GDPR Compliance

Last updated: July 1, 2026

1. Compliance by architecture

The most reliable way to comply with the GDPR is to minimize the data you process. AiLoveKit's design takes this to the logical conclusion: the document content you work with never reaches our systems. All tool operations execute in your browser, on your device.

For file contents, therefore, you are not our data subject - we are not a processor of your documents at all. This is not a policy promise; it is an architectural property you can verify in the Network tab of your browser.

2. What personal data does exist

• Server access logs - IP address and request metadata for serving the static website (legitimate interest: security and operation).
• Contact messages - what you choose to send us via the contact page (consent / pre-contractual measures).
• Local preferences - theme and tool handoff state, stored only in your browser.

3. Your rights under the GDPR

• Right of access (Art. 15) - ask us what we hold about you.
• Right to rectification (Art. 16) - correct inaccurate data.
• Right to erasure (Art. 17) - request deletion; local browser data you can erase yourself at any time.
• Right to restriction (Art. 18) and data portability (Art. 20).
• Right to object (Art. 21) - including to processing based on legitimate interests.
• Right to lodge a complaint with your national supervisory authority.

4. Retention

Server logs are kept only as long as needed for security and operations. Contact messages are kept until your request is resolved. No document content is retained because none is ever received.

5. International transfers

Where infrastructure providers operate outside the EEA, transfers rely on the safeguards recognized by the GDPR (standard contractual clauses or adequacy decisions).

6. Data Protection contact

Exercise any right by writing to privacy@ailovekit.com. We respond within the statutory one-month period.