Trust center
Everything your legal and IT teams will ask
Four pages and one table. Copy what you need into your vendor questionnaire, or send the link. If something is missing, ask and I will add it here for the next person.
Last updated:
The four pages
Pricing
Rates in USD, EUR and PLN, what is free, spending caps, invoices from Poland.
How I work
Six rules, three AI modes, hours in CET, no SLA, no subcontractors, NDA and DPA.
Security
Devices, secrets, access, how I build, how to report a vulnerability.
Privacy
What is collected and why, processors, retention, your rights, one-click opt-out.
Facts for your questionnaire
| Question | Answer |
|---|---|
| Legal entity | Przemysław Zalewski, sole proprietorship, ul. Tęczowa 31A/56, 53-601 Wrocław, Poland |
| Registers | NIP 8952144360 · REGON 367652014 · D-U-N-S 438385453 · CEIDG |
| VAT status | VAT-registered in Poland; B2B invoices in PLN, EUR or USD |
| Who does the work | One person, no subcontractors; substitution only by mutual agreement |
| Data location | Cloudflare (EU where the product allows it), PostHog EU (Frankfurt), Resend EU (eu-west-1) |
| Access to your systems | Only through accounts you control, least privilege; revocable in one click; returned and deleted at the end |
| Devices | Full-disk encryption, auto-lock, updates applied as they ship, a password manager and MFA on every account, a separate browser profile per client |
| AI tools | Three modes to choose from: no AI, AI-assisted (default), AI engineering; training off; secrets, customer data and logs never reach a model without separate approval |
| Response time | A full reply within 24 hours on working days, personally; weekend messages by Monday noon; no SLA, no on-call |
| Vulnerability reports | security.txt (RFC 9116) and email; a reply within 24 hours on working days |
| Agreements | NDA (yours or mine), a data processing agreement (DPA) when I touch personal data, a B2B contract with a scope and a spending cap per task |
| Liability insurance | On request, priced into the rate for that engagement |
Print this page or save it as PDF with your browser; the layout is prepared for it. If your questionnaire needs a signature, send it over and you get it back within 24 hours on working days.
Processors and data location
| Processor | What for | Where | Transfer basis |
|---|---|---|---|
| Cloudflare, Inc. | Hosting of every page and tool (Workers), databases and storage (D1, KV, R2), AI Gateway, Workers AI, inbound email routing, access control for admin panels | Global edge network; data stores in the EU where the product allows it | EU-US Data Privacy Framework and SCCs |
| PostHog, Inc. | Product analytics: page views, clicks, Web Vitals, errors, session replays with inputs masked | EU cloud (Frankfurt) | None: data stays in the EU |
| Resend, Inc. | Transactional email: confirmations, report links, newsletter broadcasts | EU region (eu-west-1) | SCCs in the Resend DPA |
| Anthropic, PBC | Language models (Claude) behind the AI tools, called through Cloudflare AI Gateway; API data is not used for training | United States | SCCs in the Anthropic DPA |
| Cal.com, Inc. | Booking the free 30-minute call: your name, email and the time you pick | United States | SCCs in the Cal.com DPA |
| Google LLC | Email correspondence (Gmail) and video calls (Google Meet) | EU and United States | EU-US Data Privacy Framework |
| GitHub, Inc. | Public source code of this site and the agent skills; your repositories only when you invite me | United States | EU-US Data Privacy Framework |
| wFirma.pl | Invoices and bookkeeping for clients (company name, address, tax id) | Poland | None |
The same list, with retention periods and your rights, is on the privacy page.
Open to inspection
- The source of the main site is public: github.com/Ciunkos/ciunkos.com.
- The agent skills are open source under MIT: github.com/Ciunkos/skills.
- Vulnerability reports: security.txt and the security page.
- A machine-readable summary of what I do lives at ciunkos.com/hire/llms.txt.
- Company register entry: the CEIDG link in the footer. D-U-N-S number in the table above.
FAQ
Questions
Can I get this as a PDF?
Will you fill in our security questionnaire?
Do you have liability insurance?
Where is the data?
Who will actually do the work?
Let’s find out in 30 minutes
A free 30-minute call. You bring the problem, I bring questions. Want a number first? The configurator shows hours, a price range and the start date.
If I am the wrong person I will say so on the call and point you to someone better.
or write to ciunkos@gmail.com
After you book: a calendar invite, then the call, then the scope in writing within 24 hours. Nothing else to fill in.
My pledge
- Reply within 24 hours. I reply within 24 hours on working days, personally, not a bot. Weekend messages: by Monday noon.
- Late means free. If I am late, the first hour of work is free. You do not have to ask.
- Scope in writing within 24 hours. A free 30-minute call with no company deck, then the scope and the price in writing within 24 hours. You decide.
- The person who does the work. You talk to the person who does the work. No sales layer, no handoff.
- Follow-up only with news. I follow up only when I have something new for you. Never a "did you see my offer".
- Honest "not a fit". If I am not the right person, I say so on the call and point you to someone who is.
Calls this week · work starts 2 November 2026 · B2B contract or employment · Wrocław, Poland (CET), remote