Privacy policy

This policy explains how Italy AI Studio processes personal data when you visit this website, use the virtual assistants we publish for our clients, or contact us. We handle data transparently and in accordance with Regulation (EU) 2016/679 (GDPR).

1. Data controller

The data controller is Italy AI Studio. For any request about your data, write to [email protected] or use the contact form on this website.

2. What data we process

We process only the data needed for the purposes listed in section 3:

• Data you provide: name, email address, phone number and the content of the messages you send in the chat.
• Consents: the date and time you accept this policy and, separately, the consent to be contacted.
• Technical data: IP address (used only to limit abuse), request timestamps and referring page.

3. Purposes and legal basis

Answering your questions and putting you in touch with the company that owns the virtual assistant: the legal basis is your consent, which you can withdraw at any time.

Keeping the service secure (preventing abuse and misuse): the legal basis is our legitimate interest in protecting the service.

Complying with legal obligations where applicable.

4. Virtual assistant

The assistants published on this website are virtual assistants: they are not people and their answers are not professional, medical, legal or tax advice. If you need an official answer, ask to be contacted by a person from the company.

5. Recipients and processors

To run the service we rely on providers that process data as processors under GDPR-compliant agreements:

• Cloudflare (hosting, network and Workers AI models).
• Render and Neon (authentication and managed database).

6. Transfers outside the European Union

Some providers may process data outside the European Economic Area. In such cases transfers rely on the European Commission’s standard contractual clauses or equivalent safeguards.

7. How long we keep data

Contact data and conversations with the virtual assistants are kept for a maximum of 90 days after the last activity, in line with our retention policy; afterwards they are deleted or anonymised.

Service-security data may be kept longer to the extent necessary to prevent abuse.

8. Your rights

You can exercise your GDPR rights at any time:

• Access your data and obtain a copy.
• Rectify inaccurate data.
• Erase your data (right to be forgotten).
• Restrict or object to processing.
• Data portability.
• Withdraw consent, without affecting the lawfulness of processing already carried out.
• Lodge a complaint with a supervisory authority (in Italy, the Garante per la protezione dei dati personali).

9. Cookies and similar technologies

This website uses technical cookies and browser local storage to run the interface (for example to remember your cookie preferences). Non-essential cookies are enabled only with your consent, manageable from the banner on the site.

10. Changes to this policy

This policy may be updated. The current version is 2026-09-23: whenever we publish a new version we update the date at the top of the page. Consents already collected remain recorded with the version accepted at that time.