🔐
Trust Center
How we keep your data safe, which AI models we use, and our commitments to privacy and compliance.
At a Glance
✓ GDPR Compliant
✓ No training on your data
✓ Data deleted after 90 days
✓ SSL / TLS everywhere
✓ Stripe-secured payments
⏱ 99.9% uptime target
AI Models We Use
We keep your input and the result for up to 90 days to run the service, prevent abuse and, if you're signed in, show your history. They are processed by the AI providers listed in our Privacy Policy. We don't sell them.
| Provider | Model | Used For | Data Retention |
|---|---|---|---|
| Cerebras | GPT-OSS-120B, Qwen 3, Llama 3 | Primary text generation — free & Pro | Not retained for training (Cerebras API policy) |
| OpenAI | GPT-4o-mini, Whisper, TTS | Fallback text generation + transcription & voice | Not retained for training; 30-day API policy |
| Gemini 2.5 Flash | Text generation + vision/image analysis | 30 days (Google policy) | |
| Imagen 4 | Image generation | 30 days (Google policy) | |
| Anthropic | Claude | Long-form writing tools and Czech, Slovak and Polish output (every plan) | Not retained for training (Anthropic API policy) |
| Mistral | OCR + document models | Document tools (OCR, PDF summarizer, contracts) | Not retained for training |
| Conductor router | Kimi, DeepSeek, Grok, Groq | Selected lanes — code, live data, fast mode | Per provider API policy — see Privacy Policy |
| Self-hosted (Hetzner, EU) | Open-weights LLM + bge-m3 embeddings | Chatbot, search embeddings + fallback inference | Not stored |
The table above covers the AI models we use. For the complete list of every sub-processor — payments, email, analytics, error monitoring and hosting — see our Privacy Policy → Data Sharing.
Data Handling
- AI output logs auto-deleted after 90 days
- Passwords hashed with bcrypt (WordPress standard)
- No selling of personal data to third parties
- Email used only for account & billing
- Cookie consent required (EU visitors)
- Export or delete your data anytime via /account/
Infrastructure & Uptime
- Hosted on Hetzner (Germany, EU) — GDPR-compliant infrastructure
- Cloudflare CDN & DDoS protection — 300+ PoPs globally
- Cloudflare Web Application Firewall with custom rule set
- Off-site daily database + media backups (Cloudflare R2)
- TLS 1.3 on all endpoints (HSTS + auto-renewing certificates)
- 99.9% uptime target — see /status/ for current incidents
Compliance
- GDPR (EU 2016/679)
- Czech Data Protection Act (PDPA)
- Stripe PCI DSS Level 1 (payment processing)
- Cookie consent banner (EPRIVACY/PECR)
- Terms of Service: /terms-of-service/
- Privacy Policy: /privacy-policy/
Security Practices
- Rate limiting on all API endpoints (5 req/min/IP)
- Nonce validation on all forms & AJAX calls
- XSS protection via WordPress escaping functions
- SQL injection prevented by $wpdb::prepare()
- Responsible disclosure: [email protected]
Questions about data privacy, security, or compliance? We respond within 24 hours.
Contact Us