Privacy Policy
The short version
- We store only what the product needs: your email address if you subscribe, and your message if you write to us.
- Your email address is stored encrypted on our own database.
- We never sell or rent personal data. Ever.
What we collect and why
| Data | Purpose / legal basis | Retention |
|---|---|---|
| Email address (newsletter) | Sending the brief three times a week. Legal basis: your consent (Art. 6(1)(a) GDPR) given by double opt-in. Signup and confirmation timestamps are kept as proof of consent. | Until you unsubscribe |
| Language and Telegram preference (newsletter) | Sending the brief in the language you chose, and - only if you asked - linking you to the Telegram channel. Same consent. | Until you unsubscribe |
| Contact form message (+ email) | Answering you. Pre-contractual steps / legitimate interest (Art. 6(1)(b)/(f)). | 12 months |
| Server log files (IP, user agent, time) | Keeping the site secure and blocking abuse. Legitimate interest (Art. 6(1)(f)). | 30 days |
Double opt-in
Subscribing does not add you to the list immediately. You first receive a confirmation email and only become a subscriber once you click the link. You can withdraw consent at any time with one click in every email, which unsubscribes you and stops all further sending.
Processors we use
- Hostinger (EU data centre) - website hosting, server logs and outgoing email. Data Processing Agreement in place.
- ipwho.is - only used after analytics consent, to derive a country code from the transient IP address. No cookies, no advertising profile.
- Brevo (EU) - newsletter delivery, used once sending at volume starts. A DPA is concluded before that.
Our editorial AI tooling processes public article text only; it never receives subscriber information.
What we do NOT do
- No advertising or third-party tracking cookies, no cross-site trackers, no fingerprinting
- No Google Fonts loaded from third-party servers (fonts are self-hosted)
- No selling, renting or sharing of personal data for marketing
Cookies and storage
We set a single necessary session cookie to protect our forms from CSRF attacks, and remember your theme choice in your own browser. We run no analytics cookies and build no tracking profile about you.
Your rights
Under GDPR you can request access, correction, deletion, restriction and portability of your data, object to processing, and withdraw consent at any time. Unsubscribing is one click in every issue; to erase your data, write to desk@aiexpress.pro. You may complain to a supervisory authority; as we operate from Germany, that is the Hessian Data Protection Authority (HBDI).