Privacy policy

1. Who is responsible

The controller is the operator of aigoallab.com ("AI Goal Lab"). To exercise your rights or ask anything about your data, use the contact page.

2. What data we collect and why

• Account data (name or username, email, password stored as a hash, language, membership level): to create and run your account and membership. Legal basis: contract.
• Contact form and emails (name, email, your message): to answer you. Legal basis: legitimate interest and, when you ask something, steps before a contract.
• Billing data (when paid membership opens): handled by the payment provider we will name here before any charge. We keep invoice records as the law requires. Legal basis: contract and legal obligation.
• Technical and security data (IP address, browser, pages requested, login attempts, two-factor data for staff): to keep the site secure and working. Legal basis: legitimate interest.
• Analytics (Google Analytics 4: pages viewed, approximate location, device, cookie identifiers): to understand and improve the site. Only with your consent. Legal basis: consent.
• Language selection: we may use your IP address to suggest Greek or English. We do not store it for this purpose.

We do not collect special-category data and we do not knowingly collect data from persons under 18.

3. Who receives data

We use service providers who process data on our behalf: hosting and email (Hostinger, MXroute), CDN and security (Cloudflare), analytics (Google, only with consent), and, when payments open, a payment provider. Telegram is a separate service you join voluntarily. We do not sell personal data.

Some providers are outside the EU/EEA (for example in the USA). In that case the transfer relies on an adequacy decision or on standard contractual clauses.

4. How long we keep data

• Account data: while the account exists, then deleted, except what the law requires us to keep.
• Contact messages: up to 24 months.
• Invoice and accounting records: as long as tax law requires.
• Analytics: up to 14 months in Google Analytics.
• Security logs: up to 12 months.

5. Your rights

You have the right to access your data, correct it, delete it, restrict or object to processing, receive it in a portable format, and withdraw consent at any time (withdrawal does not affect earlier processing). Use the contact page to make a request, we answer within one month.

You can complain to the Hellenic Data Protection Authority (www.dpa.gr) or to the authority of your own country.

6. Cookies

See the cookie policy. You can change your choice at any time from "Cookie settings" in the footer.

7. Security

We use HTTPS, hashed passwords, login protection and access limits. No system is perfectly secure. If a breach puts your rights at risk we will inform you and the authority as the law requires.

8. Changes

We may update this policy. The date of the last update is at the top of the page.