Sign Up Sign In

Privacy Policy

Effective Date: April 2026

1. Data Controller

The data controller responsible for your personal data is Knowtivity. If you have any questions about this Privacy Policy or how your data is handled, please contact us at: felix.saas.pg@knowtivity.net

2. Data We Collect

We collect the following personal data when you use AI Attack Lab:

  • Account information: Email address and name provided during registration.
  • Chat messages: Messages you send to AI chatbots as part of learning scenarios.
  • Progress and scores: Your completion status, scores, and interaction history within scenarios.
  • Usage data: Log data, device information, and browsing patterns on the Service.

3. How We Use Your Data

We use your personal data to:

  • Provide, operate, and maintain the Service.
  • Track your learning progress and display scores.
  • Improve and develop new scenarios and educational content.
  • Perform analytics to understand how the Service is used.
  • Communicate with you about your account or the Service.
  • Comply with legal obligations.

4. Cookies

We use essential cookies to keep you logged in and maintain session security. We also use Google Analytics to understand aggregate usage patterns. Google Analytics cookies are only loaded after you give explicit consent via our cookie banner. You can withdraw consent at any time.

5. Third-Party Services

We share limited data with the following third-party providers:

  • OpenRouter: Chat messages are sent to OpenRouter to generate AI responses. OpenRouter processes this data under their own privacy policy.
  • Stripe: Payment information is processed by Stripe. We do not store your full card details on our servers. Stripe processes payment data under their own privacy policy and PCI-DSS compliance.
  • Google Analytics: Anonymized usage data is collected to help us improve the Service. This is loaded only with your consent.

6. Your Rights Under GDPR

Under the General Data Protection Regulation, you have the following rights:

  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Request correction of inaccurate or incomplete data.
  • Erasure: Request deletion of your personal data. You can delete your account directly at any time by visiting Account Deletion.
  • Portability: Request an export of your data in a machine-readable format. You can export your data through the Account Export feature.
  • Objection: Object to processing of your data for specific purposes.
  • Withdraw consent: Withdraw consent for non-essential data processing (e.g., analytics cookies).

To exercise any of these rights, contact us at the email address above. We will respond to your request within 30 days.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law. Anonymized or aggregated data may be retained indefinitely for analytical purposes.

8. Contact

For any privacy-related questions or to exercise your data protection rights, contact us at: felix.saas.pg@knowtivity.net