🔒 GDPR-Ready

Privacy Policy

Effective: July 7, 2026 · 1man1000ai · [email protected]

🛡️ Short version: We store only what's needed to run your tools. We never sell data. Audio for transcription is deleted immediately after processing. You can request deletion of your data at any time.

0. Scope

This Privacy Policy applies to all products and services on 1man1000ai.com, including the Debt Collector tool, media download utilities, transcription service, and Albania AI Services (hospitality automation). It describes what data we collect, how we use it, and your rights.

1. What data we store

We store only what is needed to run your services:

Account data: email address, hashed password, plan type, registration date.
Debt Collector: debtor names, contact details (email, phone), invoice amounts and due dates, reminder logs. All entered by you.
Transcription: audio files are processed and immediately deleted — only the resulting text transcript is stored, in your account.
Media downloads: no data stored — content is piped directly to your browser, nothing saved on our servers.
Albania AI Services: business configuration data, guest conversation logs (text only, 90-day retention), anonymized usage metrics.
Usage metrics: request counts, error logs — no personal identifiers.

We do not collect payment card data, government ID numbers, or precise location data.

2. Where data is stored

🇦🇱

Albania — private server

All business configs and conversation logs are stored on a dedicated server physically located in Albania. No US or EU cloud providers for your core data.

🔐

Encrypted at rest

Stored files use filesystem-level encryption. Access is restricted by SSH key authentication — no passwords.

🚫

No third-party storage

We do not sync your data to Google Drive, AWS S3, Dropbox, or similar cloud services.

3. Anonymization pipeline

When a guest message is processed by AI (Groq / LLaMA), we strip personally identifiable information first:

Original data	Sent to AI
Guest name "Marco Rossi"	"Guest"
Phone "+39 333 123 4567"	[PHONE REDACTED]
Email "[email protected]"	[EMAIL REDACTED]
Passport / ID number	[ID REDACTED]
Question text (e.g. "where is the key?")	Sent as-is — no names, just the question

AI models never see raw personal identifiers. They only process the question content.

4. Data retention

Data type	Retention	Reason
Conversation logs	90 days	Dispute resolution, quality improvement
Business config	Duration of subscription + 30 days	Allows re-activation
Lead/contact form submissions	12 months	Sales follow-up
Error & performance logs	30 days	Debugging only
Incident reports (photos/text)	6 months	Insurance, legal reference

After the retention period, data is permanently deleted from all systems within 14 days.

5. Who has access

✓ You (the property owner) — full access to your own business config and conversation logs via your bot.
✓ Albania AI Services operator — for setup, maintenance, and incident support only. Access is logged.
✗ Third parties, advertisers, or data brokers — never. We do not sell, rent, or share data.
✗ Law enforcement — only if compelled by Albanian law with a valid court order. We notify you if legally permitted to do so.

6. Your rights (GDPR-aligned)

Even though Albania is not an EU member state, we follow GDPR principles as best practice:

Access: Request a copy of all data stored about your business.
Correction: Fix any incorrect information.
Deletion: Request permanent deletion of your data. Fulfilled within 7 business days.
Portability: Export your config as JSON on request.
Objection: Opt out of any data use beyond core service operation.

To exercise any right: message your assistant bot with "I want to request my data" or email [email protected] with subject "Data Request".

7. Guest data (your customers)

As the property owner, you are the data controller for your guests under GDPR. We act as a data processor on your behalf. This means:

You are responsible for informing your guests that a bot handles their messages.
We provide a suggested disclosure text you can add to your welcome card or check-in instructions.
If a guest requests deletion of their conversation, contact us and we will delete within 7 days.

Suggested disclosure for guests: "Messages in this chat are handled by an AI assistant powered by Albania AI Services. Messages may be stored for up to 90 days to ensure service quality. No personal data is shared with third parties."

8. Security incident reporting

If you believe there has been unauthorized access to your bot or a data breach:

Message your assistant bot: "SECURITY INCIDENT — describe what happened"
Or email [email protected] with subject "Security Incident"

We investigate and respond within 24 hours. If personal data was involved, we notify affected parties within 72 hours (GDPR Article 33 standard).

9. Cookies and tracking

This website uses no third-party tracking cookies. The only storage we use:

localStorage: language preference, visitor counter — no personal data.
No Google Analytics, no Meta Pixel, no third-party ad scripts.

10. Changes to this policy

If we make material changes, we will notify active clients via their bot at least 14 days before the change takes effect. The latest version is always at this page.

Questions? [email protected] · Telegram: @ai_albania_bot
1man1000ai · Vlorë, Albania