Privacy Policy

Effective Date: August 07, 2025
Last Updated: August 07, 2025

1. Introduction

Digi Twins (“we,” “our,” or “us”) is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, process, and protect your information when you use our website at https://digi-twins.site and our AI agent services (collectively, the “Service”).

This policy complies with the General Data Protection Regulation (GDPR) and other applicable privacy laws.

2. Data Controller Information

Data Controller:
Digi Twins
Contact Information:
Website: https://digi-twins.site
Email: info@mega-charity.org
Telegram: @digi_twins
Location: Slovakia, European Union

3. Information We Collect

3.1 Personal Information

We may collect the following types of personal information:

Contact Information:

Name and surname
Email address
Phone number
Telegram username
Company name and position
Billing address

Account Information:

Username and password
Profile preferences
Service usage history
Communication preferences

Business Information:

Industry and business type
Website URLs and social media accounts
Marketing objectives and goals
Technical requirements and specifications

3.2 Technical Information

We automatically collect certain technical information:

Usage Data:

IP addresses
Browser type and version
Operating system
Pages visited and time spent
Referral sources
Device information

Cookies and Tracking Technologies:

Session cookies
Performance cookies
Analytics cookies
Marketing cookies (with consent)

3.3 AI-Related Data

When using our AI services, we may process:

Input Data:

Content you provide to AI agents
Instructions and prompts
Files and documents uploaded
Configuration settings

Generated Data:

AI-generated content and responses
Performance metrics and analytics
System logs and error reports
Optimization data

3.4 Communication Data

Support ticket conversations
Email correspondence
Consultation call recordings (with consent)
Chat logs with AI agents
Feedback and survey responses

4. Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

Consent (Article 6(1)(a)):

Marketing communications
Non-essential cookies
Optional data collection

Contract Performance (Article 6(1)(b)):

Providing AI agent services
Account management
Service delivery and support

Legitimate Interests (Article 6(1)(f)):

Website security and fraud prevention
Service improvement and optimization
Analytics and performance monitoring

Legal Obligation (Article 6(1)(c)):

Tax and accounting requirements
Legal compliance and reporting

5. How We Use Your Information

5.1 Service Provision

Creating and managing user accounts
Delivering AI agent services and consultations
Processing payments and billing
Providing customer support
Maintaining service security and integrity

5.2 AI Service Enhancement

Training and improving AI algorithms
Personalizing AI responses and recommendations
Optimizing service performance
Developing new features and capabilities

5.3 Communication

Sending service-related notifications
Providing technical support
Sharing product updates and announcements
Marketing communications (with consent)

5.4 Analytics and Improvement

Analyzing usage patterns and trends
Measuring service performance
Conducting research and development
Generating business intelligence

5.5 Legal and Compliance

Complying with legal obligations
Protecting against fraud and abuse
Enforcing terms of service
Responding to legal requests

6.1 Third-Party Service Providers

We may share your information with trusted third parties who assist us in operating our service:

Technology Partners:

Cloud hosting providers (AWS, Google Cloud, etc.)
AI and machine learning platforms
Analytics services (Google Analytics, etc.)
Payment processors

Business Partners:

Marketing automation platforms
Customer support tools
Email service providers
Social media platforms

6.2 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity, subject to the same privacy protections.

6.3 Legal Requirements

We may disclose your information when required by law, regulation, or legal process, or to protect our rights, property, or safety.

6.4 AI Training and Development

With your consent, anonymized and aggregated data may be used to improve AI models and algorithms. Personal identifiers are removed from such data.

7. International Data Transfers

As we operate internationally, your data may be transferred to and processed in countries outside the European Economic Area (EEA). We ensure adequate protection through:

Adequacy Decisions: Transfers to countries with adequate protection levels
Standard Contractual Clauses: EU-approved contract terms for data protection
Binding Corporate Rules: Internal policies ensuring consistent protection
Consent: Where legally required for specific transfers

8. Data Retention

We retain your personal information only as long as necessary for the purposes outlined in this policy:

Account Data: Until account deletion plus 90 days for security purposes
Service Data: Duration of service plus 3 years for support and legal purposes
Marketing Data: Until consent withdrawal or 3 years of inactivity
AI Training Data: Anonymized data may be retained indefinitely for service improvement
Legal Compliance: As required by applicable laws and regulations

As a data subject under GDPR, you have the following rights:

9.1 Right of Access (Article 15)

Request information about your personal data and receive a copy of the data we process.

9.2 Right to Rectification (Article 16)

Request correction of inaccurate or incomplete personal data.

9.3 Right to Erasure (Article 17)

Request deletion of your personal data under certain circumstances.

9.4 Right to Restrict Processing (Article 18)

Request limitation of processing under specific conditions.

9.5 Right to Data Portability (Article 20)

Receive your personal data in a structured, commonly used format and transfer it to another controller.

9.6 Right to Object (Article 21)

Object to processing based on legitimate interests or for direct marketing purposes.

Withdraw consent at any time where processing is based on consent.

9.8 Right to Lodge a Complaint (Article 77)

File a complaint with your local data protection authority.

To exercise these rights, contact us at: info@mega-charity.org

10. Cookies and Tracking Technologies

10.1 Types of Cookies We Use

Essential Cookies:

Session management
Security features
Basic functionality

Performance Cookies:

Website analytics
Error tracking
Performance monitoring

Functional Cookies:

User preferences
Language settings
Personalization

Marketing Cookies (with consent):

Advertising targeting
Social media integration
Conversion tracking

You can control cookies through your browser settings. However, disabling essential cookies may affect service functionality.

11. Security Measures

We implement comprehensive security measures to protect your information:

Technical Safeguards:

Encryption in transit and at rest
Secure server infrastructure
Regular security audits
Access controls and authentication

Organizational Measures:

Staff training on data protection
Privacy by design principles
Regular policy updates
Incident response procedures

AI-Specific Security:

Secure AI model training
Data anonymization techniques
Isolated processing environments
Regular algorithm audits

12. Children’s Privacy

Our Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete such information promptly.

13. AI and Automated Decision-Making

13.1 Automated Processing

We use AI and automated systems for:

Content generation and optimization
Customer service responses
Marketing personalization
Service recommendations

13.2 Your Rights

Under GDPR Article 22, you have the right not to be subject to decisions based solely on automated processing that produce legal effects. You may:

Request human intervention
Express your point of view
Contest automated decisions
Request manual review

14. Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will:

Notify the relevant supervisory authority within 72 hours
Inform affected individuals without undue delay
Provide clear information about the breach and mitigation steps
Take immediate action to contain and remedy the breach

15. Privacy by Design

We incorporate privacy considerations into our business processes:

Data Minimization: Collecting only necessary information
Purpose Limitation: Using data only for specified purposes
Accuracy: Ensuring data correctness and timeliness
Storage Limitation: Retaining data only as long as necessary
Integrity and Confidentiality: Protecting data security
Accountability: Demonstrating compliance with privacy principles

16. Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of material changes through:

Email notifications to registered users
Prominent website notices
In-app notifications

Your continued use of the Service after policy updates constitutes acceptance of the revised policy.

17. Contact Information

17.1 General Privacy Inquiries

Email: info@mega-charity.org
Telegram: @digi_twins
Website: https://digi-twins.site

17.2 Data Protection Officer

For specific privacy concerns or to exercise your GDPR rights, contact our Data Protection Officer: Email: info@mega-charity.org
Subject Line: “Data Protection Inquiry”

17.3 Supervisory Authority

If you have concerns about our data handling practices, you may contact your local data protection authority. For Slovakia: Office for Personal Data Protection of the Slovak Republic
Website: https://dataprotection.gov.sk

18. Definitions

Personal Data: Any information relating to an identified or identifiable natural person.
Processing: Any operation performed on personal data, including collection, storage, use, and deletion.
Data Controller: The entity that determines the purposes and means of processing personal data.
Data Subject: The individual whose personal data is being processed.
Consent: Freely given, specific, informed, and unambiguous indication of agreement to data processing.

By using the Digi Twins Service, you acknowledge that you have read, understood, and agree to the collection and use of your information as described in this Privacy Policy.