GDPR
Compliance
We are fully committed to GDPR compliance. Your data rights are protected under EU and UK law, and we make it easy to exercise them.
Last updated: July 14, 2026
Our Role Under GDPR
myAI-founder acts as a Data Controller for personal data collected during account registration and platform use, and as a Data Processor for any personal data you input into the platform. We are committed to full compliance with the EU General Data Protection Regulation (GDPR) and UK GDPR.
Lawful Basis for Processing
We process your personal data under the following lawful bases: (1) Contract performance — to provide the services you signed up for; (2) Legitimate interests — to improve our platform and prevent fraud; (3) Consent — for marketing communications and optional analytics; (4) Legal obligation — to comply with applicable laws.
Your GDPR Rights
Under GDPR, you have the right to: access your personal data (Article 15), rectify inaccurate data (Article 16), erasure / "right to be forgotten" (Article 17), restrict processing (Article 18), data portability (Article 20), object to processing (Article 21), and rights related to automated decision-making (Article 22).
Data Transfers Outside the EU
When we transfer personal data outside the European Economic Area (EEA), we ensure adequate protection through Standard Contractual Clauses (SCCs) approved by the European Commission, or by transferring to countries with an adequacy decision.
Data Retention Under GDPR
We retain personal data only for as long as necessary for the purposes for which it was collected. Account data is retained for the duration of your subscription plus 30 days. Upon account deletion, personal data is purged within 30 days, except where retention is required by law.
Data Protection Officer
We have appointed a Data Protection Officer (DPO) responsible for overseeing GDPR compliance. You can contact our DPO at dpo@myai-founder.com for any GDPR-related inquiries, requests to exercise your rights, or concerns about our data processing activities.
Data Breach Notification
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, as required by Article 33 GDPR. Affected data subjects will be notified without undue delay.
Supervisory Authority
You have the right to lodge a complaint with your local data protection supervisory authority. For EU residents, this is typically the data protection authority in your member state. For UK residents, this is the Information Commissioner's Office (ICO) at ico.org.uk.
Exercise your GDPR rights or contact our DPO
Contact Data Protection Officer