AndyAI logo
HomeUse CasesBuildersPricingContactStart for Free

Privacy Policy

Last updated: February 24, 2026

This Privacy Policy explains how AndyAI collects, uses, discloses, and protects personal data when you use our websites, apps, APIs, and related services (the "Services").

1. Data Controller

Controller: AndyAI

Address: 11 Alakuko Road, Ifako Ijaye

Contact: [email protected]

EU/UK Representative (if applicable): [Insert representative details]

Data Protection Officer (if appointed): [Insert DPO contact]

2. Personal Data We Process

  • Account data (name, email, login details, plan type).
  • Billing data (billing address, payment status, transaction metadata).
  • Usage data (logs, device/browser data, feature interactions, diagnostics).
  • Input and Output content submitted through the Services.
  • Support data from tickets, emails, and feedback.
  • Cookie and similar technology data where enabled.

3. Purposes and Legal Bases (GDPR)

  • Provide and operate Services: contract performance (Art. 6(1)(b)).
  • Billing, fraud prevention, and security: legitimate interests (Art. 6(1)(f)) and legal obligations.
  • Customer support and communications: contract and legitimate interests.
  • Product analytics and service improvement: legitimate interests, with safeguards.
  • Marketing communications: consent where required (Art. 6(1)(a)).
  • Compliance, audits, and law enforcement requests: legal obligation (Art. 6(1)(c)).

4. AI Processing and Model Providers

To deliver AI features, we may share Input with trusted infrastructure and model subprocessors acting under contractual controls. We prohibit subprocessors from using your data for unrelated purposes, except where required by law or explicitly disclosed.

We apply minimization and access controls. Do not submit sensitive personal data unless your use case requires it and you have a valid legal basis.

5. International Data Transfers

If personal data is transferred outside the EEA, UK, or Switzerland, we use appropriate safeguards, such as Standard Contractual Clauses (SCCs), UK Addendum, and additional technical and organizational measures where needed.

6. Data Retention

We retain personal data only as long as necessary for the purposes described above, including contractual, legal, accounting, and security needs. Retention periods depend on data type and risk.

7. Data Sharing

We may share personal data with:

  • Cloud hosting, analytics, payment, and support providers.
  • AI model and infrastructure subprocessors needed to provide the Services.
  • Advisors, auditors, and authorities when legally required.
  • Buyers/investors as part of a merger, acquisition, or restructuring.

8. Your Rights (GDPR/UK GDPR)

You may have rights to:

  • Access, correct, delete, or port your personal data.
  • Restrict or object to certain processing.
  • Withdraw consent at any time where processing relies on consent.
  • Lodge a complaint with a supervisory authority.

To exercise rights, contact [email protected]. We may request identity verification before acting on your request.

9. Security

We maintain administrative, technical, and physical safeguards designed to protect personal data. However, no method of storage or transmission is fully secure.

10. Cookies

We use cookies and similar tools for authentication, preferences, analytics, and performance. Where required by law, we request consent before placing non-essential cookies.

11. Children's Data

The Services are not directed to children under 13 (or higher age where required by local law). If you believe a child provided data, contact us for removal.

12. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be notified through the Services or by email where appropriate.