Privacy Policy

This document is available in English and Italian (switch with the IT/EN links at the top). If the two versions differ, the English version prevails. Last updated: 18 October 2026.

Data controller

AIAS di Del Mutolo Nicola — VAT number IT02775620467 — Via Ronco 36, Massarosa (LU), Italy.
Contact for privacy-related requests: privacy@aialbumstudio.com

Who this policy applies to

AI Album Studio is sold to customers worldwide, not only within the European Union. This policy is written to the standard of the EU General Data Protection Regulation (GDPR), which we apply as our baseline for every customer regardless of location, because it is among the most protective frameworks in the world. If your local law grants you additional rights, those rights are not reduced by anything in this document.

Data we collect

• Registration data: your studio name, email address and password (stored only as a hash, never in plain text), plus optionally a VAT/tax number and billing address.
• Technical and security data: your IP address (when you register and when you log in), a random identifier for each installed workstation (not tied to hardware identity), the number of AI projects you use, the software version and operating system (Windows or Mac) of each workstation, and the records of the consents you give (what, when, which version of our texts, through which channel, from which IP address).
• Purchase data: the orders you place and the billing details you provide when buying.
• Download link email: if you ask us on the download page to email you the link for your computer, we use your email address only for that message and do not keep it; to prevent abuse we keep, for 24 hours, only a non-reversible fingerprint of the address and your IP address.

Why we use it and on what legal basis

• To provide the service — create and manage your account and your software license, send you the emails needed for the service to work (email confirmation, password reset, notices about your account, license, trial and purchases), process purchases, and give you technical support for the software (for example, knowing whether a workstation has the latest version). Legal basis: performance of the contract (GDPR art. 6.1.b).
• To meet legal obligations — where provided, your VAT number and billing address may also be processed for tax and accounting obligations, for as long as the law requires. Legal basis: GDPR art. 6.1.c.
• To keep the service secure — limiting repeated login or registration attempts, preventing abuse and multiple free trials, alerting us to new sign-ups, and enforcing the number of workstations included in your license. Legal basis: our legitimate interest in protecting the service (GDPR art. 6.1.f). You may object at any time (see "Your rights").
• To send you promotional emails — only if you ask for them, see the next section. Legal basis: your consent (GDPR art. 6.1.a).

Promotional emails (optional)

When you register you can tick an optional box to receive news, tips and offers from AI Album Studio by email. The box is never ticked in advance, you can register without ticking it, and not ticking it does not limit the service in any way. The consent becomes effective once you have confirmed your email address.

You can withdraw your consent at any time, with the same ease with which you gave it: from your account page, or with the link at the bottom of every promotional email. Withdrawing does not affect anything done before and you will keep receiving the emails the service needs (see above). We keep a record of your consent (and of its withdrawal) so that we can prove it. We do not sell or give your email address to anyone, and we do not profile you or take automated decisions about you.

AI features and your photographs

For the AI-assisted features the software does not upload your photographs. To generate albums it sends our server technical data derived on your computer (for example numerical descriptors of the images and layout and style-profile settings), and your style profile is stored on our server so that it follows your account across your workstations. We use this data only to provide the features you request.

Online Preview (optional service)

If you use the optional Online Preview service, the software uploads screen-quality images of your album spreads to our servers so that your own clients can view them and approve them or ask for changes. Those images may show people (for example couples and guests). For this data you are the controller and we act as your processor, handling it only to provide the service and on your instructions; you are responsible for informing the people concerned and for having a lawful basis towards them. A data processing agreement is available on request at privacy@aialbumstudio.com.

Payment data

This site never stores your payment card details. Purchases are processed by an external payment provider, Stripe, which acts as an independent controller for that data under its own privacy policy. Stripe may process and transfer payment data outside your country in order to process the transaction; where this involves a transfer outside the European Economic Area, Stripe relies on Standard Contractual Clauses or an equivalent safeguard recognized under GDPR.

Who processes your data

The site is hosted by Aruba S.p.A. (Italy), which acts as a data processor for hosting and for sending the service's automated emails. No other external service processes your personal data today, beyond the payment provider described above.

International data transfers

Our hosting and email infrastructure is located in Italy (European Union). If you access the service from outside the EU, your data is transferred to and processed in the EU for the purposes described above. Where we or our processors transfer personal data outside the EU/EEA (for example, via the payment provider), we rely on legally recognized transfer mechanisms such as Standard Contractual Clauses.

Cookies

The site uses technical cookies needed for it to work (keeping you signed in, remembering your language and your cookie choices), which don't require consent. Analytics and marketing cookies are used only if you consent to them through the cookie banner, and you can withdraw that consent at any time. See our Cookie Policy for the full list and details.

Retention

Your data is kept for as long as your account exists. When you delete your account, your profile, license data and consent records are deleted, except for anything we are legally required to keep for longer (for example, tax and accounting records). Accounts whose email address is never confirmed are deleted automatically after 30 days. Short-term security records of login and registration attempts are kept for 24 hours.

Your rights

You may at any time request access to, correction of, deletion of, or restriction on the processing of your data, object to processing, withdraw any consent you gave, or request data portability, by writing to privacy@aialbumstudio.com. If you are in the EU, you also have the right to lodge a complaint with your national data protection authority (in Italy, the Garante per la protezione dei dati personali). If you are outside the EU, you may have equivalent rights with your local data protection authority.

Changes to this policy

We may update this policy from time to time. The date of the latest update is shown at the top. If we make material changes, we will make reasonable efforts to notify active account holders.