Privacy Policy
Version 2.0 — Effective date: 23 July 2026
Controller
AiActs is operated by Aimperia LLC, a company registered in Georgia (Identification Number 400470806), Tbilisi, Nadzaladevi district, Erosi Manjgaladze street, N 75a.
Contact for any privacy question or request: hello@aiacts.ai
Processing is governed by the Law of Georgia on Personal Data Protection. Where you are located in the EU or EEA, the GDPR may also apply to this processing.
What we collect
- Account data: email address, company name, job role.
- Assessment data: the information you enter about your AI systems, and the
- Technical and security data: IP address, user agent, endpoint accessed,
- Support data: your messages to us and anything you attach to them.
- Consent records: what you consented to, when, by what method, and the
- Billing data: handled by Paddle, not by us. See "Payments" below.
reports generated from it.
security events, application logs.
document version.
We do not collect special categories of personal data and do not ask for them.
Why we process it, and on what basis
| Purpose | Basis |
|---|---|
| Providing the service, generating reports, managing your account | Performance of a contract with you |
| Security, abuse prevention, audit logs | Legitimate interest |
| Transactional email (verification, password reset) | Performance of a contract |
| Analytics | Your consent |
| Marketing email | Your consent |
| Keeping records required by law | Legal obligation |
We do not use your data for advertising or profiling.
Who we share it with
We do not sell your data. We use the service providers listed in the External Processors register: hosting, transactional email, LLM report generation, application logging, support mailbox, analytics (only after consent), and Paddle for payments.
Payments
Paddle.com is the Merchant of Record for all purchases made through this site. Paddle collects and processes your payment and billing data as a separate controller under its own privacy policy. We never receive or store your full card number or security code.
Where your data is stored
On servers in Georgia. Some processors are located outside Georgia; transfers and safeguards are listed in the External Processors register.
How long we keep it
See the Retention Policy. In short: account and assessment data are kept while your account is active and deleted or anonymised after a valid deletion request, unless we must keep a record for legal, security or accounting reasons.
Your rights
You may request access to your data, correction, deletion, restriction of processing, a copy in portable form, and you may object to processing based on legitimate interest. Where processing is based on consent, you may withdraw it at any time without losing access to the service.
Write to hello@aiacts.ai. We respond within 30 days.
You may also lodge a complaint with the Personal Data Protection Service of Georgia, or, if you are in the EU/EEA, with your local supervisory authority.
Cookies
Necessary storage is used for login, security and service operation. Analytics and marketing cookies are optional and are not set unless you accept them in the cookie banner. Rejecting them does not restrict access to the service.
Changes
We publish a new version before a change takes effect and record it in Document Versions. Registered users are notified by email of material changes.