# GDPR Compliance

> How the General Data Protection Regulation applies to a service that never receives your documents - and your rights under it.

AiLoveKit GDPR compliance explained: zero-upload architecture means document content is never processed by us. Your GDPR rights and how to exercise them.

- **Canonical:** https://www.ailovekit.com/gdpr/

Last updated: July 1, 2026

## 1. Compliance by architecture

The most reliable way to comply with the GDPR is to minimize the data you process. AiLoveKit's design takes this to the logical conclusion: **the document content you work with never reaches our systems**. All tool operations execute in your browser, on your device.

For file contents, therefore, you are not our data subject - we are not a processor of your documents at all. This is not a policy promise; it is an architectural property you can verify in the Network tab of your browser.

## 2. What personal data does exist

- **Server access logs** - IP address and request metadata for serving the static website (legitimate interest: security and operation).

- **Contact messages** - what you choose to send us via the contact page (consent / pre-contractual measures).

- **Local preferences** - theme and tool handoff state, stored only in your browser.

## 3. Your rights under the GDPR

- **Right of access (Art. 15)** - ask us what we hold about you.

- **Right to rectification (Art. 16)** - correct inaccurate data.

- **Right to erasure (Art. 17)** - request deletion; local browser data you can erase yourself at any time.

- **Right to restriction (Art. 18)** and **data portability (Art. 20)**.

- **Right to object (Art. 21)** - including to processing based on legitimate interests.

- **Right to lodge a complaint** with your national supervisory authority.

## 4. Retention

Server logs are kept only as long as needed for security and operations. Contact messages are kept until your request is resolved. No document content is retained because none is ever received.

## 5. International transfers

Where infrastructure providers operate outside the EEA, transfers rely on the safeguards recognized by the GDPR (standard contractual clauses or adequacy decisions).

## 6. Data Protection contact

Exercise any right by writing to privacy@ailovekit.com (mailto:privacy@ailovekit.com). We respond within the statutory one-month period.

---

Source: https://www.ailovekit.com/gdpr/
Part of AiLoveKit: https://www.ailovekit.com/
Machine-readable index: https://www.ailovekit.com/llms.txt