Privacy Policy

1. Controller

The controller of the business account data is Support Global Goods s.r.o., ID 21983330, registered office Kojetínská 3157/55, Přerov I-Město, 750 02 Přerov.

Privacy contact: support@ai247.world.

2. Roles and responsibilities

Your customers' data: the business is the controller and AI 247 is the processor under Article 28 of Regulation (EU) 2016/679 (GDPR); the processing agreement sets the scope.

Account data of the business and its staff: AI 247 is the controller.

3. What we process

Account data: company name, contact e-mail, plan and language settings.

Communication content: WhatsApp Business messages, e-mails, AI chat messages, bookings and calendar events.

Technical logs: access time, browser type and the identifiers needed for security and abuse detection.

4. Purpose and legal basis

Performance of the contract under Article 6(1)(b) GDPR — so we can answer customers and manage bookings.

Legitimate interest under point (f) — protecting the service from abuse and keeping it secure.

Consent under point (a) where the law requires it; consent may be withdrawn at any time.

5. Processing by an AI model

Conversation content is processed by a language model so that a reply can be produced following the business's rules.

The provider selects models and settings used solely to deliver the service. It does not use the data for general model training or sell it to third parties without consent.

6. Sub-processors

Hosting and database, the language-model provider, Meta (WhatsApp Business), Google and Microsoft (e-mail and calendar), the e-mail delivery provider and the domain registrar.

We keep the list current and notify changes by e-mail; the business may object on reasonable grounds.

7. Transfers outside the European Union

The service is offered to businesses in the 27 EU countries and in the United Arab Emirates.

Where processing leaves the EU, we rely on the European Commission's standard contractual clauses or an adequacy decision, supported by technical safeguards.

8. Retention

Account data for the duration of the contract. Conversations and bookings until the business deletes them, otherwise within 30 days after cancellation.

Technical logs for at most 12 months. Accounting records for the period required by law.

9. Your rights

Access, rectification, erasure, restriction, portability, objection and withdrawal of consent. We handle requests within 30 days.

You may complain to: Czech Data Protection Authority, Pplk. Sochora 27, 170 00 Prague 7, www.uoou.cz.

10. Security

Encryption in transit and at rest, least-privilege access, separation of each business's data, access logging and regular configuration checks.

A security breach affecting your data is notified to you without undue delay.

11. Children

The service is not directed at persons under 15 and we do not knowingly process their data.

12. Changes

The new version is published at this address; significant changes are announced by e-mail.