Privacy Policy

The owner and operator of aievolutionlabs.io is AI Evolution Labs LTD, a company registered in Jersey, Channel Islands. It is the main entity responsible for the whole AI Evolution Labs business and for the personal data processing described in this Policy. We provide: AI Ads Pack (AI ad creatives), AI Agents (custom AI agents for businesses), AI Web Development (websites and apps), AI Marketing and AI Video Production. We do not run any login panel, user accounts or store: this site is an informational and contact website.

The data controller within the meaning of the GDPR (EU Regulation 2016/679) and the Data Protection (Jersey) Law 2018 is AI Evolution Labs LTD, a company registered in Jersey, Channel Islands. Contact for privacy matters: agent@aievolutionlabs.io. We have not appointed a Data Protection Officer because we are not required to, and all requests are handled directly by our team at that address.

We collect the minimum amount of data - only what is genuinely necessary to contact you and deliver our service:

• Contact form: name, email address, topic of inquiry (e.g. AI Ads, AI Agent, Web Dev) and the message content.
• Email verification (double opt-in): a temporary token confirming you sent the message - deleted after use or after 24 hours.
• Anonymous analytics (Google Analytics): aggregated traffic data, with no profiling of individual people.
• Server technical logs (IP address, browser type) - kept for a short time, solely to ensure security and stability of the website.

Let's be clear - we never gather more than necessary:

• We have no login system and no user accounts.
• We do not collect passwords or payment details on the site.
• We do not sell or rent your data.
• We do not run advertising profiling or retargeting pixels.
• We do not use a cookie consent banner - we do not set third-party tracking cookies.

We process your data for clearly defined purposes:

• Replying to your contact form inquiry - basis: GDPR Art. 6(1)(b) (steps at your request) and Art. 6(1)(f) (legitimate interest - business communication).
• Verifying that the email is yours (double opt-in) - legitimate interest (protection against spam and abuse).
• Service delivery (AI Ads Pack, AI Agent, website, marketing) - performance of a contract with the client (GDPR Art. 6(1)(b)).
• Security and website analytics - legitimate interest (GDPR Art. 6(1)(f)).

• Contact form messages: up to 24 months from the last correspondence.
• Unconfirmed verification tokens: deleted after 24 hours.
• Client data (contracts, invoices): for the period required by tax law (up to 5 years).
• Server logs: typically up to 30 days.

We only use reputable providers compliant with GDPR:

• Resend - sending transactional emails (confirmations, auto-replies).
• Supabase - secure storage of form messages and backend function hosting.
• Lovable / Vercel - hosting of the web application.
• Google Analytics - anonymous traffic statistics.
• Lovable AI Gateway - AI models used during service delivery (e.g. creative generation).

You can trust us. We follow industry best practices:

• HTTPS/TLS encryption across the entire site and all forms.
• Data access limited to the team and protected by strong authentication.
• Backend security rules (Row Level Security) on the database.
• No login panel = no risk of user password leaks.

Under GDPR Articles 15-22 and the Data Protection (Jersey) Law 2018 you have full control over your data at any time. We answer every request without undue delay and no later than within 1 month. Exercising your rights is free of charge:

• Access your data and receive a copy (GDPR Art. 15).
• Correct any inaccurate information (GDPR Art. 16).
• Erase your data, the “right to be forgotten” (GDPR Art. 17).
• Restrict processing (GDPR Art. 18) and object to processing based on legitimate interest (GDPR Art. 21).
• Port your data to another controller in a machine-readable format (GDPR Art. 20).
• Withdraw consent at any time where processing is based on it (GDPR Art. 7(3)). Withdrawal does not affect the lawfulness of processing carried out beforehand.
• Not be subject to decisions based solely on automated processing (GDPR Art. 22). We do not make such decisions about website users.

If you believe we have infringed your rights, please write to us first at agent@aievolutionlabs.io. Regardless, you have the right to lodge a complaint with a supervisory authority:

• Jersey Office of the Information Commissioner (jerseyoic.org) - the authority competent for the seat of AI Evolution Labs LTD in Jersey.
• The Polish Data Protection Authority (uodo.gov.pl) - if you live in Poland.
• The supervisory authority of your place of residence in the European Union or EEA.

AI Evolution Labs LTD is based in Jersey (Channel Islands). Jersey benefits from a European Commission adequacy decision (2008/393/EC), which means personal data can be transferred from the EU/EEA to Jersey without additional safeguards and with the same level of protection as inside the EU.

• Our technology providers may process data in the USA or other third countries. In those cases transfers rely on the EU Standard Contractual Clauses (SCCs) or on EU-U.S. Data Privacy Framework certification.
• With every provider processing data on our behalf we have a data processing agreement in place (GDPR Art. 28).
• A copy of information on the transfer safeguards applied is available on request: agent@aievolutionlabs.io.

We only use essential technical cookies (e.g. remembering your EN/PL language choice), which under the ePrivacy Directive do not require consent, plus anonymous Google Analytics statistics with IP anonymisation enabled and advertising signals disabled. We set no marketing, remarketing or third-party tracking cookies, which is why no consent banner is shown. You can clear or block cookies at any time in your browser settings.

In the event of a personal data breach likely to create a risk to your rights and freedoms, we will report it to the competent supervisory authority within 72 hours of becoming aware of it (GDPR Art. 33) and inform affected individuals without undue delay where the risk is high (GDPR Art. 34).

Some content on the website (in particular blog articles) is generated automatically with the help of artificial intelligence (LLM models provided by the Lovable AI Gateway) and then reviewed by our team. Despite due diligence, such content may contain inaccuracies or errors, so we are not liable for the consequences of decisions made solely on its basis. Details are governed by §10 of the Terms of Service.

When delivering services (e.g. AI Ads Pack, AI Agents), materials and data provided by the Client may be processed by external AI model providers (including OpenAI, Google, Anthropic via the Lovable AI Gateway). Data is shared only to the extent necessary to perform the service, under data processing agreements (GDPR Art. 28) and in line with those providers' privacy policies. Where the Client entrusts us with personal data of its own customers, we act as processor and the Client as controller: on request we sign a separate Data Processing Agreement (DPA). We never share Client data for training of public models.

We reserve the right to update this Policy. Each new version is published on this page with the date of the last update. Material changes affecting your rights will be highlighted visibly on the website.

AI Evolution Labs LTD, Jersey, Channel Islands. Questions, access or deletion requests, complaints: agent@aievolutionlabs.io. We reply within 48 business hours and fulfil formal GDPR requests within 1 month at the latest.