Privacy Policy
Last updated: April 25, 2026
Data controller
VAULT 369 LTD, operating the AI-DUE brand. Inquiries: contact@ai-due.com
Data collected
Email, name, company (optional), payment information (via Stripe), documents uploaded for simulations, anonymized usage metrics.
Purposes
Service delivery, billing, customer support, product improvement, marketing communications (opt-in).
Legal basis (GDPR)
Contract performance (service), legitimate interest (analytics), consent (marketing cookies, newsletter).
Data processors
Vercel (hosting), Stripe (payments), Mammouth/OpenAI (LLM simulation), Resend (emails), Google Analytics 4 (consent mode v2).
Retention
Active accounts: contract duration. Simulation documents: 30 days. Logs: 12 months. Invoices: 10 years (legal requirement).
Your rights
Access, rectification, erasure, portability, objection, restriction. Contact: contact@ai-due.com. Complaint to your local DPA.
Cookies
Consent Mode v2 active. Management banner available. Details in cookie settings.
Non-EU transfers
Stripe (USA — Standard Contractual Clauses), OpenAI (USA — DPA in place).