Privacy Policy

Last updated: January 2026

AI Pratika is committed to protecting the personal data of its users. This notice describes how we collect, use and protect your data in compliance with the General Data Protection Regulation (GDPR — EU 2016/679).

Data Controller

Data controller: Silvio Luchetti

P.IVA (Italian VAT number): 02030140434

Registered office: Italy

Email: hello@aipratika.com

1. Purpose of This Notice

This notice describes how AI Pratika collects, uses, shares and protects the personal data of users who:

Visit the aipratika.com website
Register on the platform
Use the services offered (guides, workflows, content)
Save articles and personalized preferences to their account

2. Types of Data Collected

2.1 Registration Data

When you create an account on AI Pratika, we collect:

First and last name (if provided)
Email address
Registration date

Note: Authentication is handled by Clerk, a specialized external service. AI Pratika does not store users' passwords directly.

2.2 Platform Usage Data

While you use the service, we collect:

Saved articles and guides
Favorited workflows
Profession and selected area of interest
Interactions with content (views, likes)
Activity history on the platform

2.3 Technical and Browsing Data

We automatically collect technical data through:

IP address
Browser type and operating system
Device used (desktop, mobile, tablet)
Pages visited and time spent
Referrer (originating site)
Date and time of access

2.4 Cookies and Similar Technologies

We use several types of cookies:

Technical cookies: necessary for the website to function (authentication, session, preferences)
Analytics cookies: Microsoft Clarity and PostHog, to analyze user behavior and improve the experience

For more details, see our Cookie Policy.

3. Purposes and Legal Bases of Processing

3.1 Providing the Service

Purpose: Creating and managing your account, accessing content, saving favorite workflows and articles.

Legal basis: Performance of a contract (art. 6.1.b GDPR)

3.2 Email Communications

Purpose: Sending newsletters, updates on new guides and workflows, news relevant to your profession, and offers related to the platform.

Legal basis: Express and optional consent, given within the platform (for example during onboarding) and distinct from signing up for the service (art. 6.1.a GDPR). You can withdraw consent at any time via the unsubscribe link included in every email or from your account settings, without this affecting your use of the platform.

3.3 Personalizing Communications

Purpose: Selecting and personalizing the content of email communications (resources, guides, course news) based on the paths you've chosen and how you use the platform, so we only send you what's relevant to your interests.

Legal basis: Specific and optional consent (art. 6.1.a GDPR), given separately from consent to email communications and only available together with it. You can withdraw it at any time without losing the ability to receive non-personalized communications.

3.4 Analytics and Service Improvement

Purpose: Analyzing site performance, understanding user behavior, and optimizing the user experience.

Legal basis: Consent (art. 6.1.a GDPR) and legitimate interest (art. 6.1.f GDPR)

4. Mandatory Nature of Data Provision

Mandatory data: Providing registration data (email, password) is necessary to create an account and use the platform. Without this data you won't be able to access the services.

Service communications: To manage your account, we send you the communications strictly necessary for the service to function (for example confirmations, security alerts and communications about your account). These communications are part of the performance of the contract and do not require separate consent.

Marketing communications (newsletter): Sending newsletters, resources, guides and course news is optional and is based exclusively on your consent, which you can give or refuse within the platform and withdraw at any time. Not giving consent does not limit access to content and services in any way — they remain freely available on the platform.

Non-essential cookies: Consent to analytics cookies is optional. You can manage your preferences via the cookie banner or change them at any time.

5. Data Recipients

Your personal data may be shared with the following categories of recipients:

Technical Service Providers

We use third-party providers for the following essential services:

Hosting and cloud infrastructure
Database and data storage
Account authentication and security
Technical support and monitoring services

Some of these services may be based in the United States or in other non-EU countries.

Communications and Marketing

We use email marketing platforms to send newsletters, updates and communications related to the platform.

Analytics

Microsoft Corporation: Microsoft Clarity, for analyzing user behavior on the site
PostHog Inc.: PostHog, for product analytics and user behavior analysis (data hosted on EU servers)

This service is based in the United States.

Extra-EU transfers: Some providers are based outside the European Union. In these cases, data transfers take place through Standard Contractual Clauses (SCCs) approved by the European Commission, or other GDPR-compliant mechanisms, to ensure an adequate level of protection.

6. Data Retention

Account data: kept for as long as the account remains active, or until the user requests deletion.
Marketing data: kept until consent is withdrawn, or for a maximum of 24 months of inactivity.
Log and technical data: kept for a maximum of 12 months for security and service-optimization purposes.
Saved content: workflows, articles and preferences are kept until manually deleted or until the account is closed.

7. User Rights

Under the GDPR, you have the right to:

Access: obtain confirmation that your data is being processed and receive a copy of it
Rectification: correct inaccurate data or complete incomplete data
Erasure: request the deletion of your personal data ("the right to be forgotten")
Restriction: request that the processing of your data be restricted
Objection: object to the processing of your data for particular purposes
Portability: receive your data in a structured format and transfer it to another controller
Withdrawal of consent: withdraw previously given consent at any time
Complaint: lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali)

How to exercise your rights: You can exercise your rights by sending a request via email to hello@aipratika.com. We will respond within 30 days of receiving your request.

8. Data Security

AI Pratika adopts appropriate technical and organizational measures to protect personal data from unauthorized access, alteration, disclosure or destruction. These measures include:

Encryption of sensitive data
HTTPS connections for all communications
Secure authentication systems (Clerk)
Regular data backups
Continuous infrastructure monitoring
Restricting data access to authorized personnel only

9. Cookies and Tracking Technologies

The platform uses technical and analytics cookies to ensure the site works properly and to improve the user experience.

For detailed information about the cookies we use and how to manage your preferences, see our Cookie Policy.

10. Changes to This Notice

The Data Controller reserves the right to modify or update this Privacy Policy at any time to reflect regulatory, technological or organizational developments.

Material changes will be communicated by email or via a notice on the platform. We encourage you to check this page regularly to stay up to date.

11. Contacts for Privacy Requests

For any question, clarification or request regarding this Privacy Policy or the processing of your personal data, you can contact us at:

Email: hello@aipratika.com