Lukrena Terms of Service

Version 1.0Effective from

This is the version currently in force.

These Terms of Service govern the use of Lukrena, the platform at lukrena.com for running live webinars and automated webinars, collecting registrations, communicating with registrants and selling during a webinar. They also serve as the terms for electronically supplied services required by Polish law (the Act of 18 July 2002 on Providing Services by Electronic Means). Annex 1, the Data Processing Agreement, forms an integral part of these Terms.

1. Who we are and how to reach us

  1. The services are provided by Katarzyna Górecka, a sole trader registered in Poland, ul. Nowogrodzka 31, 00-511 Warszawa, Poland, tax ID (NIP) 7412060624 ("Provider", "we", "us").
  2. For any matter, including complaints, reports of illegal content and data protection, contact us at [email protected] or by post at the address above.
  3. The same email address is our single point of contact for authorities of EU Member States, the European Commission and recipients of the service under Articles 11 and 12 of Regulation (EU) 2022/2065 (the Digital Services Act, "DSA"). We handle such contact in Polish and English.

2. Definitions

In these Terms, capitalised words have the following meanings:

  1. Platform - the Lukrena software made available by the Provider as a service (SaaS) at lukrena.com and on domains connected by Customers, including the dashboard, registration pages, viewer rooms, the Studio and the API.
  2. Customer - a business (a sole trader, company or other organisation) for which the Provider has opened an Account and which uses the Platform for purposes related to its trade, business or profession.
  3. User - an individual who signs in to an Account on behalf of a Customer, such as the owner, an employee or a contractor.
  4. Account - the area of the Platform assigned to a Customer, available after signing in, where the Customer sets up Webinars and manages data.
  5. Webinar - an event created by a Customer on the Platform, in particular a live webinar run from the Studio or an Automated Webinar played from a recording on a schedule.
  6. Automated Webinar - a Webinar played from a pre-recorded video, where each Participant watches at a time they choose or are assigned.
  7. Studio - the browser-based part of the Platform used to broadcast and record camera, microphone and screen.
  8. Participant - a person who registers for a Customer's Webinar or is added to it by the Customer, including anyone watching in the Viewer Room.
  9. Buyer - a Participant or other person who purchases a product or service from a Customer, in particular through a payment started on the Platform.
  10. Viewer Room - the Platform page where a Participant watches a Webinar and uses the chat, polls and the Customer's offers.
  11. Personal Link - an individual Viewer Room address containing a unique token assigned to a single Participant.
  12. Video Provider - a third-party video service with which the Customer contracts in its own name and at its own cost, in particular Cloudflare (Cloudflare Stream) or BunnyWay (Bunny Stream).
  13. Third-Party Services - services of other companies that the Customer connects to its Account using its own keys, tokens or IDs, in particular Video Providers, Stripe, SMSAPI, email marketing tools, the Customer's own SendGrid account, the Customer's own Anthropic API key, a Telegram bot, the Meta Pixel and the Meta Conversions API.
  14. Plan - a service tier defining features and limits, as described in the pricing section at lukrena.com/en.
  15. Customer Content - all material, data and information entered, uploaded, broadcast or generated by the Customer or on its instructions, including recordings, presentations, registration page copy, emails and text messages, offers, chat messages, FAQ answers and Participant data.
  16. AI Features - Platform features that use artificial intelligence models, including the generators for email sequences, briefs, scripts and FAQs, chat reply suggestions and the auto-moderator that answers Participants' questions.
  17. Private Beta - the current stage of the Platform, during which Accounts are opened by invitation only.
  18. Business Day - Monday to Friday, excluding public holidays in Poland.

3. The service and the private beta

  1. The Platform lets Customers, among other things: build registration pages; collect registrations (including via the API and list imports); send reminder emails and text messages and post-webinar sequences; run live Webinars from the Studio; play Automated Webinars on a schedule; run chat, polls and countdown offers; measure attendance and viewing time; segment Participants; sell through the Customer's own Stripe account; integrate with the Customer's tools; and use AI Features.
  2. The Platform is built for businesses. It is not intended for consumers acting as Customers.
  3. The Platform is in Private Beta. There is no public sign-up. The Provider opens an Account after receiving a request at [email protected] and agreeing with the prospective Customer how the Platform will be used. The Provider may decline to open an Account without giving reasons.
  4. During the Private Beta the Platform is under active development. The Provider may add, change and retire features, provided that this does not deprive the Customer of material features of a paid Plan during a period already paid for. Where possible, the Provider gives advance notice before retiring a feature the Customer uses.

4. Technical requirements

  1. To use the Platform you need an internet-connected device, a current version of Chrome, Edge, Firefox or Safari with JavaScript and cookies enabled, and a working email address.
  2. To broadcast from the Studio you also need a camera and microphone, browser permission to use them, an upload connection fast enough for video (at least 5 Mbps recommended) and an active account with a Video Provider.
  3. Participants need a browser meeting the requirements in clause 1 and a connection capable of playing video. Participants do not create an account or install software.
  4. Using any online service carries the usual risks, such as malware, phishing and stolen passwords. The Provider applies the safeguards described in the Privacy Policy; Customers should protect their own devices and credentials.

5. Contract and Account

  1. The contract between the Provider and the Customer is concluded when the Customer receives its Account credentials and accepts these Terms, and at the latest on first sign-in. It runs for an indefinite period unless agreed otherwise.
  2. Whoever sets up an Account on behalf of a Customer confirms that they are authorised to do so.
  3. The Customer provides accurate identification details and keeps them up to date.
  4. The Customer is responsible for keeping passwords, API keys and other credentials confidential, for the actions of the Users it gives access to, and for telling the Provider promptly if it suspects unauthorised access. The initial password provided by the Provider must be changed after the first sign-in.
  5. The Account API key is for integrating the Customer's systems with the Platform only. The Customer must not expose it in public code or in a browser.

6. Plans, limits and fees

  1. The scope of the service and its limits follow from the Plan assigned to the Account. Current Plans, prices and limits are published in the pricing section at lukrena.com/en. On the effective date of these Terms the Plans are:
    • Trial - free: 1 active automated webinar, 200 emails a month, 100 AI auto-moderator replies a month, 500 contacts;
    • One webinar - PLN 199 a month: 3 active automated webinars, 20,000 emails, 3,000 AI replies and 20,000 contacts a month;
    • Whole offer - PLN 299 a month: 20 active automated webinars, 100,000 emails, 30,000 AI replies and 100,000 contacts a month, plus live webinars from the Studio.
  2. Email and AI reply limits reset monthly. Once a limit is used up, the Platform pauses the relevant feature until the limit resets or the Plan changes, and shows a notice in the dashboard. Unused limits do not roll over.
  3. The Provider may agree different limits or pricing with a Customer individually. Individual arrangements take precedence over the pricing page.
  4. A new Account may receive a free trial period. The Provider sets its length when opening the Account.
  5. Fees for paid Plans are payable in advance for the billing period stated on the pricing page or in the individual arrangement. Prices on the pricing page exclude VAT, which is added at the applicable rate where due. The Customer agrees to receive invoices electronically.
  6. The Provider takes no commission on the Customer's sales. Revenue from sales made through the Platform goes straight to the Customer's Stripe account, as set out in Section 9.
  7. The Customer pays for Third-Party Services, such as its Video Provider, Stripe, SMSAPI, its own SendGrid account or its own Anthropic key, directly to their providers. These costs are not included in the Plan price.
  8. If a payment is more than 14 days overdue, the Provider may, after an email reminder, restrict the Account to the features of the free Plan until the balance is paid.
  9. Price changes do not affect periods already paid for. The Provider gives at least 30 days' notice of any Plan price increase, and the Customer may terminate before it applies, with effect from the end of the paid period.

7. Video: the Customer's own Video Provider account

  1. The Provider does not stream, host or store the Customer's video as a streaming provider. Live broadcasts and recordings are ingested, encoded, stored and delivered to Participants by the Video Provider, on the Customer's own account.
  2. The Customer opens an account with the Video Provider of its choice in its own name, accepts that provider's terms, is that provider's customer and pays it directly, including for storage and for delivery of video to Participants. The Customer enters the credentials of that account into its Account on the Platform.
  3. The Platform only orchestrates the service: it creates live inputs on the Customer's account, sends the Studio feed to the Video Provider, signs playback URLs, embeds the player in the Viewer Room and retrieves the list of recordings and the transcripts made available by the Video Provider.
  4. To protect a live broadcast against loss if the host's browser crashes, the Studio uploads segments of the recording to the Provider's server. This copy is used solely to assemble the replay and deliver it to the Customer's Video Provider account; it is not publicly accessible and is deleted automatically, as a rule after about 24 hours. Presentations, logos and other files uploaded by the Customer are stored on the Provider's server for as long as they are used in the Account.
  5. Availability, quality, latency and cost of video delivery depend on the Video Provider. The Provider is not liable for outages, restrictions or suspension of the Customer's Video Provider account, including where storage or credit on that account runs out.
  6. The Customer is responsible for Customer Content broadcast and played through the Platform, in particular for holding copyright and related rights, music licences, consent from people appearing in recordings to the use of their image, and rights to trade marks and third-party material.

8. Personal Links

  1. Every Participant receives a Personal Link. The link identifies the Participant and allows the Platform to measure attendance and viewing time and to attribute chat messages and purchases.
  2. A Personal Link is meant only for the person it was sent to and must not be shared, published or resold. The Customer must not send one Personal Link to many people or post it anywhere publicly accessible.
  3. To prevent abuse, the Platform limits how often a single Personal Link can be used to enter within a given time and may cap the number of people in the Viewer Room at once, according to the Webinar settings. The Customer can block Participants who break the rules.

9. Payments from Buyers: the Customer's own Stripe account

  1. Sales during a Webinar are processed through the Customer's Stripe account, connected to the Platform via Stripe Connect. The Customer contracts with Stripe in its own name and accepts Stripe's terms.
  2. Money paid by Buyers goes directly to the Customer's Stripe account. The Provider does not receive, hold or transfer these funds, takes no commission on them and is not a party to any contract between the Customer and its Buyers.
  3. The Platform stores only the ID of the Customer's connected Stripe account and the purchase details needed to run the funnel (such as product name, amount, currency, status and payment ID). The Platform never stores card details.
  4. As the seller, the Customer is responsible to Buyers for, among other things: product and price information, its terms of sale, receipts and invoices, taxes, fulfilment, complaints, refunds, payment disputes (chargebacks) and consumer rights, including the right of withdrawal.
  5. The Provider forwards any Buyer questions or requests about a purchase to the Customer.

10. Sending emails and text messages

  1. Emails to Participants are sent through the Provider's email delivery provider (Twilio SendGrid) from the Platform's shared sending domain or, if the Customer sets it up, from the Customer's own SendGrid account and domain. Text messages are sent through the Customer's own SMSAPI.pl account, using the token the Customer provides.
  2. The Customer may send emails and text messages only to people who provided their address or number themselves and gave any consent required by law, in particular the Polish Electronic Communications Law of 12 July 2024 and the GDPR. Purchased, rented, scraped or third-party lists are prohibited, as are addresses whose owners did not sign up to hear from the Customer.
  3. By importing a contact list, the Customer confirms that it has a legal basis to contact every person on it and can demonstrate this at the Provider's request.
  4. Every email includes an unsubscribe link, including one-click unsubscribe. The Customer must not remove or hide it, and the Platform does not send further marketing emails to people who have unsubscribed. The Customer adds its business details to the email footer in its settings.
  5. The shared sending domain means every Customer's deliverability depends on everyone else's. The Platform therefore tracks bounce and spam complaint rates for each Account and automatically pauses email sending from an Account whose rates exceed thresholds that mailbox providers treat as harmful. Sending is also paused when the monthly Plan limit is used up. The Customer is notified in the dashboard and by a separate alert. Sending resumes after a reputation block once the cause has been resolved with the Provider.
  6. To protect the Platform against abuse, the Provider may keep lists of email addresses, domains and phone numbers to which the Platform does not send messages and from which it does not accept registrations.
  7. Emails contain open and click tracking that feeds the Customer's statistics. The Customer tells Participants about this in its own privacy policy.
  8. The Customer is responsible for the content of its messages and their compliance with the law, including rules on unfair commercial practices, unfair competition and consumer protection.

11. AI Features

  1. AI Features use language models provided by Anthropic. By default the Platform uses the Provider's API key within the limits of the Plan. The Customer may enter its own Anthropic key, in which case requests run on the Customer's account and at its cost.
  2. The model receives the data needed for the task, such as the offer description and brief, the recording transcript, FAQ content and the text of questions Participants ask in the chat. The Customer must not submit special categories of personal data or any information it may not disclose to the model provider.
  3. AI-generated output can be wrong, inaccurate or inappropriate for the context. The Customer must review and approve AI-generated content before using it and is responsible for it as for its own content. This applies in particular to sales claims, statements about results, prices and deadlines.
  4. The auto-moderator answers Participants automatically, based on material prepared by the Customer. A Customer who enables it tells Participants that some chat replies are generated automatically where the law requires, including Regulation (EU) 2024/1689 (the AI Act).
  5. The Customer may generate chat comments to be replayed in an Automated Webinar. The Customer must not present them as statements by real people in a way that misleads Participants about opinions of the product, the number of buyers or the popularity of an offer.

12. Integrations and marketing pixels

  1. The Customer may connect Third-Party Services to its Account, in particular GetResponse, MailerLite, ActiveCampaign, its own webhooks, a Telegram bot, the Meta Pixel and the Meta Conversions API. Once connected, the Platform sends them Participant data and funnel events according to the Customer's configuration.
  2. Third-Party Services operate under the Customer's own agreements with their providers. The Provider is not responsible for their operation, availability or handling of data.
  3. A Customer that places the Meta Pixel on its registration pages and Viewer Room, or enables the Conversions API, is responsible for doing so lawfully, in particular for informing Participants and obtaining their consent to storing or accessing information on their device where required (Article 399 of the Polish Electronic Communications Law). The Platform sends email addresses to the Conversions API only as SHA-256 hashes.
  4. Keys, tokens and passwords for Third-Party Services are stored encrypted and used only to perform the functions the Customer has configured.

13. Acceptable use

  1. Customers and Users must use the Platform lawfully, in line with these Terms and with fair business practice. In particular, it is prohibited to:
    1. send unsolicited commercial communications (spam) or use contact lists in breach of Section 10;
    2. publish, broadcast or distribute unlawful content, including content that infringes copyright, personality rights, image rights or trade secrets, content inciting violence or hatred, pornographic content, or content involving minors in a way that harms them;
    3. offer products or services prohibited by law or by Stripe's terms, including pyramid schemes, illegal gambling, unlicensed financial services and products marketed with misleading health or financial claims;
    4. impersonate any person, business or institution, including through a sending domain, sender name, logo or page content;
    5. phish for data, passwords or payments, or distribute malware;
    6. share, publish or resell Personal Links, or circumvent entry limits and room size caps;
    7. use bots, scripts or automation to inflate registrations, viewers, reactions or purchases, or to overload the Platform;
    8. circumvent Plan limits or rate limits, including by opening multiple Accounts;
    9. attempt to access other Accounts, data or infrastructure, or run penetration tests or vulnerability scans without the Provider's written permission;
    10. decompile, copy or reproduce the Platform or any part of it to build a competing product, except as mandatory law allows;
    11. process special categories of data (such as health data) through the Platform without a separate legal basis and prior agreement with the Provider.
  2. Participants are bound by the rules in Section 16.

14. Customer Content and content moderation

  1. The Customer keeps all rights to Customer Content. The Customer grants the Provider a non-exclusive, royalty-free licence to use Customer Content to the extent needed to provide the service: storing it, making technical copies, sending it to the Video Provider and Third-Party Services, displaying it to Participants and processing it with AI Features. The licence ends when the Customer Content is deleted, except for backups until they are rotated out.
  2. The Customer confirms that it holds sufficient rights in Customer Content to grant this licence and to have it distributed through the Platform.
  3. The Provider does not proactively monitor Customer Content. However, it may disable access to content, stop a Webinar, pause sending or a feature, or suspend an Account if it receives a credible notice that content is illegal, or if a breach of these Terms endangers other Customers, Participants or the Platform. Any such action will be proportionate to the breach.
  4. The Provider tells the Customer about any restriction under clause 3 and gives a statement of reasons covering at least the type and scope of the restriction, the facts and circumstances relied on, the legal ground or the clause of these Terms, and how to appeal. The Customer may appeal under Section 23, and the appeal is reviewed by a person, not by automated means.

15. Reporting illegal content

  1. Anyone may report content on the Platform that they consider illegal or contrary to these Terms by writing to [email protected].
  2. A report should include: an explanation of why the content is illegal; the exact URL or other details that allow it to be found; the reporter's name and email address (not required for reports concerning child sexual abuse offences); and a statement that the information in the report is accurate and complete to the best of the reporter's knowledge.
  3. The Provider acknowledges receipt, handles the report promptly, diligently and objectively, and informs the reporter of its decision and of the available means of redress. The Provider does not use automated tools to decide on reports.
  4. If content suggests a criminal offence threatening anyone's life or safety, the Provider promptly informs the competent authorities.
  5. After a prior warning, the Provider may suspend the handling of reports from people who frequently submit manifestly unfounded reports.

16. Terms for Participants

  1. The Provider supplies Participants, free of charge, with electronic services that allow them to register for a Webinar, receive messages about it, watch it in the Viewer Room and use the chat, reactions and polls. This arrangement starts when a Participant registers or enters the Viewer Room and ends when they unsubscribe, when the Customer deletes their data or when the Webinar ends. Participants may stop using the services at any time.
  2. The organiser of the Webinar, the seller of any products offered and the controller of the Participant's personal data is the Customer named on the registration page. The Customer's privacy policy governs how it handles that data, and its own terms govern any sale.
  3. Participants must not share their Personal Link. In the chat, unlawful or offensive content, advertising, links to third-party sites without the organiser's permission and spam are prohibited. The Customer may hide messages and block Participants who break these rules.
  4. Participants can unsubscribe from emails at any time using the link at the bottom of each message.
  5. Questions and complaints about the content of a Webinar or about purchases should go to the Customer. Complaints about how the Platform works can be sent to the Provider under Section 23.

17. Availability, maintenance and support

  1. The Provider takes due care to keep the Platform running continuously, especially during scheduled Webinars. During the Private Beta the Provider does not commit to any specific service level (SLA).
  2. The Provider schedules maintenance outside planned live broadcasts where possible and announces it in advance if it may cause downtime longer than 15 minutes. Updates are not deployed while a live broadcast is in progress.
  3. The Provider may make urgent changes or take the Platform offline immediately for security reasons or in the event of a failure.
  4. Support is provided by email at [email protected] on Business Days. The Whole offer Plan includes priority support, where the Provider aims to reply on the same Business Day.

18. Liability

  1. The Provider is liable for non-performance or improper performance of the contract under general rules, subject to the limitations in this Section, to the extent permitted by law.
  2. The Provider is not liable for:
    1. Customer Content, the Customer's offers, or contracts between the Customer and its Participants or Buyers;
    2. the operation, outages, changes of terms or costs of Third-Party Services, including Video Providers, Stripe, SMSAPI, email marketing tools and AI model providers;
    3. messages not being delivered because of recipients' mail servers or network operators, spam filters or the reputation of the Customer's own domain;
    4. the consequences of pausing sending or a feature under Section 6(2), Section 6(8) or Section 10(5);
    5. losses caused by the Customer sharing its credentials or breaching these Terms;
    6. sales results, conversion, attendance or other business outcomes of Webinars;
    7. interruptions caused by force majeure, failures of public networks or acts of third parties that the Provider could not prevent with due care.
  3. The Provider is not liable to the Customer for loss of profits, and its total liability on all grounds is capped at the net fees paid by the Customer in the 12 months before the event giving rise to the claim. For the free Plan, liability is capped at PLN 500.
  4. The limitations in clauses 2 and 3 do not apply to damage caused intentionally, to liability that cannot be excluded or limited under mandatory law, or to the rights of the persons referred to in Section 24.
  5. The Customer will indemnify the Provider against third-party claims, and cover reasonable costs including awarded damages and legal fees, where those claims arise from Customer Content or from the Customer's use of the Platform in breach of the law or these Terms. The Provider will tell the Customer about any such claim promptly and allow it to take part in the defence.

19. Intellectual property and feedback

  1. The Platform, its code, design, the Lukrena name and logo, documentation and templates belong to the Provider or are used under licence. For the term of the contract, the Customer receives a non-exclusive, non-transferable right to use the Platform within its Plan, without the right to sublicense.
  2. The Customer may use and adapt email, page and script templates supplied by the Provider for its own Webinars, and may keep using content already produced after the contract ends.
  3. The Provider may use feedback, suggestions and ideas about the Platform to improve it, without payment and without revealing the Customer's identity. This does not give the Provider any rights in Customer Content.
  4. The Provider may list the Customer's name or logo as a customer only with the Customer's prior consent.

20. Personal data

  1. The Provider is the controller of the personal data of Customers and Users (such as sign-in details, billing details and correspondence). Details are set out in the Privacy Policy.
  2. For the personal data of Participants and Buyers, and any other personal data in Customer Content, the Customer is the controller and the Provider processes the data on the Customer's behalf as a processor, under Annex 1.
  3. The Customer ensures a legal basis for processing Participants' and Buyers' data, provides them with its own privacy policy and terms (for example through the links set in the Account settings and shown on the registration page), and handles their data subject requests.

21. Term, termination and suspension

  1. The Customer may terminate the contract at any time by emailing [email protected] from the email address linked to the Account. Termination takes effect at the end of the paid billing period, or immediately for the free Plan. Fees for a period already started are not refunded, subject to Section 24.
  2. The Provider may terminate the contract on 30 days' notice by email for a valid reason, such as the end of the Private Beta on its current terms, the discontinuation of the service or a change in the Platform's business model. The Provider refunds any prepaid, unused period pro rata.
  3. The Provider may terminate the contract with immediate effect or suspend the Account if the Customer seriously or persistently breaches these Terms, in particular Sections 10 or 13, despite a request to stop, or where this is needed to protect Participants, other Customers or the Platform. In urgent cases, such as mass spam, phishing or manifestly illegal content, suspension may occur without prior notice. Section 14(4) applies accordingly.

22. Export and deletion of data

  1. Throughout the contract, the Customer can export Participant and contact data to CSV files and delete the data of individual people, entire Webinars and Automated Webinars with their history. Deleting a person removes their registrations, messages, viewing events, sends, purchases and pending integration events.
  2. After the contract ends, the Customer has 30 days to export its data. During that time the Provider may limit the Account to read-only and export functions. After that period, the Provider permanently deletes the Account, Customer Content and Participant data, subject to clause 3.
  3. Backups are deleted as they are rotated out. The Provider keeps the Customer data needed for billing and tax obligations and for establishing or defending legal claims for as long as the law requires.
  4. Recordings stored on the Customer's Video Provider account are not deleted by the Provider. The Customer manages them directly with the Video Provider.

23. Complaints

  1. Complaints about how the Platform works, including appeals against decisions under Section 14(4) and Section 15(3), can be sent to [email protected] or by post to the Provider's address.
  2. A complaint should include: details identifying the complainant (and, for a Customer, the Account), a description of the problem, the date and time it occurred, the page address or Webinar concerned, and the outcome sought. Screenshots and IDs speed things up.
  3. The Provider responds to a complaint within 14 days of receiving it, by email to the address it came from or in another way requested. If more information is needed, the Provider asks for it and the 14 days run from when it is received.
  4. For urgent issues affecting a broadcast that is live or scheduled for the same day, please put "URGENT" in the subject line.

24. Sole traders with consumer-level protection

  1. Under Polish law, certain consumer protections also apply to a Customer who is an individual entering into a contract directly related to their business, where the contract shows that it is not of a professional nature for them, judged in particular by the business activities entered in the Polish business register (CEIDG). These protections cover unfair contract terms (Articles 385¹-385³ of the Polish Civil Code) and Chapters 4, 5a and 5b of the Polish Consumer Rights Act of 30 May 2014, as provided in Article 385⁵ of the Civil Code and Article 7aa of the Consumer Rights Act.
  2. Such a Customer may withdraw from the contract without giving reasons within 14 days of concluding it, by emailing [email protected]. If the Customer asked for paid services to start before that period ended, it pays for the services provided up to withdrawal, in proportion to what was supplied. The Provider refunds any other payments within 14 days of receiving the withdrawal notice, using the same payment method unless agreed otherwise.
  3. For such a Customer, the limitations in Section 18(2) and 18(3) apply only in so far as they are consistent with the provisions referred to in clause 1, and the Customer's remedies if the digital service does not conform to the contract are set out in Chapter 5b of the Consumer Rights Act.
  4. Participants who are consumers use the free services described in Section 16. Nothing in these Terms limits their rights under mandatory consumer protection law.

25. Changes to these Terms

  1. The Provider may change these Terms for valid reasons, such as changes in the law, decisions or guidance from competent authorities, changes in the scope or manner of the service (including new features), changes to the Third-Party Services on which the Platform relies, security needs or preventing abuse, or the need to clarify wording.
  2. The Provider notifies Customers of a change by email and by a notice on the Terms page at least 14 days before it takes effect. The upcoming version is published at a permanent address, labelled with its effective date.
  3. A Customer who does not accept the changes may terminate the contract before they take effect, with effect from that date, and the Provider refunds the unused part of any prepaid period pro rata. Continuing to use the Platform after the changes take effect means accepting them.
  4. A shorter notice period, or an immediate change, is possible where required by law or by an authority's decision, or where the change addresses an unforeseen and imminent threat to the Platform, Customers or Participants.
  5. All previous versions of these Terms, with the periods during which they applied, are available on the Terms page under "Previous versions". Contracts and events before a change are governed by the version in force at the time.

26. Governing law and disputes

  1. The contract is governed by Polish law. This choice of law does not deprive a person referred to in Section 24, or a Participant who is a consumer, of the protection of mandatory provisions of the law of their country of habitual residence.
  2. Disputes with business Customers are resolved by the common court having jurisdiction over the Provider's registered address, subject to clause 3.
  3. Disputes with consumers and with the persons referred to in Section 24 are resolved by the court having jurisdiction under general rules. Consumers may use out-of-court complaint and redress procedures, including help from a municipal or district consumer ombudsman (rzecznik konsumentów) and the permanent consumer arbitration courts at the Voivodeship Inspectorates of Trade Inspection. Information is available at uokik.gov.pl. The EU Online Dispute Resolution (ODR) platform was closed on 20 July 2025 and is no longer available.
  4. Before going to court, the parties will try to settle any dispute amicably through the complaints procedure and negotiation.

27. Final provisions

  1. These Terms are available free of charge at lukrena.com/en/terms in a form that allows them to be downloaded, reproduced and stored, for example by printing or saving the page in a browser.
  2. These Terms are published in Polish and English. If the versions differ, the Polish version prevails.
  3. If any provision of these Terms is found invalid or unenforceable, the remaining provisions stay in force, and the invalid provision is replaced by the legal rule closest to its purpose.
  4. The Customer may not transfer its rights and obligations under the contract to a third party without the Provider's consent given in documentary form (for example by email). The Provider may transfer the contract to a legal successor or a buyer of its business after giving the Customer at least 30 days' notice, during which the Customer may terminate with immediate effect.
  5. Correspondence relating to the contract takes place electronically, at the parties' email addresses.

Annex 1. Data Processing Agreement

This Data Processing Agreement ("DPA") is entered into between the Customer as controller ("Controller") and the Provider as processor ("Processor") under Article 28(3) of Regulation (EU) 2016/679 (the "GDPR"). It is concluded together with the service contract and remains in force for as long as that contract does and until the data is deleted under clause 9.

1. Subject matter and duration

  1. The Controller engages the Processor to process personal data to the extent and for the purposes necessary to provide the services described in the Terms, for the duration of the service contract and the period set out in Section 22 of the Terms.
  2. Processing consists of: collecting data from registration forms, the API and imports; storing, organising, segmenting and analysing attendance and viewing; sending messages; passing data to Third-Party Services configured by the Controller; exporting; and deleting.

2. Data subjects and types of data

  1. Data subjects: Participants (people who register for or watch Webinars), Buyers, people asking questions in the chat, and any other people whose data the Controller enters into the Platform (for example people appearing in recordings).
  2. Types of data: first name, email address, phone number and SMS consent status, time zone, registration source and campaign parameters, Personal Link token, attendance and viewing data (entry times, viewing intervals, replay position), email opens and clicks, email and SMS send status, chat messages, questions and poll answers, reactions, offer clicks, purchase details (product, amount, currency, status and Stripe payment ID), unsubscribe and block status, and the image and voice of people appearing in the Controller's material.
  3. The Controller does not entrust the Processor with special categories of data under Article 9 GDPR or with data on criminal convictions, unless the parties separately agree otherwise in writing.

3. Processor obligations

The Processor will:

  1. process the data only on the Controller's documented instructions; these include the Terms, the Account configuration and the Controller's actions in the dashboard and via the API; if Union or Polish law requires the Processor to process data, it will inform the Controller before processing unless the law prohibits this;
  2. inform the Controller immediately if, in its opinion, an instruction infringes the GDPR or other data protection law;
  3. ensure that people authorised to process the data are bound by confidentiality or are under a statutory duty of confidentiality;
  4. take the technical and organisational measures required by Article 32 GDPR, described in clause 6;
  5. taking into account the nature of the processing, help the Controller respond to data subject requests, in particular by providing export, deletion and send-blocking functions in the dashboard;
  6. help the Controller meet its obligations under Articles 32 to 36 GDPR, taking into account the nature of the processing and the information available to the Processor;
  7. make available to the Controller the information needed to demonstrate compliance with Article 28 GDPR.

4. Subprocessors

  1. The Controller gives the Processor general authorisation to engage subprocessors. The current list is published in the Privacy Policy and, on the date of this DPA, comprises: OVH (hosting in a data centre in the European Union), Twilio (SendGrid, email delivery from the Platform's domain) and Anthropic (AI Features, when the Processor's key is used).
  2. The Processor gives the Controller at least 14 days' notice, by email or by updating the Privacy Policy, before adding or replacing a subprocessor. The Controller may raise a reasoned objection within that period. If the parties cannot agree on a solution, the Controller may terminate the contract with effect from the date of the change.
  3. The Processor imposes on subprocessors data protection obligations no less protective than those in this DPA and remains liable to the Controller for their performance.
  4. Third-Party Services that the Controller connects to its Account under its own agreements (in particular Video Providers, Stripe, SMSAPI, the Controller's own SendGrid account, its own Anthropic key, GetResponse, MailerLite, ActiveCampaign, webhooks, Telegram and Meta) are not the Processor's subprocessors. Data is passed to them on the Controller's instructions, and the Controller is responsible for its relationship with those providers, including any data processing agreements with them.

5. Transfers outside the European Economic Area

  1. The Processor transfers data to a third country only where needed to use a subprocessor under clause 4, and only with appropriate safeguards under Chapter V GDPR, in particular an adequacy decision of the European Commission (including the EU-US Data Privacy Framework where the recipient is certified) or the Standard Contractual Clauses adopted by the European Commission.
  2. The Platform's servers and database are located in the European Union.

6. Security measures

The Processor applies in particular: encryption in transit (TLS); encryption of Third-Party Service keys and tokens with AES-256-GCM; storing passwords only as bcrypt hashes; signed session cookies with the HttpOnly, Secure and SameSite flags; separation of data between Accounts; random Personal Link tokens; rate limiting; running uploaded HTML presentations in an isolated sandbox; least-privilege access; database backups; automated Account isolation tests before every deployment; and restricting server access to authorised people.

7. Personal data breaches

  1. The Processor notifies the Controller of a personal data breach without undue delay and in any case within 48 hours of becoming aware of it, at the email address linked to the Account.
  2. The notification contains the information available at the time, in particular the nature of the breach, the categories and approximate number of data subjects and records concerned, the likely consequences and the measures taken or proposed. Information not immediately available is provided in stages.

8. Audits

  1. The Controller may verify the Processor's compliance with this DPA, first by requesting information and documents, to which the Processor responds within 14 days.
  2. An on-site audit is possible no more than once a year (and additionally after a personal data breach), with at least 14 days' notice, on Business Days, without disrupting the Processor's business and with respect for trade secrets and other Customers' data. Any external auditor must be bound by confidentiality. The Controller bears the cost of the audit unless it reveals a material breach of this DPA by the Processor.

9. End of processing

  1. When the services end, the Processor, at the Controller's choice, enables export of the data and deletes it within the period set out in Section 22 of the Terms, unless Union or Polish law requires further storage.
  2. At the Controller's request, the Processor confirms deletion.

10. Liability and final provisions

  1. Liability towards data subjects is governed by Article 82 GDPR. Between the parties, Section 18 of the Terms applies, except for damage caused intentionally.
  2. Matters not covered by this DPA are governed by the Terms and the GDPR. In case of conflict, this DPA prevails over the Terms as regards the protection of personal data.

All versions

  • Version 1.0in force

    New, complete terms: plans and limits, the Customer's own video and Stripe accounts, sending rules, reporting illegal content, complaints and the data processing agreement. New complaints address: [email protected].

  • Version 0.9in force from 28 July 2026 to 28 September 2026

    First, short version of the terms from the private beta period.