Privacy Policy

Effective from: February 4, 2026

1. Data Controller

The data controller is Roman Šlancar, DiS., ID No.: 75717051, with registered office at Bohuslava Martinů 802/9, 602 00, Brno - Stránice, e-mail: info@papagai.net (hereinafter referred to as "Controller").

2. What Data We Process

2.1. During registration and use of the service, we process the following personal data:

First and last name
Email address
Billing information (company name, ID number, VAT number, address)
IP address and technical data about the device and browser
Conversation history within the chatbot
Knowledge base content uploaded by the User

3. Purposes of Processing

3.1. We process personal data for the following purposes:

Providing the service and managing the user account
Processing payments and invoicing
Communication with the User (support, notifications)
Improving and developing the service
Fulfilling legal obligations

4. Legal Basis for Processing

4.1. We process personal data on the basis of:

Performance of a contract – providing the service based on registration and the chosen plan
Legitimate interest – improving the service, preventing misuse, technical security
Legal obligation – accounting and tax obligations
Consent – sending commercial communications (if granted)

5. Data Retention Period

5.1. We retain personal data for the duration of the contractual relationship and further:

Billing data – 10 years after termination of the contract (legal obligation)
Account data – 30 days after account deletion
Conversation history – for the duration of the account, or 30 days after its deletion
Logs and technical data – maximum 12 months

6. Sharing Data with Third Parties

6.1. Personal data may be shared with the following categories of recipients:

Stripe – payment processing (Stripe, Inc., USA, with safeguards under the EU-US Data Privacy Framework)
Hosting service providers (Hetzner, Germany)
AI model providers for processing queries within the chatbot

6.2. We have concluded appropriate data processing agreements with all processors.

7. Transfer of Data Outside the EU

7.1. Some third-party services may process data outside the European Union. In such cases, an adequate level of protection is ensured through standard contractual clauses or adequacy decisions.

8. Your Rights

8.1. As a data subject, you have the following rights:

Right of access to personal data
Right to rectification of inaccurate data
Right to erasure (right to be forgotten)
Right to restriction of processing
Right to data portability
Right to object to processing
Right to withdraw consent to processing
Right to lodge a complaint with the Office for Personal Data Protection (www.uoou.cz)

8.2. To exercise your rights, contact us at info@papagai.net.

8.3. We will respond to your request without undue delay, no later than within 30 days.

9. Data Security

9.1. We protect personal data using technical and organizational measures, in particular:

Data encryption in transit (TLS/SSL)
Secured access to servers
Regular data backups
Restriction of access to personal data to authorized persons only

10. Contact

If you have any questions regarding the protection of personal data, contact us at info@papagai.net.

Last updated: February 4, 2026