Privacy Policy

The controller of personal data processed through OAZEE is:

Arti Group s.r.o.
Company ID (IČO): 27930432
VAT ID (DIČ): CZ27930432
Registered office: Schulhoffova 793/3, Háje, 149 00 Prague 4, Czech Republic

For privacy-related questions or requests, contact Show email address.

Depending on how you use OAZEE, we may process:

• Guest-session data: an anonymous session identifier and information you type or say while creating a website, including business descriptions, services, prices, and contact details.
• Voice input: audio submitted through voice features may be sent to a speech-to-text provider for transcription. OAZEE itself does not ordinarily retain the audio after transcription has been completed — the speech-to-text provider, however, may retain it for a limited period under its own terms, independently of OAZEE's own retention.
• Account information: when you sign in through a supported authentication provider, such as Google, we may receive information necessary to create and manage your account, such as your email address, name, and profile picture.
• Website content: text, images, contact information, business information, and other material submitted, generated, or processed when you use the Service.
• Subscription and transaction information: information about your plan, billing period, payments, transaction status, and related subscription records. Payment-card details are processed by our payment provider and are not ordinarily stored by OAZEE.
• Technical and security information: IP addresses, timestamps, device or browser information where necessary, error logs, security logs, and similar information required to operate, troubleshoot, and secure the Service.
• Communications: information contained in communications you send to us regarding support, billing, privacy, or other matters.

We process personal data for purposes including:

• creating, generating, hosting, publishing, and editing websites;
• responding to custom website inquiries and taking steps at your request before entering into a contract;
• creating and managing accounts;
• providing subscriptions and paid functionality;
• processing payments and maintaining accounting and tax records;
• providing AI and voice functionality;
• securing the Service and preventing fraud, abuse, and unauthorised access;
• diagnosing technical problems and improving reliability;
• communicating with users about their accounts or the operation of the Service;
• complying with legal obligations; and
• establishing, exercising, or defending legal claims where necessary.

Where the GDPR applies, we rely on one or more of the following legal bases:

• performance of a contract or steps taken at your request before entering into a contract;
• compliance with a legal obligation;
• our legitimate interests, including operating, securing, maintaining, preventing abuse of, and improving the reliability of the Service, provided those interests are not overridden by your rights and interests; and
• consent, where consent is required for a particular processing activity.

Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Certain information is necessary to create or operate a website, manage an account, provide a paid subscription, process payments, or comply with legal obligations.

If you do not provide information that is necessary for a particular feature or transaction, we may be unable to provide that feature or complete the transaction.

OAZEE uses artificial-intelligence and speech-processing providers to provide certain functionality.

When you use an AI or voice feature, information necessary to process your request may be transmitted to the relevant provider.

Different providers and service tiers may apply different rules to the use and retention of inputs and outputs.

We select providers and service configurations taking into account their contractual terms, security, privacy arrangements, and the nature of the relevant OAZEE plan.

You should not submit sensitive personal data or other confidential personal information to an AI prompt unless it is genuinely necessary for the purpose for which you are using the Service.

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected or as required by applicable law.

Our standard website-retention schedule is:

• Unpublished draft: deleted 14 days after creation if it has not been published or otherwise retained through an account feature.
• Published website on the free plan: a warning may be sent after 75 days without a visit and the website is archived after 90 days without a visit. We do not delete an archived website; it stays stored in your account.
• Website created without signing in (no account): archived after 90 days without a visit and permanently deleted 30 days after archiving if it remains inactive.
• Active paid subscription: the website is not automatically deleted because of inactivity while the relevant paid subscription remains active.
• Ended paid subscription: the website stays online for a further 30-day grace period. If the subscription is not renewed, the website stops being published but stays stored in your account; it goes back online automatically once the subscription is renewed.

Certain records may be retained for longer where necessary to comply with accounting, tax, legal, fraud-prevention, security, or dispute-resolution obligations.

Form submissions on a website that is no longer public because a subscription ended, or that has been archived, are deleted automatically 12 months after they were sent.

You can permanently delete a website at any time in its settings in your account. You can request deletion of your whole account on the My account page; once an admin processes the request, we delete your account and all your websites, except records we must keep by law (invoices with the billing details printed on them, and payment records). A domain you registered through us is no longer renewed: it stays registered in your name until the end of its paid period and then expires.

We use third-party providers to operate OAZEE. These currently include, among others:

• Google (AI and authentication) — United States;
• OpenAI (speech-to-text, where used) — United States;
• Vercel (hosting and infrastructure) — United States;
• Neon (database) — United States;
• our payment processor — see its own privacy terms for its processing location;
• domain registrars and related domain-service providers;
• email and communications infrastructure providers; and
• security, monitoring, and other technical service providers.

This list may change as we add, replace, or reconfigure providers; it reflects our providers as of the "Last updated" date above.

Where a provider acts as our processor, it processes personal data under contractual obligations and our instructions as required by applicable law.

Some providers may act as independent controllers for particular processing activities. Where relevant, their own privacy terms may also apply.

We do not sell your personal data.

OAZEE is operated from the European Union and is available internationally.

Some service providers may process personal data outside the European Economic Area ("EEA"), including in the United States or other countries.

Where the GDPR requires safeguards for an international transfer, we rely on an appropriate transfer mechanism, which may include:

• an adequacy decision adopted by the European Commission;
• for a U.S. recipient certified under it, the EU-U.S. Data Privacy Framework (and the corresponding UK and Swiss extensions, where applicable);
• Standard Contractual Clauses approved by the European Commission, together with any additional safeguards required by applicable guidance; or
• another transfer mechanism permitted under applicable data-protection law.

The mechanism used may depend on the provider, destination country, and circumstances of the processing.

Depending on where you live and the law applicable to you, you may have rights concerning your personal data.

Where the GDPR applies, these may include the right to:

• request access to your personal data;
• correct inaccurate or incomplete personal data;
• request deletion of personal data;
• restrict certain processing;
• object to processing based on legitimate interests;
• receive certain personal data in a portable format;
• withdraw consent where processing is based on consent; and
• lodge a complaint with a competent supervisory authority.

To exercise a privacy right, contact Show email address.

We may need to verify your identity before fulfilling certain requests.

Privacy laws in some jurisdictions may provide additional rights concerning access, correction, deletion, portability, restriction, objection, or other use of personal data — for example, California's CCPA/CPRA, Brazil's LGPD, or the UK GDPR for users in those places.

Where such mandatory rights apply to our processing of your personal data, we will respect them.

Nothing in this Privacy Policy is intended to limit privacy rights that cannot lawfully be limited.

As Arti Group s.r.o. is established in the Czech Republic, our principal data-protection supervisory authority is:

Úřad pro ochranu osobních údajů
Pplk. Sochora 27
170 00 Prague 7
Czech Republic
www.uoou.cz

Where applicable law permits, you may also have the right to complain to a supervisory or privacy authority in the country where you live or work.

OAZEE uses cookies, local storage, and similar technologies that are necessary for functions such as guest sessions, authentication, security, and user preferences.

Where we use only technologies that are strictly necessary to provide the Service, they are not used for third-party advertising tracking.

If we introduce analytics, advertising, or other optional technologies for which consent is legally required, we will request the required consent before activating them.

A full, itemised list of what we currently use is kept up to date in our Cookie Policy.

We use reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure.

No online service or method of electronic storage can be guaranteed to be completely secure.

OAZEE is not directed to children.

We do not knowingly seek to collect personal data from children through the Service.

If you believe that a child has provided personal data to OAZEE in circumstances where this should not have occurred, please contact us.

We may update this Privacy Policy to reflect changes to the Service, technology, providers, legal requirements, or our processing activities.

The current version will be published on this page with an updated "Last updated" date.

Where required by applicable law, we will provide additional notice before a material change takes effect.

Questions concerning privacy or requests to exercise data-protection rights may be sent to Show email address.