Skip to main content
← ailoft.app

Privacy Policy

Last updated: June 2026

1. Controller

The controller is DEBRUSK s.r.o., Company ID: 09999973 VAT ID: CZ09999973, Mukařovského 1985/5, 155 00 Praha 5, Czech Republic. Contact: privacy@ailoft.app.

2. What data we process

  • Account data: e-mail, name, locale, login and session data.
  • AI Studio data: prompts, uploaded reference files, generated outputs, credit transactions and video job status.
  • Catalog and Creator data: submitted product descriptions, uploaded review files, public provider links and lead form messages.
  • Technical data: IP address, user agent, logs, security and audit events.
  • Performance telemetry (AI Studio pages only): if you accept analytics cookies, we record Core Web Vitals measurements (LCP, INP and CLS, including the LCP timing breakdown), the page path, the language, a coarse mobile/desktop bucket and your connection class. These records contain no IP address, no user agent string and no identifier of any kind, so they cannot be linked to you or to one another, and they are deleted after 30 days.
  • Traffic counting (all pages): we record the page path, the language, the referring website, the country your visit came from and a coarse mobile/desktop bucket, together with a hash that changes every day. The country is derived from your IP address at the moment of the visit and the address itself is discarded immediately; it is never written down. These records contain no IP address, no user agent string, no cookie and no account identifier, and they cannot be linked across days. They are kept for 90 days and are used only to see how many people reach the site and where they arrive from.
  • Payment records: Polar order/customer identifiers, billing e-mail/name, amount, currency, tax/accounting status and fulfillment events needed to deliver credits or access.

3. Purposes and legal basis

  • Providing the service and account features — contract performance.
  • Security, abuse prevention, moderation and diagnostics — legitimate interest.
  • Accounting and tax obligations — legal obligation.
  • Marketing or optional analytics — consent where required.

4. AI and third-party providers

AI generation may be processed by selected AI providers. Do not upload confidential or sensitive data unless you are allowed to do so. Payment processing is handled by Polar as merchant of record; AILoft does not store full card numbers.

5. Retention

Account data is kept while your account is active and for a reasonable legal limitation period after deletion. Accounting/payment records are kept according to Czech legal obligations. Logs and temporary uploaded files are kept only as long as needed for security, review or service delivery.

6. Your rights

You can request access, correction, deletion, portability, restriction or objection. You may also lodge a complaint with a data protection authority. Contact: privacy@ailoft.app.

7. Cookies and local storage

We use only the storage needed to run AILoft and optional features you enable:

  • NEXT_LOCALE — keeps your selected language.
  • Authentication/session cookies keep you signed in and protect the e-mail login flow.
  • cookie_consent / cookie_consent_detail — remembers your cookie preference where the banner is shown.
  • Browser localStorage may be used by standalone agents and sandbox previews to remember local UI settings, language, sandbox provider settings or user-entered provider keys.

Optional analytics or marketing cookies are used only if enabled.