Privacy Policy

1. Introduction and scope

This Policy applies to personal data processed when you register, subscribe, use AI consultations, upload documents, or otherwise interact with the service.

By using the service, you confirm that you have read this Policy. Where separate consent is required by applicable law, we will request it before processing.

This Policy does not apply to third-party websites or services linked from our platform.

2. Data controller

The data controller for personal data processed through AdvisorAI is Artem Buduchev.

Privacy and data subject requests: manager@advisorsai.online

3. Personal data we collect

Account and identity data: email address, name (if provided), authentication tokens, session logs, and account preferences.

Usage and content data: consultation messages, prompts, AI responses, uploaded documents you choose to store, feature usage metrics, and technical logs (IP address, browser type, device identifiers, timestamps).

Billing data: subscription status, transaction identifiers, billing history, and limited payment metadata. Full payment card details are processed by Stripe and are not stored on our servers.

Communications: support correspondence and feedback you send to us.

4. Purposes and legal bases

We process personal data to: provide and maintain the service; authenticate users; deliver AI consultations; manage subscriptions and billing; ensure security and fraud prevention; comply with legal obligations; and improve product quality through aggregated analytics.

Legal bases may include: your consent; necessity for contract performance; legitimate interests balanced against your rights (for example, security monitoring); and compliance with legal requirements under applicable law.

We do not sell personal data. We do not use your conversation content for advertising profiling.

5. AI processing and conversation data

To generate responses, your messages and relevant context (including selected documents and prior conversation history within your account) are transmitted to AI model providers and infrastructure we use to operate the service.

Conversation data is processed solely to fulfill your requests, maintain session continuity, and improve reliability. We apply access controls and contractual safeguards with subprocessors.

You should not submit special categories of personal data (health, biometric, political opinions, and similar) or third-party confidential information unless necessary and lawful. You are responsible for redacting sensitive information where appropriate.

6. Payment processing

Subscription payments on the website are handled by Stripe, Inc. Stripe collects and processes payment information according to its privacy policy and PCI-DSS requirements.

We receive limited transaction data from Stripe sufficient for accounting, support, and fraud prevention.

For payment-related privacy inquiries, you may also contact Stripe through the channels described in Stripe's documentation.

7. Data sharing and international transfers

We may share personal data with: cloud hosting providers; AI model and API providers; Stripe for payments; email delivery services; and professional advisers where required by law.

Subprocessors are bound by data processing agreements with confidentiality and security obligations appropriate to the nature of the processing.

Where data is transferred across borders, we implement safeguards required or customary under applicable law, which may include contractual clauses, adequacy frameworks, or your consent where required.

8. Data retention

We retain personal data for as long as your account is active and as needed to provide the service, resolve disputes, enforce agreements, and comply with legal, tax, and accounting obligations.

Conversation history and uploaded documents are retained according to your account settings and product defaults unless you delete them or request erasure, subject to legal retention requirements.

After account deletion, we may retain anonymized or aggregated data and certain records as required by law or for legitimate business purposes.

9. Your rights

Subject to applicable law, you may have the right to: access your personal data; request correction of inaccurate data; request deletion where no legal basis for retention exists; withdraw consent where processing is consent-based; restrict or object to certain processing; and lodge a complaint with a competent supervisory authority in your jurisdiction.

To exercise your rights, contact us at the email below. We will respond within timelines prescribed by applicable law, typically within thirty (30) days.

We may request identity verification before fulfilling requests to protect your account and other users.

10. Security, cookies, changes and contact

We implement technical and organizational measures including encryption in transit, access controls, monitoring, and security reviews. No method of transmission or storage is completely secure.

We use essential cookies and similar technologies for authentication, session management, and security.

We may update this Policy to reflect legal or product changes. Material updates will be notified via the service or email.

Operator: Artem Buduchev

Privacy inquiries: manager@advisorsai.online