Legal

Terms of service

Effective 14 September 2026Version 1.1Operator: Wojciech Olech, Attribia

The short version

Attribia is a hand-run pilot for businesses. Wojciech Olech onboards every client personally. It is not a self-serve product.
Fees are a one-time setup fee plus a smaller recurring fee, agreed in writing for each engagement. If the engagement letter and these terms disagree, the engagement letter wins.
You are responsible for lawful tracking on your own websites and ads, including consent. We process your data only on your instructions.
Either side can end the engagement with 30 days' notice. Your data is deleted or returned within 30 days after that.
Polish law applies. If something goes wrong, we talk first.

Who these terms are between

These terms are between Wojciech Olech, operating Attribia and based in Poland (called Attribia, we or us below), and the business that uses the Attribia platform or signs an engagement with us (called the Client or you). You accept these terms by signing an engagement letter, by creating an account on the platform, or by using it.

Attribia is for businesses only. If you are acting as a consumer, please do not use the platform.

Words used in these terms

Platform: the Attribia software and services: tracked links and click capture, the events API, the dashboard, the AI page and consent checks, and anything we add later.
Engagement letter: the written agreement (an email exchange counts) in which we and you agree the scope, the fees and any special terms of your engagement.
Users: the people in your organisation you give access to, in the owner, admin or member roles.
Client Data: everything you or your Users put into the Platform or send to it, including the clicks, leads and conversions recorded for you, your business profile and the pages you ask us to check.
End Users: the people whose data appears in Client Data: visitors to your sites and ads, your leads and customers.
Privacy policy: the document at attribia.com/privacy, which describes what data the Platform stores and who processes it. It is part of these terms.

What Attribia is, and what it is not yet

Attribia gives you tracked campaign links for Meta and Google Ads, an events API to send us your leads and conversions, a dashboard that joins clicks to results and shows cost, cost per acquisition and return on ad spend per channel and campaign, and AI-assisted checks of the tracking and consent behaviour on your own pages.

Attribia is run as a pilot with a small number of clients. That means:

We set up each engagement by hand: your organisation and API key, your tracked links, the connection between your conversion source and the events API.
Some things that will later be automatic are done by us manually today. In particular, ad spend is not pulled from Meta or Google automatically, and conversions are not sent back to the ad platforms. We will tell you plainly what is automatic and what is not, and these terms do not promise either until it is live.
Features may change, improve or be removed as the pilot teaches us what matters. We will tell you about changes that affect how you use the Platform.

Accounts and users

You decide who in your organisation gets access and in which role. Exactly one User is the owner, who has full control; admins manage the team and the organisation’s details; members use the dashboard.

You are responsible for your Users, for keeping passwords and API keys confidential, and for everything done through your accounts. Tell us straight away if you believe a password or key has been compromised, and we will rotate it with you. Keep your account details accurate.

Fees and payment

Fees are agreed in the engagement letter and consist of a one-time setup fee, which covers the hands-on integration work, and a recurring fee, which covers running the Platform and ongoing monitoring for you. There is no public price list.

We invoice the setup fee when the engagement starts and the recurring fee at the start of each period. Invoices are due within 14 days. Prices are stated net of VAT where VAT applies. The setup fee is not refundable once setup work has started. If an invoice is more than 14 days overdue, we may suspend access after telling you, and restore it when you have paid.

What you are responsible for

You will:

use the Platform lawfully, and only for your own business or, if you are an agency, for the ad accounts and websites of clients who have authorised you, in which case you remain responsible to us for their data and their compliance;
make sure you have a valid legal basis, and where required consent, for the tracking you deploy on your own websites, ads and other properties, including our tracked links and any cookie or identifier they set, and give End Users the information the law requires; Attribia does not operate your cookie banner and cannot make your properties compliant for you;
send us only data you are entitled to send, with contact identifiers hashed as our documentation requires, and never send us special categories of personal data;
give us accurate information and keep it up to date;
not try to access other clients’ data, probe or overload the Platform, reverse-engineer it, or use it to build a competing service;
not resell access to the Platform or use it for anyone other than as allowed above.

If we believe your use breaks these rules or the law, we may suspend the affected part of the service after telling you, and we may end the engagement under the section on ending it.

How we handle your data

This section is the data processing agreement between us for Client Data that contains personal data of End Users. For that data you are the controller and we are the processor. Where we process your own account and business data, we are the controller and the privacy policy applies.

Details of the processing.

Aspect	For this engagement
Subject matter and purpose	Marketing attribution for you: recording clicks on your tracked links, receiving your leads and conversions, joining them, and reporting the result to you
Nature	Storage, structuring, matching on identifiers, reporting; AI-assisted analysis of your own public pages
Duration	For the engagement, then deletion or return under this section
Data subjects	Visitors to your ads and websites; your leads and customers
Categories of data	The identifiers and fields listed in the privacy policy under “Data we process for our clients”: campaign parameters, ad platform click identifiers, browser identification string, referring page, our first-party identifiers, event identifiers, times, values, and contact identifiers you have hashed

Our commitments as processor. We will:

process Client Data only on your documented instructions, which are these terms, the engagement letter and the way you use the Platform, unless the law requires otherwise, in which case we will tell you first unless the law forbids it; if we believe an instruction infringes data protection law, we will tell you;
make sure that everyone who processes Client Data for us is bound by confidentiality; today that is the operator alone;
protect Client Data with the measures described in the privacy policy’s security section: hashed credentials, encrypted transport, separation of each client’s data by a tenant identifier that every query is scoped to, and least-privilege access to production;
use only the sub-processors listed in the privacy policy, tell you at least 14 days before adding or replacing one, and let you object on reasonable data protection grounds; if we cannot resolve your objection, you may end the affected part of the engagement without penalty;
help you respond to End Users who exercise their rights, by passing on any request we receive promptly and by giving you the data or performing the deletion you ask for;
help you meet your own obligations on security, breach notification and impact assessments, taking into account what we know and what the Platform does;
tell you without undue delay, and in any case within 48 hours of becoming aware, if a personal data breach affects Client Data, with what we know at the time and updates as we learn more;
keep Client Data in the European Union, except for the sub-processors the privacy policy names in the United States, which receive only the addresses and content of your own public pages, your business profile and what we detected on your pages, never End User data;
at the end of the engagement, delete Client Data or, if you ask before the end, return it to you in a common machine-readable form, within 30 days, and then delete it, unless the law requires us to keep some of it;
give you the information you reasonably need to show that this section is being followed, and allow an audit once a year on 30 days’ notice, at your cost, carried out remotely unless we agree otherwise, in a way that does not expose other clients’ data.

Who owns what

The Platform, its code, design, documentation and everything we build to run it are ours. You get a non-exclusive, non-transferable right to use the Platform for your business for the duration of the engagement.

Client Data is yours. You give us the right to process it to provide the Platform to you, as described in these terms and the privacy policy, and for nothing else. Aggregated figures that do not identify you or any End User, which we may use to understand how the Platform performs, are not Client Data.

If you give us feedback or ideas, we may use them without owing you anything.

Availability, support and changes

During the pilot we run the Platform on a best-effort basis. We aim for it to be available continuously, but we do not promise a level of uptime unless the engagement letter says so. We may take the Platform down briefly for maintenance and will try to tell you first.

Support is by email, from the person who built the Platform. We reply within a few business days; urgent issues that stop the Platform working for you are handled first.

We may change the Platform. If a change removes something you rely on, we will tell you at least 14 days before, and you may end the engagement under the section on ending it if the change is not acceptable to you.

Confidentiality

Each of us will keep the other’s confidential information secret and use it only for the engagement. Confidential information is anything marked confidential or that a reasonable person would treat as such, including Client Data, your business profile and results, and our fees, technical details and plans. It excludes information that is public, that the recipient already had, or that the law requires to be disclosed. This section lasts for three years after the engagement ends, and for Client Data for as long as we hold it.

What we do not promise

The Platform is provided as it is during the pilot. Attribution is a model: it joins the data it is given with the identifiers it can see, and its figures depend on the completeness and accuracy of what your properties and systems send. It is not a guarantee of advertising performance, revenue or any business result. Meta’s and Google’s platforms, their identifiers and their rules are theirs and may change without our control. To the extent the law allows, we make no other warranties.

Liability

Neither of us is liable to the other for indirect or consequential loss, loss of profit, revenue, business or goodwill, or loss of data that the other party failed to keep a copy of.

Our total liability to you arising out of or in connection with the engagement, in any twelve-month period, is limited to the fees you paid us in the twelve months before the event that gave rise to the claim.

Nothing in these terms limits or excludes liability that cannot be limited or excluded under applicable law, including liability for damage caused intentionally.

Ending the engagement

The engagement starts when the engagement letter is agreed. After the setup phase, the recurring fee runs in monthly periods unless the engagement letter says otherwise.

Either of us may end the engagement at any time with 30 days’ written notice; email is enough. Either of us may end it immediately by notice if the other materially breaks these terms and does not fix it within 14 days of being told, becomes insolvent, or, in your case, uses the Platform unlawfully.

When the engagement ends, your access stops, fees already due remain due, and Client Data is deleted or returned as described in the data processing section.

Changes to these terms

We may change these terms. We will email you at least 14 days before a change applies to you and update the version and effective date at the top of this page. If you do not accept the change, you may end the engagement before it applies, without penalty. Continuing to use the Platform after that date means you accept the change. The engagement letter always prevails over these terms where they disagree.

Law and disputes

These terms are governed by the law of Poland. If a dispute arises, we will both try to resolve it in good faith by talking, for at least 30 days, before going anywhere else. If that fails, the courts having jurisdiction over the operator’s seat in Poland have exclusive jurisdiction. Any mandatory rules of the law of the country where you are established that cannot be contracted out of are not affected by this section.

The small print

Entire agreement. These terms, the engagement letter and the privacy policy are the whole agreement between us and replace anything said before. The engagement letter prevails, then these terms, then the privacy policy.
Severability. If a part of these terms is found invalid, the rest stays in force and the invalid part is replaced by a valid one that comes as close as possible to its intent.
Assignment. You may not transfer the engagement without our written consent. We may transfer it to a company that the operator forms to run Attribia, and will tell you when we do.
Notices. Notices are given by email to the addresses on record: ours is at the end of this page, yours is your owner’s address on the Platform.
No waiver. Not enforcing a term does not mean giving it up.
Events beyond control. Neither of us is responsible for failing to perform because of events beyond reasonable control, such as outages of the underlying cloud provider or the ad platforms, for as long as they last.
Language. These terms are written in English. If a translation is ever provided, the English version prevails.

How to reach us

For anything in this document, including questions, requests about your data and complaints, write towojtek@attribia.com. Wojciech Olech reads every message personally and replies within a few days.