Privacy & cookies
1. Controller and contact
AICaseFit, as AI Case Fit Address for correspondence and complaints: Email: hello@aicasefit.com. We are the controller of personal data we process to operate AI Case Fit. Contact the email above for privacy questions and rights requests.
2. Data, purposes and legal bases
| Idea and report | Your description, optional answers, selected language, AI assessment and generated report are processed to provide the requested check or report and take steps before a purchase (GDPR Article 6(1)(b)). Avoid personal data and confidential information in your idea. |
|---|---|
| Orders and support | Email, order ID, payment/session references, status and correspondence support payment handling, delivery, complaints and customer service (Article 6(1)(b)); records required by tax/accounting law are kept under Article 6(1)(c). We do not receive full payment-card details through our application. |
| Quality and security | Completed free-check descriptions, answers and results are saved to investigate quality issues and improve the check. Technical logs may include IP addresses, request details, timestamps and errors. We rely on legitimate interests in service quality, security, abuse prevention and establishing or defending claims (Article 6(1)(f)), subject to your rights and interests. |
| Optional analytics | With your consent, Google Analytics processes technical/browser information, page-use data and cookie identifiers to measure website usage (Article 6(1)(a)). Rejecting or withdrawing this consent does not prevent you from using the service. |
Your email is used for the order and related support, not automatically subscribed to marketing. Required inputs are necessary to provide the requested functionality; without them we cannot perform that check or deliver that order. Optional answers and analytics consent are voluntary. We do not use the report to make solely automated decisions about you with legal or similarly significant effects.
3. Who receives data
Only data needed for the relevant purpose is shared. Our service uses these providers when the corresponding feature is enabled:
- TypeSafe AI / Jev: idea descriptions, answers and feature text for classification and scoring.
- OpenAI: descriptions, answers and analysis context for full-report generation. Web research may disclose relevant search terms to search/data providers; do not submit secrets.
- Stripe / Link: email, order references and transaction data for checkout, fraud prevention, transaction support and, where applicable, merchant-of-record services. Stripe/Link also processes data under its own privacy notices.
- Resend: recipient email and report-message content; generated reports may be included as attachments.
- Google Analytics: optional analytics after consent. We do not intentionally send your idea or email as analytics events.
- Cloudflare Turnstile: when enabled, technical/browser and network data for bot protection.
- Hosting, infrastructure and email-service providers; professional advisers or authorities where needed for legal obligations, support or claims.
Some providers may process data outside the European Economic Area. Applicable transfer mechanisms depend on the recipient and location, including an adequacy decision where applicable or EU standard contractual clauses and supplementary safeguards where required. Contact us for information about the mechanism and safeguards relevant to your data, or to request an available copy.
4. How long data is kept
We keep identifiable data only for as long as needed for its purpose: idea/check records for necessary quality review and troubleshooting; order and report records for delivery, support and applicable claims periods; legally required accounting records for the applicable statutory period. Correspondence and security logs are retained according to the time needed to resolve the matter or incident and any applicable legal retention duty. Records needed for an actual dispute may be preserved until its resolution. These are purpose-based criteria, not a promise of automatic deletion on a fixed date. You may request deletion; we may retain the limited records that law or a valid overriding basis requires.
5. Cookies and browser storage
Google Analytics is blocked until you choose Accept analytics. Reject analytics is equally available. Use Cookie settings on the home page to change your choice. If Analytics is not configured, it does not load.
| Consent preference | aicasefit.analytics-consent.v1 in local storage records your accept/reject choice and its date for up to 180 days, then the choice is requested again. It is used to honour your preference. |
|---|---|
| Idea draft | aicasefit.draft in session storage keeps the draft in the current browser tab to recover it after a reload. It normally ends with that tab’s session; browser session restoration can preserve it. |
| Analytics cookies | Google’s _ga and _ga_* identifiers may be set after consent. Our tag configures a maximum cookie lifetime of 180 days without automatic extension. The consent choice and Google’s server-side data retention are separate. |
| Payment and security | Stripe/Link and, when enabled, Cloudflare may use storage or technical checks necessary for checkout, fraud prevention and security. Their exact use depends on the payment and security features you use; see their notices below. |
Withdrawing analytics consent stops subsequent loading, disables the tag, removes accessible first-party Analytics cookies and reloads the page to remove the running Google script. It does not undo prior lawful processing or automatically erase data already received by Google. Browser controls can also delete or block storage; blocking essential storage may affect the service.
6. Your rights
Where applicable, you may request access, rectification, erasure, restriction and portability of your data, and object to processing based on legitimate interests. You may withdraw consent at any time without affecting the lawfulness of earlier processing. Contact hello@aicasefit.com; we may ask for proportionate information to verify the request. You may complain to the Polish supervisory authority, Prezes Urzędu Ochrony Danych Osobowych, or another competent authority.
7. Provider information and updates
TypeSafe · OpenAI · Stripe · Resend · Google · Cloudflare.
We update this notice when our processing changes. The version date appears at the top. Where new processing requires consent, updating this page alone does not constitute your consent.