This policy explains what personal data AiDact collects when you use our service, why we collect it, how long we keep it, and your rights under the EU General Data Protection Regulation (GDPR).
AiDact is a compliance documentation service operating at aidact.eu. We generate personalised EU AI Act compliance documentation for organisations based on information they provide. For the purposes of GDPR, AiDact is the data controller for personal data collected through this service.
You can contact us at hello@aidact.eu with any privacy-related queries.
When you use AiDact, we collect the following information:
We do not collect special category data (health, biometric, political, religious data) and our intake form is designed to avoid this. Please do not submit such data.
Your data is used solely to:
We do not use your data for marketing, profiling, or advertising purposes. We do not sell your data to third parties.
We use the following sub-processors to deliver our service:
All processors are contractually bound to process your data only as instructed and in accordance with GDPR.
We retain your order data (email, organisation name, generated compliance content) for 12 months from the date of purchase. After this period, order records are deleted from our storage.
Stripe retains payment records in accordance with their own retention policy and applicable financial regulations.
Your data may be processed outside the European Economic Area (EEA) by our sub-processors (Anthropic, Stripe, Resend, and Vercel are US-based companies). Where this occurs, transfers are made under the EU-US Data Privacy Framework or Standard Contractual Clauses as appropriate.
Under GDPR, you have the following rights regarding your personal data:
To exercise any of these rights, email us at hello@aidact.eu. We will respond within 30 days.
You also have the right to lodge a complaint with your national data protection authority. In Ireland, this is the Data Protection Commission.
AiDact does not use tracking cookies or analytics. We do not use Google Analytics, Facebook Pixel, or any similar tracking technology. The only cookies present are those set by Stripe during the payment process, which are necessary for the transaction to function.
The compliance documentation generated by AiDact is a starting point based on information you provide. It does not constitute legal advice and does not guarantee compliance with the EU AI Act or any other regulation. We strongly recommend reviewing all generated documents with qualified legal counsel before relying on them for regulatory purposes.
We may update this privacy policy from time to time. The date at the top of this page will reflect the most recent update. Continued use of the service after changes constitutes acceptance of the updated policy.