Legal
Privacy Policy
Version March 2026 · daid.to / uNiek Solutions
1. Data Controller
The data controller responsible for processing your personal data is:
We are responsible for compliance with the General Data Protection Regulation (GDPR).
2. What data do we process?
We process the following categories of personal data:
- Name — for identification and invoicing
- Email address — for communication and account management
- WhatsApp number — to make your assistant reachable
- IBAN — exclusively for SEPA direct debit of the subscription
- Conversations with your AI assistant — the content of messages sent and received via our platform
- IP address — for security and abuse prevention
3. Special categories of personal data
Conversations with your AI assistant may contain sensitive personal information. We process such information exclusively to provide the requested service. We never use the content of conversations for analysis, profiling, advertising or training AI models.
4. Legal basis
- Performance of a contract (Art. 6(1)(b) GDPR) — for providing the service and processing payments
- Legal obligation (Art. 6(1)(c) GDPR) — for financial records in accordance with Dutch tax retention requirements
5. Retention periods
- Account data and conversations — retained for the duration of the active subscription, plus 30 days after cancellation. Permanently deleted thereafter.
- Financial records — 7 years in accordance with the statutory tax retention obligation.
Upon cancellation you will automatically be offered the opportunity to export your data before deletion takes place.
6. Access and sharing of data
- Your data is accessible only to staff who require access by virtue of their role.
- We do not share your data with third parties unless legally obliged to do so.
- Your data is not sold, rented or otherwise made commercially available.
7. Security
- All stored data is kept encrypted.
- Servers are located within the EU.
- Access is restricted to authorised persons with strong authentication.
8. Your rights
Under the GDPR you have the following rights:
- Right of access — request what data we hold about you
- Right to rectification — have inaccurate data corrected
- Right to erasure — ask us to delete your data
- Right to data portability — export in a machine-readable format
- Right to object — object to the processing of your data
You may exercise your rights by contacting daidto@uniek.solutions. We will respond within 30 days.
9. Complaints
If you believe we are not processing your personal data correctly, you may lodge a complaint with the Dutch Data Protection Authority:
We would ask you to contact us first so that we can resolve your concern together.