Privacy policy & your data.

The controller responsible for your personal data is:

Depending on how you interact with us, we may process the following categories of data:

We process personal data for specific purposes and on the following legal bases under the GDPR:

We use essential cookies and similar technologies required for the site to function (for example, remembering your cookie consent choice in local storage).

If you click "Accept all" on our cookie banner, we may enable optional analytics tools that help us measure traffic and improve the site. If you choose "Essential only", those optional tools stay off.

You can withdraw consent at any time by clearing site data in your browser or changing your choice after we provide a preference centre. You can also block cookies in your browser settings.

Our website includes an AI-powered chat assistant that helps visitors learn about Abri Studio, our services, and typical project scope. The assistant is clearly presented as artificial intelligence — it is not a human team member.

When you use the chat, the messages you send (and the assistant's responses) are transmitted to our servers and processed using a third-party AI provider (currently OpenAI) acting as our processor. We instruct the provider to use your content only to generate replies for your session and not for unrelated purposes. Because the provider may process data outside the European Economic Area, we rely on appropriate safeguards as described under International transfers.

Please do not enter passwords, payment card numbers, health data, or other sensitive information in the chat. The assistant is for general information and sales guidance only; it does not provide legal, tax, or binding commercial advice, and it must not be relied on for GDPR or security assurances.

We keep chat-related server logs only as long as needed for security, troubleshooting, and service improvement — typically up to 90 days unless a longer period is required for an incident investigation. Conversation history in your browser is cleared when you reset the chat or clear site data.

Under Regulation (EU) 2024/1689 (EU AI Act), we treat this assistant as a transparency-obligated AI system that interacts with people on our website. We comply with applicable obligations for deployers of such systems, including: informing you that you are interacting with an AI system; designing the experience so you can reach a human (contact form, email, or call) when you prefer; and not using the chat for prohibited practices or for high-risk uses listed in the AI Act.

The assistant is not used for recruitment, credit scoring, biometric identification, law enforcement, or other high-risk purposes under the AI Act. Outputs may be incomplete or inaccurate — always verify important details with us directly before making decisions.

If you have questions about how we use AI on the site, want human assistance instead of the assistant, or wish to exercise your GDPR rights in relation to chat data, contact us at hello@abristudio.com.

We do not sell your personal data. We share it only when necessary:

Some of our suppliers may process data outside the European Economic Area. Where that happens, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions, and we limit transfers to what is necessary for the service.

We keep personal data only as long as needed for the purposes above:

Under the GDPR, you have the right to access, rectify, erase, restrict, or object to certain processing, and to data portability where applicable. Where we rely on consent, you may withdraw it at any time without affecting prior processing.

You also have the right to lodge a complaint with a supervisory authority. In the Czech Republic, this is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů) at uoou.cz.

We apply appropriate technical and organisational measures to protect your data, including HTTPS, access controls, and careful selection of subprocessors. No method of transmission over the internet is 100% secure; we work to reduce risk and respond to incidents promptly.

Our website and services are aimed at businesses and professionals. We do not knowingly collect personal data from children under 16. If you believe we have done so, please contact us and we will delete it.

We may update this page from time to time. The "Last updated" date at the top will change when we do. Significant changes may also be highlighted on the site or communicated to active clients where appropriate.