This notice explains how AI Pick Check (aipickcheck.com) uses personal data. We try to collect as little as we can.
Who is responsible
Tomáš Kolesár, ID no. 74883593, Slavojova 1729/8a, 128 00 Praha 2 – Nusle, Czech Republic ("we", "us") is the controller of the personal data described here. You can reach us at hello@aipickcheck.com. We have not appointed a data protection officer.
What we collect, why and for how long
| What | Why we use it | Legal basis (GDPR) | How long we keep it |
|---|---|---|---|
| The website address you enter, and the public text we read from that website | To run your check and build your report | Contract, or steps you ask for before one (Art. 6(1)(b)) | With the report, see below |
| Your email address | To link your report to you and to contact you about it | Contract (Art. 6(1)(b)) | With the report, see below |
| The country you choose | To ask the AI assistants questions for the right market | Contract (Art. 6(1)(b)) | With the report |
| Your report: the questions, the AI answers, scores and fixes, and any business details or questions you edit | To deliver the service | Contract (Art. 6(1)(b)) | Free checks: 12 months after the check. Full audits and re-runs: 24 months after the audit finished. We delete earlier if you ask |
| Your choice about marketing email (ticked or not), the exact wording you saw, its version, the date, and a keyed hash of your IP address | To send what you agreed to, and to prove your choice | Consent (Art. 6(1)(a)) for sending; legitimate interest (Art. 6(1)(f)) for keeping the proof | Until you withdraw, then 3 more years in case of a claim |
| Your acceptance of the terms and your request to start a paid audit at once | To prove what you agreed to | Legitimate interest (Art. 6(1)(f)), and contract | 3 years after the audit |
| Your email address and your tick, if you join the Monitor waiting list or the "tell me when the free check opens" list, with the exact wording you saw | To tell you once, by email, when Monitor or the free check opens | Consent (Art. 6(1)(a)) | Until we have sent that one email or you ask to be removed, but at most 24 months; then 3 more years for the proof of consent |
| The domain you verify and the verification result, if you want to publish a report | To check that you control the domain before a report becomes public | Contract (Art. 6(1)(b)) | With the report |
| The name or email and the reason you give in a report removal request | To handle the request | Legitimate interest (Art. 6(1)(f)) | 24 months after we handle it |
| Order and payment records (only once payments are open) | Accounting and tax duties | Legal obligation (Art. 6(1)(c)) | As long as the law requires, up to 10 years |
| A keyed hash of your IP address, used as a counter | To limit abuse and protect us from automated use that costs money | Legitimate interest (Art. 6(1)(f)) | Up to 8 days |
| Messages you send to us | To answer you | Contract or legitimate interest | 24 months after the last message |
| Error logs of the website | To find and fix faults | Legitimate interest (Art. 6(1)(f)) | 30 days |
We do not store your IP address in the clear for rate limits or consent records. We store a keyed hash, which we cannot turn back into the address, but which is still personal data because we can compare it with a new request.
Our visit statistics are daily totals only, with no IP address and no cookie ID. They do not identify anyone and are not personal data.
You do not have to give us your data, but we need a website address, an email address and a country to run a check.
Cookies and similar storage
We use no analytics, advertising or tracking cookies, and no third-party scripts, fonts or trackers.
- A session cookie called
apc_sidis set on pages with a form. It protects the form from forgery. It is strictly necessary, so it needs no consent, and it ends when you close your browser. - Your theme choice (light or dark) is saved in your browser's local storage, if you use the theme button. It never leaves your device.
What we send to AI companies
To find out whether AI assistants recommend a business, we ask them. For that we send the business name and website address, a short description taken from the public website, the facts you confirm and the questions. We do not send your email address or your IP address.
The answers can name businesses and, sometimes, people. We keep them inside your report and nowhere else, unless you choose to publish the report (see the terms).
Who handles data for us
| Company | What it does for us |
|---|---|
| Hostinger | Hosts the website and the database, and keeps standard server logs. Servers: [data centre location to confirm] |
| OpenAI | One of the four AI assistants we ask. Receives the business details and questions |
| Anthropic | One of the four AI assistants we ask. Also reads the public text of the website to summarise the business and to pick names out of AI answers |
| Perplexity | One of the four AI assistants we ask. Its service also carries our questions to Google's Gemini model, so Google's model processes them on Perplexity's behalf |
| Resend and Stripe | Not in use yet. Resend will send email and Stripe will take card payments once those open. We will update this notice before either goes live. Stripe handles your card details; we never see or store them |
These companies act on our instructions, under their business terms. Some are based in the United States. Where data leaves the European Economic Area, we use only providers that rely on the EU-US Data Privacy Framework or on standard contractual clauses.
We do not sell personal data. We do not make decisions about you by automated means that have legal or similarly significant effects.
Your rights
You can ask us to:
- tell you what we hold about you and give you a copy;
- correct it;
- delete it;
- limit how we use it;
- give you the data you provided in a common format;
- stop using it where we rely on legitimate interest (you can object).
Where we rely on your consent, you can withdraw it at any time, for example with the unsubscribe link in an email. Withdrawing does not change anything we did before.
Write to hello@aipickcheck.com. We answer within one month. We may ask you to prove who you are.
Complaints
If you think we have handled your data unlawfully, please tell us first so we can put it right. You can also complain to the Czech data protection authority, the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, ÚOOÚ), Pplk. Sochora 27, 170 00 Praha 7, Czechia, uoou.gov.cz, or to the authority in the country where you live or work.
Security
The site is served over HTTPS. Report links contain a random 32-character code and are hidden from search engines. Anyone who has a report link can open the report, so keep it to yourself.
Children
The service is for businesses. It is not aimed at children, and we do not knowingly collect their data.
Changes
When we change this notice, we change the date at the top. If a change affects how we use data you have already given us, we will tell you before it applies.