Privacy Policy
Last updated: August 10, 2026
This Privacy Policy explains what information Aivagazina collects, why we collect it and how we keep it safe. This page is maintained by Aivagazina to answer common privacy questions about the platform.
0. Data controller
The controller of your personal data is Aivagazina sp. z o.o., Hoża 86/410, 00-682 Warszawa, Poland.
For any privacy matter, including requests to exercise your rights, contact us at [email protected].
1. Information we collect
Account data you provide during checkout: first and last name, email address and a hashed password.
Pet profile data you choose to enter (name, species, breed, age, health goals) so that our AI tools can personalize their guidance.
Photographs you upload to the AI Pet Photo Analyzer, including any metadata contained in the image file.
The text of the prompts and questions you submit to our AI tools, together with the AI-generated outputs returned to you.
Order and credit-balance data: package size, currency, promo codes, chosen payment method and transaction status.
Technical data: browser type, device, IP address and basic analytics events used to keep the service reliable.
2. How we use your information
To create and secure your account, process credit purchases and deliver AI outputs you request.
To personalize AI recommendations based on your pet profile.
To send transactional emails (order confirmation, bank transfer instructions, password recovery).
To detect abuse, prevent fraud and comply with legal obligations.
3. Legal bases (GDPR)
Contract: to provide the services you purchased.
Legitimate interest: security, fraud prevention and product improvement.
Consent: for optional cookies and analytics (see our Cookie Policy).
Legal obligation: tax, accounting and regulatory record-keeping.
4. Data sharing
We do not sell your personal data.
We share limited data with service providers who help us run the platform (hosting, email delivery, payments) under written data-processing agreements.
We may disclose information when required by law or to protect the rights and safety of our users.
5. Data retention
Account and order data is kept while your account is active and for up to 7 years after closure to meet tax and legal requirements.
Pet profile data is kept until you delete it or close your account.
You can request deletion at any time by writing to [email protected].
5a. International data transfers
AI processing is carried out by third-party model providers that may be located outside the European Economic Area. We currently use Google (Gemini models) accessed through the Lovable AI Gateway.
Where personal data is transferred outside the EEA, the transfer is covered by the European Commission's Standard Contractual Clauses together with additional technical safeguards such as encryption in transit.
You can request a copy of the safeguards we rely on by writing to [email protected].
5b. AI processing and model training
We do not use your data or your pet's data to train AI models.
Prompts, uploaded photographs and generated outputs are sent to the model provider only to produce the result you requested, and our providers are contractually prohibited from using them for training.
5c. Automated processing
AI outputs are informational suggestions only. They do not constitute automated decision-making producing legal effects concerning you or similarly significantly affecting you within the meaning of Article 22 GDPR.
You always decide whether and how to act on an AI suggestion, and no eligibility, pricing or account decision is made automatically about you.
6. Your rights
You can access, correct, export or delete your personal data, and object to certain processing.
Where processing is based on your consent, you can withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
To exercise any right, email [email protected]. We respond within one month, as required by the GDPR.
You may also lodge a complaint with your local data-protection authority or with our supervisory authority: Prezes Urzędu Ochrony Danych Osobowych (PUODO), ul. Stawki 2, 00-193 Warszawa, Poland.
7. Security
Data is transmitted over HTTPS and stored on managed infrastructure with encryption at rest.
Access to production data is limited to authorized personnel on a need-to-know basis.
8. Contact
Questions about this policy: [email protected].