LEGAL

Privacy Policy

Effective date: 18 September 2026

This Privacy Policy explains how AI Absolution collects, uses, stores and shares personal information when you visit aiabsolution.org, purchase a certificate, receive a certificate or use a certificate verification page.

AI Absolution is operated from Denmark.

For purposes of applicable data-protection law, including the EU General Data Protection Regulation ("GDPR"), AI Absolution is responsible for the personal data for which it determines the purposes and means of processing.

Privacy questions and requests can be sent to:

terms-privacy@aiabsolution.org

1. Information we collect

When you purchase or create a certificate, we may process information such as:

• your email address;
• recipient or display name;
• certificate text and personalization;
• certificate ID;
• information necessary to generate and deliver the certificate; and
• transaction-related information.

If you create a certificate for another person, the name and other personalization information you enter may relate to that person rather than you.

Payment information

Payments are processed by Stripe.

We may receive limited transaction information such as:

• payment status;
• transaction ID;
• amount;
• currency;
• billing country; and
• limited customer information.

We do not receive or store your complete payment-card number.

Technical information

When you use the Website, AI Absolution or its infrastructure providers may automatically process technical information such as:

• IP address;
• browser type;
• device information;
• request information;
• timestamps;
• security information; and
• server or application logs.

Communications

If you contact us, we may process your email address and the contents of your communication for the purpose of responding to you and resolving your request.

2. Why we use personal information

We process personal information in order to:

• process purchases;
• generate personalized certificates;
• deliver certificates;
• operate certificate verification;
• provide customer support;
• prevent fraud and misuse;
• maintain Website security;
• comply with tax, accounting and other legal obligations;
• resolve disputes; and
• enforce our Terms of Service.

For people protected by the GDPR, the legal basis depends on the specific processing.

Contract

Information necessary to process an order, generate a certificate and deliver the purchased product is generally processed because it is necessary to perform our contract with you.

Legal obligations

Certain transaction information may be processed or retained where necessary to comply with legal obligations such as taxation, accounting, fraud prevention or financial recordkeeping.

Legitimate interests

We may process limited information where necessary for legitimate interests such as:

• securing the Website;
• preventing abuse;
• preventing fraud;
• maintaining service reliability; and
• providing customer support,

provided those interests are not overridden by your rights and freedoms.

Consent

Where processing is based on consent, such as optional marketing communications or non-essential tracking where applicable, you may withdraw your consent at any time.

3. Information about certificate recipients

AI Absolution allows a purchaser to create a certificate for another person.

If someone creates a certificate containing your name or other information about you, we may process that information for the limited purpose of generating, delivering and, where applicable, verifying the novelty certificate.

The purchaser is responsible for providing information appropriately and for not submitting sensitive, unlawful or unnecessarily private information about another person.

When buying a certificate for someone else, the purchaser may optionally enter that person's email address. We use it only to send them one email containing their certificate. It is stored in the payment record held by our payment processor (Stripe) and in the sent email held by our email provider (Resend). We do not add it to any mailing list or contact that person again. The purchaser's name and email are not included in that message.

If you are named on an AI Absolution certificate and believe information about you has been used inappropriately, contact:

terms-privacy@aiabsolution.org

You may also request access, correction or deletion where applicable under data-protection law.

4. Certificate verification and QR codes

Certificates may contain a unique certificate ID and QR code.

Scanning a QR code may open a verification page containing limited certificate information, such as:

• certificate ID; and
• recipient or display name.

Anyone who possesses or obtains access to the QR code or verification URL may therefore be able to view this information.

Information displayed on a certificate verification page should not be considered private.

The purpose of the verification page is solely to verify that the novelty certificate originated from AI Absolution. It does not verify the identity of the person named on it or provide the certificate with any legal or official status.

We do not intentionally publish sensitive personal information through certificate verification pages.

If you are the individual named on a certificate and want information associated with it removed, contact terms-privacy@aiabsolution.org.

5. Payments and Stripe

Payments are processed using Stripe.

Stripe may process information such as:

• name;
• email address;
• billing information;
• payment-method information;
• IP address;
• transaction details;
• device information; and
• fraud-prevention information.

Depending on the processing activity, Stripe may process information on our behalf or for purposes determined independently by Stripe, such as regulatory compliance, fraud prevention and payment-network requirements.

Stripe's own privacy documentation applies to information it processes for its own purposes.

AI Absolution does not receive or store complete payment-card numbers.

6. Email delivery and Resend

We use Resend to send transactional emails, including certificate delivery messages and other service-related communications.

Information processed through Resend may include:

• email addresses;
• recipient names;
• message content;
• certificate delivery information; and
• technical delivery logs.

Resend may process and store this information on systems located in the United States.

Where European data-protection law applies, international transfers are subject to applicable transfer safeguards used by Resend.

Resend may retain email and log information for a limited period under its own retention policies.

AI Absolution does not control the independent technical retention periods applied by Resend.

7. Hosting and Netlify

AI Absolution uses Netlify for website hosting, deployment, serverless functionality and related infrastructure.

As part of operating the Website, Netlify may process technical information including:

• IP addresses;
• browser and device information;
• request information;
• timestamps;
• server logs;
• function logs; and
• security information.

Netlify applies different retention periods depending on the service, data type and account plan.

For example, Netlify currently provides retention periods that may include:

• request logs and observability data retained for approximately 1 to 30 days, depending on plan;
• Function and Edge Function logs retained for at least approximately 24 hours, increasing to around 7 days on certain plans;
• function metrics retained for approximately 7 to 30 days;
• deployment data retained for approximately 30 to 365 days, depending on plan;
• database backups, where Netlify database functionality is used, retained for approximately 3 to 30 days, depending on plan and backup type; and
• failed asynchronous workload events retained for up to approximately 30 days.

These are Netlify infrastructure retention periods. They do not mean that AI Absolution intentionally maintains all customer or certificate information for those periods.

Technical data may remain temporarily within logs, deployment infrastructure, backups or other systems even after it is no longer actively used by AI Absolution.

8. How long we keep personal information

We aim to retain personal information only for as long as reasonably necessary for the purpose for which it was collected.

Certificate generation

Information submitted to generate a certificate is processed for the purpose of creating and delivering the digital certificate.

AI Absolution does not intentionally maintain a general customer-profile database containing certificate personalization information merely for future marketing or profiling.

Certificate verification

Limited information necessary for certificate verification may remain available for as long as the associated verification function remains active.

This may include information such as:

• certificate ID; and
• recipient or display name.

This information is retained only to support verification of the associated novelty certificate.

A person named on a certificate may request removal of personal information from the verification service by contacting terms-privacy@aiabsolution.org, subject to any legal reason requiring continued retention.

Infrastructure data

Some information may temporarily remain within the systems of infrastructure providers such as Netlify.

Depending on the type of technical data and service used, Netlify's retention periods may range from approximately 24 hours to 30 days for many operational logs, with certain deployment records or backups potentially retained for longer periods.

These copies are maintained as part of normal infrastructure, security, backup and reliability processes rather than for customer profiling.

Transaction records

Payment and transaction records may be retained for as long as reasonably necessary to comply with:

• tax obligations;
• accounting requirements;
• fraud-prevention requirements;
• payment disputes;
• chargebacks; and
• other legal obligations.

Customer support

Customer-support correspondence may be retained for as long as reasonably necessary to resolve a request, handle disputes and maintain appropriate records.

Third-party providers

Stripe, Resend, Netlify and other service providers may maintain information according to their own legal, security and technical retention requirements.

9. International data transfers

AI Absolution is operated from Denmark, but some service providers used by the Website are based in, or process information in, countries outside Denmark and the European Economic Area, including the United States.

Where GDPR applies and personal information is transferred internationally, appropriate legal transfer mechanisms are used where required.

These may include:

• adequacy decisions;
• participation in recognized data-transfer frameworks; or
• European Commission Standard Contractual Clauses.

10. How we share personal information

We disclose personal information only where reasonably necessary to operate the service or comply with applicable law.

Relevant categories of recipients may include:

• website hosting and infrastructure providers;
• payment processors;
• transactional email providers;
• security and fraud-prevention providers;
• professional advisers; and
• governmental or regulatory authorities where disclosure is legally required.

Current core service providers include Netlify, Stripe and Resend.

AI Absolution does not sell personal information.

AI Absolution does not share personal information for cross-context behavioral advertising.

11. Cookies and similar technologies

The Website may use cookies or similar technologies that are technically necessary to provide functionality such as:

• checkout;
• security;
• fraud prevention;
• session management; and
• service operation.

Third-party payment providers such as Stripe may also use cookies, device identifiers or similar technical information for payment security and fraud prevention.

AI Absolution does not intentionally use customer information for behavioral advertising.

If non-essential analytics, advertising or marketing cookies are introduced in the future, appropriate consent controls will be provided where required by applicable law.

12. European privacy rights

If the GDPR or equivalent European data-protection legislation applies to you, you may have rights including the right to:

• request access to personal information;
• correct inaccurate information;
• request deletion;
• restrict certain processing;
• receive certain information in a portable format;
• object to certain processing; and
• withdraw consent where processing is based on consent.

These rights may be subject to exceptions or limitations under applicable law.

To exercise a privacy right, contact:

terms-privacy@aiabsolution.org

We may ask for information reasonably necessary to verify your identity before fulfilling a request.

You may also have the right to lodge a complaint with the data-protection supervisory authority responsible for your jurisdiction.

13. United States privacy rights

Residents of certain U.S. states may have privacy rights under applicable state privacy legislation.

Depending on the jurisdiction and whether the relevant law applies to AI Absolution, these rights may include the ability to:

• access personal information;
• request deletion;
• correct inaccurate personal information;
• obtain a portable copy of certain information; and
• opt out of certain forms of sale, sharing, targeted advertising or profiling.

AI Absolution does not sell personal information and does not use personal information for cross-context behavioral advertising.

We will not unlawfully discriminate against a person for exercising a privacy right.

Requests can be sent to terms-privacy@aiabsolution.org.

14. California privacy disclosures

For purposes of applicable California privacy legislation, categories of personal information we may process include:

• identifiers;
• commercial information;
• internet or network activity;
• transaction information; and
• content voluntarily submitted when creating a certificate.

Information may be disclosed to service providers for business purposes such as:

• hosting;
• payment processing;
• email delivery;
• security;
• fraud prevention; and
• customer support.

AI Absolution does not sell personal information and does not share personal information for cross-context behavioral advertising.

15. Children's privacy

AI Absolution is a general-audience novelty and entertainment service.

The service is not directed at children under 13.

We do not knowingly collect personal information directly from children under 13 in circumstances covered by the U.S. Children's Online Privacy Protection Act.

If you believe information from a child has been submitted inappropriately, contact terms-privacy@aiabsolution.org.

16. Security

We use reasonable technical and organizational measures intended to protect personal information against unauthorized access, alteration, disclosure or destruction.

However, no online service, transmission method or storage system can guarantee absolute security.

Users should therefore avoid submitting sensitive personal information when personalizing a certificate.

17. Automated decision-making

AI Absolution does not use personal information to make solely automated decisions that produce legal or similarly significant effects on individuals.

Automated systems may be used for ordinary technical purposes such as:

• payment authorization;
• fraud detection;
• spam prevention; and
• Website security.

18. Changes to this Privacy Policy

We may update this Privacy Policy when our services, service providers or legal obligations change.

The current version will be published on this page together with its effective date.

Material changes will be communicated where required by applicable law.

19. Contact

For privacy questions, data requests or questions about these practices, contact:

terms-privacy@aiabsolution.org