Legal
Privacy Notice
Last updated: July 2026
This Notice explains what personal data Privacy Just collects, why, and what your rights are. We drink our own champagne.
Controller
Privacy Just Ltd, Dublin, Ireland. Contact: privacy@privacyjust.com.
What we collect
Account data (email, name, workspace), usage data (feature interactions, prompt metadata but not prompt content on paid plans), and billing data processed by our payment provider.
Lawful basis
Contract (Art. 6(1)(b) GDPR) for delivering the service, legitimate interests (Art. 6(1)(f)) for security and product improvement, and consent (Art. 6(1)(a)) where required (e.g. marketing emails).
AI processing
Prompts and uploaded documents are sent to the underlying model provider(s) to generate a response. They are not used to train models. Retention is limited to what's needed to render your session.
International transfers
Where processing occurs outside the EEA/UK we rely on the EU Standard Contractual Clauses and, where relevant, the UK IDTA.
Your rights
Access, rectification, erasure, restriction, portability and objection. Email privacy@privacyjust.com. You can also complain to your supervisory authority.
Retention
Account data: for the life of the account and 12 months after. Billing: 7 years. Support tickets: 24 months.
AI transparency
In line with Art. 50 of the EU AI Act, we clearly disclose when you are interacting with an AI system, and we mark AI-generated content both visibly and in machine-readable form (metadata / JSON field ai_generated=true). Prompt design for chat skills is verified by a privacy lawyer; AI outputs remain general information and are not legal advice.