GDPR Compliance

Data Controller

Purpose of Data Collection

We collect and process personal data for the following purposes:

• To provide and maintain access to our AI tools and services
• To manage subscriptions, payments, and customer accounts
• To communicate updates, offers, or support-related information
• To improve platform functionality and user experience
• To comply with applicable legal obligations

Legal Basis for Processing

We rely on the following legal bases under Article 6 of the GDPR:

• Contract performance (Article 6(1)(b)) — for delivering services to you
• Legitimate interests (Article 6(1)(f)) — to improve services and protect platform integrity
• Consent (Article 6(1)(a)) — for sending marketing communications
• Legal obligations (Article 6(1)(c)) — for compliance with applicable laws

Categories of Personal Data Processed

• Name, email address, login credentials
• Billing information
• IP address, device and browser data
• Usage data and preferences

Recipients of Personal Data

• Internal employees (as necessary for support or account management)
• Secure third-party service providers (such as payment processors, analytics platforms, hosting providers)

International Transfers

Where data is transferred outside of the EEA, we use Standard Contractual Clauses (SCCs) or rely on other lawful transfer mechanisms to ensure an adequate level of data protection.

Data Retention

We retain your personal data only as long as necessary to fulfill the purposes it was collected for, or to comply with legal obligations.

User Rights Under GDPR

As a data subject, you have the following rights under GDPR:

• Right of access (Article 15)
• Right to rectification (Article 16)
• Right to erasure (Article 17)
• Right to restriction of processing (Article 18)
• Right to data portability (Article 20)
• Right to object (Article 21)
• Right to withdraw consent (where applicable)
• Right to lodge a complaint with your local data protection authority (Article 77)

Requirement to Provide Data

Providing personal data is necessary for service use. Failure to provide required data may limit your ability to access our services.

Automated Decision-Making

We do not engage in automated decision-making, including profiling, that produces legal effects or significantly affects you.

Contact for Data Protection Inquiries

Supervisory Authority

You may contact your local EU Data Protection Authority if you believe your rights have been violated.