktorúkoľvek správu. Sťažnosť môžete podať na Úrad na ochranu osobných údajov SR, Galvaniho 7/B, 821 04 Bratislava, statny.dozor@pdp.gov.sk, alebo na dozorný orgán vo vašej krajine.
Bez automatizovaného rozhodovania: nerobím o vás žiadne automatizované rozhodnutia s právnymi účinkami. Posledná aktualizácia: 29. 10. 2026.
Part A: Outreach and sales (English)
Who is responsible: Michal Mráz, trading as Frost, Slovakia. Email: frost@heyfrost.com.
What I do: I contact companies (mainly shading and blinds dealers and installers) and content creators to offer my digital products, the OrderBot app, partnerships and affiliate deals, and I answer replies. I write messages with the help of AI and review them before sending; each such message says so.
What data and where it comes from: your company name or your name or handle, your published business email, your company website or channel, your niche and region, our message history and your replies. I take contact details only from what you published yourself (for example the contact page of your website or the business-inquiry email on your YouTube channel's About page). I do not buy lists. If you buy from me on Whop, Whop gives me your name, email and order details; Whop is a separate controller for its own processing (whop.com/privacy).
Why and on what legal basis: to make and follow up a business proposal to you, under Article 6(1)(f) GDPR (legitimate interest in offering my products to people who publish a business contact for that purpose). Direct marketing to the published contact details of sole traders and legal persons relies on section 116(15) of Slovak Act No. 452/2021 Coll. on electronic communications. Where the law of your country requires your prior consent for marketing messages, I contact you only after you have given it through my website, and I rely on Article 6(1)(a); you can withdraw that consent at any time by replying "stop" or writing to frost@heyfrost.com, and I confirm the withdrawal in writing. Replies and purchases are processed to answer you and to perform the contract (Article 6(1)(b)).
Who else sees it: Google (Google Workspace, my mailbox) and Anthropic (Claude, which helps draft messages), both as processors under data processing agreements with EU standard contractual clauses; Whop for purchases. Data may be processed in the United States under the EU-US Data Privacy Framework or standard contractual clauses.
How long: if you never reply, 12 months after my last message; if you reply, 3 years after our last contact; purchase records for the time Slovak accounting and tax law requires. If you object, I keep only what is needed to make sure I never contact you again.
Your rights: access, rectification, erasure, restriction, portability, and the right to object at any time to direct marketing, which takes effect at once and needs no reason; I remove you from every list within 48 hours. Write to frost@heyfrost.com or reply "stop" to any message. You can complain to the Slovak data protection authority, Úrad na ochranu osobných údajov SR, Galvaniho 7/B, 821 04 Bratislava, statny.dozor@pdp.gov.sk, or to the authority in your country.
No automated decisions with legal effects are made about you. Last updated: 29 October 2026.
Part B: SmartCreator and Google user data
1. Who operates SmartCreator, and who this policy covers
SmartCreator is operated by Frost, based in Slovakia (contact: frost@heyfrost.com). It is a private tool with a single user, its operator. The only Google account whose data SmartCreator handles is the operator's own account, used for his own YouTube channel, MFrost (@M_Frost). Nobody else's personal data is collected.
2. What SmartCreator does
SmartCreator is a command-line program that helps its operator plan, produce and publish videos. Its YouTube part uploads the operator's finished videos to the operator's channel and manages their details, so that videos go live at the planned time without manual uploading.
3. Google user data SmartCreator accesses
SmartCreator accesses YouTube through the YouTube Data API v3, after the operator signs in with Google and grants these permissions:
| Permission (OAuth scope) | What SmartCreator uses it for |
|---|---|
youtube.uploadUpload YouTube videos | Uploading the operator's finished videos to his own channel as private drafts. |
youtubeManage your YouTube account | Setting a video's title, description, tags, thumbnail, visibility and scheduled publish time; reading the status of the operator's own videos; setting a video back to private when the operator withdraws his approval; confirming that the signed-in account is the intended channel. |
Through these permissions SmartCreator reads and writes only: the channel's identity (to confirm it is the intended channel) and the metadata and status of the operator's own videos. It does not read comments, subscriber information, viewer data, watch history, messages or anything belonging to other people, and it does not use the data for advertising, profiling or training machine-learning models.
4. How the data is used
Google user data is used for one purpose only: publishing the operator's own videos to the operator's own channel and keeping their details correct. Nothing is used for any other purpose.
5. Where data is stored, and for how long
- Sign-in credentials. The OAuth client credentials and the refresh token that Google issues after the operator's consent are stored in a configuration file on the operator's computer, and, for runs in the operator's private cloud environment, as environment variables of that environment. These files and variables are excluded from version control, are never printed, logged or written into documents, and are readable only by the operator.
- Video records. The YouTube video IDs and publishing status of the operator's own videos are kept in the project's records, alongside the scripts and files of those videos, for as long as the operator keeps the project.
- Other API data. Any other data obtained from the YouTube API is refreshed or deleted within 30 days.
Credentials remain stored until the operator revokes SmartCreator's access (see section 8) or deletes them.
6. Sharing
Google user data obtained through the YouTube API is not sold, rented, or transferred to any third party, and is not used for advertising. The operator also uses other services for video production and analytics under his own accounts with those services; such services access YouTube only under authorisations the operator grants to them directly, not through SmartCreator.
7. Security
All communication with Google's servers uses HTTPS. During sign-in, Google's authorisation code is returned only to the operator's own machine (a local address), never to another host. Credential files are kept outside version control with owner-only access. Secrets are never displayed on screen or in logs.
8. Revoking access and deleting data
The operator can revoke SmartCreator's access to his Google account at any time in his Google security settings: https://security.google.com/settings/security/permissions (also reachable at myaccount.google.com/permissions). Revoking access invalidates the stored refresh token immediately. Stored credentials can be deleted by removing the configuration file and the environment variables; stored video records can be deleted with the project's files.
9. Google API Services User Data Policy
SmartCreator's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
10. YouTube API Services
SmartCreator uses YouTube API Services. By using it, its operator agrees to be bound by the YouTube Terms of Service. The Google Privacy Policy describes how Google handles data. Access granted to SmartCreator can be revoked through the Google security settings page linked in section 8.
11. This website
These pages are static. They set no cookies, run no analytics and contain no forms.
12. Changes to this policy
If SmartCreator's handling of Google user data changes, this page will be updated and the date at the top will change.
13. Contact
Questions about this policy: frost@heyfrost.com.