GDPR Compliance

We are committed to protecting your privacy rights under the General Data Protection Regulation (GDPR). Learn about your rights and how we handle your personal data.

GDPR Compliant

Your Data Protection Rights

Under GDPR, you have comprehensive rights regarding your personal data. Click on any right below to learn more and take action.

Right to Access

Request a copy of all personal data we hold about you

Get a comprehensive report of all your personal data including account information, chat history, and usage analytics in JSON format.

Download Your Data
Within 30 days

Right to Rectification

Update or correct your personal information

Correct inaccurate or incomplete personal data. You can update your profile information directly or request assistance for complex changes.

Update Profile
Immediate for profile updates

Right to Erasure

Request deletion of your personal data ('Right to be Forgotten')

Permanently delete your account and all associated data. This action cannot be undone and will remove all conversations, preferences, and billing information.

Delete Account
Within 30 days

Right to Restrict Processing

Limit how we process your personal data

Control how your data is processed by restricting certain types of processing while keeping your account active.

Manage Preferences
Immediate

Right to Data Portability

Export your data in a machine-readable format

Download all your data in a structured, machine-readable format that you can import into other services.

Export Data
Within 30 days

Right to Object

Object to processing based on legitimate interests

Object to the processing of your personal data where we rely on legitimate interests as the legal basis for processing.

File Objection
Within 30 days

Need Help with Your Rights?

Our Data Protection Officer is here to assist you with any questions about your rights or how to exercise them.

Data We Process

Account Information

Name
Email address
Profile picture
Account preferences

Purpose

Account management and authentication

Retention

Until account deletion

Lawful basis

Usage Data

Chat interactions
Feature usage
Session information

Purpose

Service improvement and analytics

Retention

Processed in memory, not stored

Lawful basis

Billing Information

Payment methods
Billing address
Transaction history

Purpose

Payment processing and compliance

Retention

7 years for tax compliance

Lawful basis

Technical Data

IP address
Browser type
Device information

Purpose

Security and service optimization

Retention

30 days in logs

Lawful basis

Legal Basis for Processing

Contractual Necessity

We process your data to provide our AI services, manage your account, and fulfill our contractual obligations to you.

Applies to: Account management, service delivery, billing

Legitimate Interest

We may process data for legitimate business interests, such as improving our services, security, and fraud prevention.

Applies to: Service improvement, security monitoring, analytics

Consent

For marketing communications and optional features, we rely on your explicit consent which you can withdraw anytime.

Applies to: Marketing emails, optional analytics, cookies

Legal Obligation

We process certain data to comply with legal requirements, such as tax reporting and regulatory compliance.

Applies to: Tax records, regulatory reporting, legal compliance

International Data Transfers

EU Data Protection

We ensure that any data transfers outside the EU are protected by appropriate safeguards, including adequacy decisions and Standard Contractual Clauses (SCCs).

Safeguards: Standard Contractual Clauses, Adequacy Decisions, Binding Corporate Rules where applicable

Data Minimization

We only collect and process personal data that is necessary for the specified purposes and ensure data is kept accurate and up to date.

Principles: Purpose limitation, Data minimization, Accuracy, Storage limitation

Breach Notification

In the unlikely event of a personal data breach that may result in a risk to your rights and freedoms, we will notify you without undue delay and within 72 hours of becoming aware of the breach.

Detection: Automated monitoring and manual processes
Response: Immediate containment and impact assessment
Communication: Timely notification to authorities and individuals

Additional Protections

Children's Privacy

Liati is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16, we will delete it immediately.

Age Verification: Users must confirm they are 16 or older to use our services

Automated Decision Making

We do not engage in automated decision-making or profiling that produces legal effects or significantly affects you. All AI responses are generated to assist with your queries and do not make decisions about you as an individual.

AI Usage: Content generation only, no profiling or automated decisions

Your Control

You have complete control over your personal data. You can access, update, delete, or export your information at any time. You can also withdraw consent for optional processing activities without affecting the lawfulness of previous processing.

Access RightsConsent WithdrawalData PortabilityRight to Erasure

Exercise Your Rights

You can exercise any of your GDPR rights by contacting our Data Protection Officer. We will respond to your request within 30 days.

Contact Our Data Protection Officer

Response Time:Within 30 days