Privacy Policy

Last updated: February 21, 2026

1. Data Controller

AI Transformers ("we", "us", "our") operates the website aitransformers.eu. We are the data controller for your personal data processed through this platform.

Contact: michal@aitransformers.eu

2. Data We Collect

We collect the following categories of personal data:

  • Account data: email address, display name, hashed password
  • Profile data: industry, role, company size, maturity assessment results
  • Usage data: pages visited, features used, AI chat conversations
  • Payment data: processed by our payment provider (Lemon Squeezy / Stripe). We do not store credit card details.
  • Cookies: essential session cookies and optional analytics cookies (see Section 7)

3. Legal Basis for Processing

Under GDPR Article 6, we process your data on the following bases:

  • Contract performance: to provide our platform services (account, subscription, AI advisor)
  • Consent: for marketing emails, analytics cookies, and newsletter
  • Legitimate interest: for security, fraud prevention, and service improvement

4. How We Use Your Data

  • Provide and maintain our platform services
  • Personalize content recommendations based on your maturity assessment
  • Process subscription payments
  • Send transactional emails (account verification, password reset)
  • Send marketing emails (onboarding sequence, newsletter) with your consent
  • Analyze platform usage to improve our services

5. Data Sharing

We share data with the following third-party processors:

  • Lemon Squeezy / Stripe: payment processing
  • Resend: transactional and marketing emails
  • PostHog: analytics (when you consent to analytics cookies)
  • Anthropic: AI chat functionality (conversation content is processed by Claude API)

We do not sell your personal data to third parties.

6. Your Rights Under GDPR

As an EU data subject, you have the right to:

  • Access: request a copy of your personal data
  • Rectification: correct inaccurate personal data
  • Erasure: request deletion of your data ("right to be forgotten")
  • Data portability: export your data in a machine-readable format
  • Withdraw consent: opt out of marketing emails at any time
  • Object: object to processing based on legitimate interest
  • Restrict processing: limit how we use your data

To exercise any of these rights, contact us at michal@aitransformers.eu. You can also delete your account directly from your profile settings.

7. Cookies

We use the following types of cookies:

  • Essential cookies: required for authentication and platform functionality. Cannot be disabled.
  • Analytics cookies: PostHog analytics to understand site usage. Only set with your explicit consent.

You can manage your cookie preferences at any time using the cookie consent banner that appears on first visit.

8. Data Retention

  • Account data is retained while your account is active
  • Upon account deletion, all personal data is permanently erased within 30 days
  • Analytics data is anonymized after 12 months
  • Payment records are retained as required by law (typically 7 years for tax purposes)

9. Data Security

We implement appropriate technical and organizational measures to protect your data, including: encryption in transit (TLS), encrypted passwords (bcrypt), httpOnly session cookies, rate-limited authentication, and regular security reviews.

10. International Transfers

Some of our service providers may process data outside the EU/EEA. In such cases, we ensure adequate safeguards are in place (Standard Contractual Clauses or equivalent).

11. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes via email or a prominent notice on our platform.

12. Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local data protection supervisory authority.