Updated: 2026-10-06
How the operator of LANDING AI (LAI.BG) collects, stores and uses personal data for accounts, published sites and platform visitors. GDPR-oriented. Version date: 2026-10-06.
The controller is the operator of the LANDING AI platform (company details are on the contact page / invoicing settings). We do not invent a company ID here — current legal details appear where billing and contact publish them.
For data requests use the contact form. Do not send passwords, full card data or sensitive documents in tickets without need.
Account: name, email, password hash, language, registration and login times, Google OAuth data (name, email, profile id) if you sign in with Google.
Sites and content: copy, photos, logo, phone, address and services you upload or generate; domain and DNS if connected.
“Create yourself” (guest orders, no account): email, uploaded portrait, product text fields, payment data via the processor, and for print — name, phone, city, address or chosen Econt office.
Leads from visitors of your sites: name, email, phone, message and send metadata.
Technical: IP, user agent, CSRF/session cookies, cookie preferences (lai_cookie_prefs), language (lai_locale), security logs, aggregated analytics events with a visitor hash — no third-party ad pixels on the platform.
Payments and invoices: amount, plan, status (including pending_payment and processing for yearly bank transfer until an admin confirms), processor ids, last card digits where returned, invoice and bank-reference data where applicable. We do not store full card numbers, CVC or PIN.
For “Create yourself” print orders: name, phone, city, address or chosen Econt office are used only to fulfil and ship; the courier is a separate partner.
Support: contact-form messages and replies.
Contract (Art. 6(1)(b) GDPR): account, sites, editor, leads, plans, domain, export, support; for “Create yourself” — fulfilling the digital-file and/or print order, emailing the download link and courier delivery.
Legitimate interest (Art. 6(1)(f)): security, abuse prevention, stability, basic analytics without ad profiling, product improvement.
Legal obligation (Art. 6(1)(c)): bookkeeping and invoices where required.
Consent (Art. 6(1)(a)): optional cookies (preferences / analytics) via the banner; marketing email only if you opt in; for guest orders — explicit tick of terms and privacy before payment. You may withdraw consent without losing necessary account features.
Account and sites: while active and a short period after closure (usually up to 30 days), unless the law requires longer.
Invoices and payments: typically 5–10 years under Bulgarian accounting rules depending on the document.
Security logs: usually up to 12 months.
Cookie consent records: usually up to 24 months or as needed for audit.
Leads in your inbox: until you keep the site / delete the row, plus a short backup window.
Hosting/infrastructure; SMTP for transactional mail; a Stripe-like payment processor (we never see full card data); Cloudflare (including Workers AI where configured); Google OAuth if you choose Google sign-in.
They receive only what that task needs. We do not sell personal data. Public is only what you publish.
Some processors may process data outside the EEA (e.g. the US). Where applicable we rely on adequacy, SCCs or the provider’s equivalent safeguards. AI requests may send the business brief and selected fields to the provider to return a draft.
When you generate or rewrite text/images, the brief and selected fields go to the configured AI provider (e.g. Cloudflare Workers AI or another admin-configured account).
Do not put third-party personal data in the brief without a basis. Output is a draft — you must review before publish. We do not train our own models on your data beyond the provider request needed for that generation.
Necessary cookies (session, CSRF, language) plus optional preferences/analytics via the banner. Details and controls: Cookie policy (/cookies) and the consent panel.
For visitors of sites you publish, you are the controller of their leads and the content you collect. We are the processor storing leads in your inbox under the plan. You must inform your visitors (form, consent, policy) where the law requires it.
Access, rectification, restriction, portability, objection, erasure (GDPR), and withdrawal of consent for optional processing. Export or delete from the profile where available.
You may complain to the Bulgarian Commission for Personal Data Protection (KZLD / CPDP), Sofia, www.cpdp.bg.
The service is for 18+ or companies acting through a representative. We do not target children or knowingly collect minors’ data.
Passwords are hashed. HTTPS where the domain is set up. Admin access is limited. No system is perfectly safe — we act under the law if an incident occurs.
Material changes update the version date (2026-10-06 and later). Continued use after publication means you have seen the new version unless the law requires a fresh accept.
Questions: contact page. Controller: the operator of LANDING AI (company details on the contact page / invoicing settings).
Online · The LANDING AI dog
How was the chat?
We use necessary cookies for session, language and security. Preferences and analytics only if you choose. Details in the cookie policy.
Updated: 2026-10-06