Privacy Policy
and Cookies
At Aithor.io, we value your privacy and are committed to protecting the personal information you share with us. This Privacy Policy describes how we collect, use and protect your data, as well as your rights in relation to that information.
1. Identification of the Data Controller
In accordance with the provisions of Regulation (EU) 2016/679 (RGPD), the Organic Law 3/2018 (LOPDGDD) and Law 34/2002 (LSSI-CE), it is reported that the controller of the personal data collected through this Platform is:
- Responsible: Digitup Studio S.L.
- CIF: B88138533
- Registered Address: Calle Alcalá 211, 28028 Madrid
- Contact email: [email protected]
- Website: https://aithor.io
Digitup Studio S.L. acts as responsible for all personal data processed through the website and services offered by Aithor.io, including its mobile versions, integrations with messaging (such as Telegram or WhatsApp) and associated subscription services.
2. Data we collect
The personal data we collect can be classified into the following categories:
2.1. Data provided directly by the User
- Name or alias.
- E-mail address.
- Payment information: Stripe and PayPal directly manage this data (Aithor never accesses the card numbers).
2.2. Data generated by the use of the service
-
Prompts, written messages, uploaded files (PDF, images, etc.).
-
Results generated by AI models on user demand.
-
Usage history and function settings (favorites, folders, language, etc.).
2.3. Technical and analytical data
-
IP address.
-
Browser type and version, operating system, device used.
-
Schedule and duration of sessions.
-
Navigation data (interaction with buttons, clicks, loading times).
-
Cookies (see section 8).
No solicitamos ni tratamos de forma intencionada datos especialmente protegidos (como salud, religión, ideología, etc.). En caso de que el Usuario introduzca voluntariamente ese tipo de datos, será bajo su propia responsabilidad
3. Purposes of Processing
The User’s personal data will be processed for the following purposes:
- Manage user registration and authentication on the Platform.
- Enable the use of contracted artificial intelligence tools (essays, chats, PDFs, images, exams, presentations, etc.)
- Analyze usage data for the continuous improvement of the Platform.
- Manage payments and billing through secure gateways (Stripe/PayPal).
- Prevent fraud, unauthorized access, or misuse.
- Respond to support or contact requests submitted by the User.
- Send technical, legal, or service-related information (e.g., changes to the Terms).
- Send newsletters, offers, or promotions, only if the User has given explicit consent.
4. Legitimacy of the Treatment
The processing of personal data is based on the following legal bases:
-
Execution of a contract: to provide you with the requested services (Art. 6.1.b RGPD).
-
User consent: for commercial communications or use of cookies not required (Art. 6.1.a).
-
Legitimate interest: for maintenance of security, performance analysis and fraud prevention (Art. 6.1.f).
-
Compliance with legal obligations: in case of request by authorities (Art. 6.1.c).
5. Data Retention
The data will be kept for the following periods:
-
As long as there is a contractual relationship with the User.
-
As long as the User keeps his/her account active.
-
Until the User requests their deletion, or once the purposes for which they were collected have been fulfilled.
-
Anonymous and aggregated browsing data may be retained indefinitely for statistical purposes.
The User may request the deletion of his/her data at any time (see section 7).
6. Communication of Data to Third Parties
Digitup Studio S.L. does not transfer, sell or rent personal data to third parties for commercial purposes.
We only share data with technology providers whose intervention is necessary to provide our services. They act as data processors, under contract in accordance with art. 28 of the GDPR:
-
Google Firebase (infrastructure, databases, authentication).
-
Stripe and PayPal (payment processing).
-
OpenAI, Google Gemini, Mistral, DeepSeek, Anthropic (generative AI).
-
Mailgun (sending automatic emails).
-
Google Analytics, Hotjar, Yandex Metrica (navigation analysis).
In case a supplier operates from outside the European Economic Area, it shall be ensured that it offers an equivalent level of protection through standard contractual clauses or other safeguards recognized by the GDPR.
7. User Rights
The User may exercise the following rights at any time:
-
Access: to know what data we process about him/her.
-
Rectification: to correct inaccurate or incomplete data.
-
Deletion: request the deletion of your data when it is no longer needed.
-
Limitation: request that we limit the processing of your data.
-
Opposition: oppose the processing based on legitimate interest.
-
Portability: receive your data in a structured and transferable format.
You may exercise these rights by writing to [email protected] and indicating the right you wish to exercise. A copy of your identity document may be required if it is necessary to verify your identity.
You can also file a complaint with the Spanish Data Protection Agency: www.aepd.es www.aepd.es
8. Cookies Policy
Aithor uses cookies and similar technologies to collect information and improve the User’s experience.
Types of cookies:
-
Technical (mandatory): necessary for basic operation.
-
Analytics: for usage statistics (Google Analytics, Hotjar).
-
Personalization: to remember user settings.
-
Advertising: currently not active, but will be included if campaigns are launched.
When accessing for the first time, the User will be able to accept, reject or configure non-essential cookies through the consent panel. You can change your preferences at any time from your browser or by accessing the cookie notice at the bottom of the page.
More details in our specific policy: https://aithor.io/cookies
9. Security Measures
Digitup Studio S.L. has adopted the necessary technical and organizational measures to ensure the confidentiality, integrity, availability and resilience of personal data, including:
-
Encryption of data in transit (SSL/TLS).
-
Secure authentication through Firebase Auth.
-
Database and server access protection.
-
Continuous monitoring and anti-fraud policies.
-
Automatic backups.
10. Modifications to this Policy
Digitup Studio S.L. reserves the right to modify this Privacy and Cookie Policy at any time. Any substantial change will be notified to registered Users by email or within the Platform.
The updated version will always be available on the website, and the continued use of the service after the changes will imply acceptance of them.
11. Contact
For any questions, queries or exercise of rights you can contact us at:
📧 [email protected]
📍 Digitup Studio S.L., Madrid, España