Service Provider / Operator: Brillnet Piotr Adamski, ul. Henryka Sienkiewicza 73/6, 90-057 Łódź, Polska, NIP 7321779060, REGON 101551294
Service contact: kontakt@wm-admin.pl
Privacy and breach contact: privacy@brillnet-app.com
Website: wm-admin.pl
Version: 2026-10-12-beta.2
This is an informational translation. The Polish version is binding.
1. Permitted purpose
The Service is intended for lawful administration of residential communities by authorised organisations and individuals. Access to data must follow from the person's role, duty or the Customer's instructions.
2. Prohibited use
The following are prohibited in particular:
- unlawful content or content that infringes personal rights, copyright, confidentiality or data protection;
- impersonation, false authority or adding a Community without the right to do so;
- attempts to access another tenant's data or circumvent roles, multi-factor authentication (MFA), limits or audit mechanisms;
- scanning, penetration testing, automated load generation or reverse engineering without Brillnet's written consent;
- malware, phishing, spam or bulk unsolicited messages;
- sharing accounts, tokens, MCP keys or export links;
- using API/MCP access outside its assigned scope or for sensitive operations that the interface deliberately blocks;
- unjustified collection of PESEL identification numbers, health data, convictions or children's data;
- storing passwords, secrets, full payment card details or private keys in document and request fields;
- automatically publishing optical character recognition (OCR) results, KSeF/JPK data, charges, debt collection decisions or voting results without the required human review.
3. Integrations and automation
The Customer uses only credentials it owns or that have been properly entrusted to it. Automation must respect limits, idempotency and the audit log. Integrations must not be used to collect data in bulk unrelated to the managed Community.
4. Sensitive data
If the purpose can be achieved without special categories of personal data, such data must not be entered. Otherwise, the Customer documents the legal basis and limits fields, roles, retention and export. Support requests must contain anonymised or minimum necessary data.
5. Response
Brillnet may reject an operation, restrict a key, account or tenant, and secure evidence. Where the risk permits, the Customer will receive notice and a period to remedy the issue. A serious threat, an infringement affecting another tenant or a legal requirement may require immediate action.
6. Reporting
Report abuse or vulnerabilities privately to privacy@brillnet-app.com. Do not independently extend testing beyond the minimum necessary to document the issue.
Contact, content notices and content decisions
For content stored at a customer’s request, we apply the DSA notice and action procedure. A closed organisation space is not intended to disseminate customer content to the public. We impose no general obligation to monitor all content.
Authorities and service recipients can contact a human electronically: WM Administrator — kontakt@wm-admin.pl. Communication is accepted in Polish and English. Reporting illegal content or challenging a decision requires neither an account nor a fee. A notice should explain the alleged illegality, identify the exact location (such as a URL or object and organisation identifiers), give the notifying person’s name or entity name and email, and state a good-faith belief that the information is accurate and complete. Identity details may be omitted under the exception in DSA Article 16(2)(c) for offences referred to in Directive 2011/93/EU Articles 3–7. Do not send third-party data or a copy of the material where a reference is sufficient.
Where electronic contact details are provided, we acknowledge receipt without undue delay and communicate the decision and available remedies. We assess notices promptly, diligently, objectively and without arbitrariness. Measures are proportionate: removing or restricting specific content, functionality or access as required. In cases covered by DSA Article 17, we give the recipient a statement of reasons no later than when the restriction is imposed, including the facts, legal or contractual basis, scope, duration, any use of automation and ways to challenge the decision. A complaint may be submitted free of charge to the same address and is reviewed by a human. Access to courts and complaints to the competent coordinator remain available. Suspected crimes threatening a person’s life or safety are handled under DSA Article 18; an authorised human decides on the required notification.
> Contact details and domains in this presentation were updated on 2026-09-08. The original document and previous acceptances remain unchanged.