Privacy Policy
1. Data controller
The controller determines why and how the personal data of Rewrite Mentor users is processed. No data protection officer has been appointed. You may send all requests to the email address stated above.
2. Personal data we process
- Registration and contact data: primarily your email address and, where applicable, your name and the information provided in the registration form.
- Telegram account data: your Telegram identifier, username, and other information that Telegram makes available to the bot according to your settings.
- Conversation content: your messages, AI responses, related context, and any information you enter into the conversation.
- Service data: selected plan, activation status, limits, usage history, timestamps, and technical operational records.
- Order and payment data: selected plan, price, payment status, billing and accounting data. Full payment card details are processed by Stripe and are not normally received by the controller.
- Support communications: your email address, the content of your request, attachments, and related support history.
- Website technical data: IP address, device and browser type, request time, and security or server logs.
3. Purposes and legal bases for processing
| Purpose | Typical data | Legal basis |
|---|---|---|
| Registration, activation, and provision of the service | Email, Telegram ID, plan, conversations, operational data | Performance of a contract and pre-contractual steps – Article 6(1)(b) GDPR |
| Processing orders, payments, and accounting | Order, payment, and billing data | Performance of a contract and compliance with a legal obligation – Article 6(1)(b) and (c) GDPR |
| Support, security, and prevention of misuse | Contact data, communications, technical logs | Performance of a contract and legitimate interest in secure operation – Article 6(1)(b) and (f) GDPR |
| Establishing, exercising, and defending legal claims | Contract, payment, and communication data | Legitimate interests – Article 6(1)(f) GDPR |
| Optional newsletter and marketing | Email and, where applicable, name and responses to messages | Consent or, where applicable, the statutory existing-customer exception – Article 6(1)(a) or (f) GDPR |
Providing the data required for registration, activation, and payment is a contractual requirement. Without it, the service cannot be made available. Data used exclusively for marketing is voluntary.
4. Artificial intelligence and conversation content
Rewrite Mentor is an AI system, not a human. Message content is analysed automatically so that the system can generate a response and continue from previous conversations. The technical platform is BuddyPro, operated by Buddy.FM Ltd.
- BuddyPro uses long-term memory and retains the context of previous messages to personalise subsequent responses.
- Inputs may be temporarily processed through APIs by one or more supported AI providers.
- According to BuddyPro’s terms, inputs are not used to train third-party general-purpose models.
- AI may produce inaccurate, incomplete, or inappropriate responses. You should assess all outputs critically.
Personalisation of responses does not constitute automated decision-making that produces legal or similarly significant effects concerning the user within the meaning of Article 22 GDPR.
5. Recipients and processors
Personal data may be disclosed, to the extent necessary, to the following recipients:
- Buddy.FM Ltd (BuddyPro), United Kingdom – operation of the AI platform, memory, databases, and routing of AI requests.
- Telegram – communication channel between the user and the bot. Telegram also processes data under its own terms.
- SmartSelling a.s. (SmartEmailing), Czech Republic – registration form, activation, and any related email communications.
- Stripe – processing of payments, subscriptions, and related fraud prevention.
- Website and email hosting providers, accounting service providers, and professional advisers – only to the extent necessary to operate the service or comply with legal obligations.
Under its current configuration, BuddyPro uses additional sub-processors, in particular Amazon Web Services, Google, Pinecone, and AI model or API providers that may include OpenAI, Anthropic, Google, Perplexity, xAI, and OpenRouter. BuddyPro’s current list is available on its Sub-Processors page.
6. Transfers outside the EEA
Some providers operate in the United Kingdom, the United States, or other countries outside the European Economic Area. Transfers take place only to the extent necessary to operate the service.
BuddyPro states that the main storage used for database, file, and vector data is located in the European Economic Area. AI requests may, however, be temporarily processed outside the EEA. Depending on the recipient, such transfers rely on adequacy decisions, the EU–US Data Privacy Framework, or the European Commission’s Standard Contractual Clauses.
Independent processing carried out by Telegram, Stripe, or another platform is also governed by that platform’s own privacy policy.
7. Retention periods
- Account, activation, and contract data: for the duration of your use of the service and then generally for three years to address legal claims.
- Conversations and long-term memory: for the period of active use and for as long as necessary to provide the personalised service; they may be deleted on request unless a legal obligation or the protection of legal claims prevents deletion.
- BuddyPro backups: following a deletion instruction, they may remain for up to 90 days under the platform’s terms.
- Accounting and tax records: for the period required by law, typically up to 10 years.
- Support and routine enquiries: for the duration of the matter and generally no longer than one year after the communication ends, unless longer retention is necessary.
- Marketing: until consent is withdrawn, an objection is made, or another authorisation to send messages ends.
- Technical logs: for as long as reasonably necessary for security, diagnostics, and prevention of misuse.
A specific period may be extended where the data is necessary for an ongoing dispute, an audit, or compliance with a legal obligation.
8. Activation and marketing communications
Activation emails and information about your account, payments, service changes, and security are operational communications necessary to provide the service. They are not an optional newsletter.
Marketing messages will only be sent where there is a valid legal basis. You may withdraw your consent at any time by using the unsubscribe link in the message or by emailing david@rewritementor.cz. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
10. Your rights
Subject to the conditions of the GDPR, you have the right in particular to:
- obtain confirmation as to whether your data is being processed and request access to it and a copy;
- request the correction of inaccurate data or the completion of incomplete data;
- request erasure or restriction of processing where the legal conditions are met;
- receive your data in a machine-readable format and exercise the right to data portability;
- object to processing based on legitimate interests; you may object to direct marketing at any time;
- withdraw consent at any time where processing is based on consent;
- lodge a complaint with the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, Czech Republic, uoou.gov.cz.
Send your request to david@rewritementor.cz. To protect your data, we may verify your identity using reasonable means. We will respond without undue delay, generally within one month.
11. Data security
We use appropriate organisational and technical measures that reflect the nature of the service and the risks of processing. Access to data should be limited to persons and suppliers who need it to operate the service or comply with legal obligations.
No internet-based system can, however, be considered completely secure. A Telegram bot is not a Telegram Secret Chat with end-to-end encryption. Therefore, do not enter passwords, payment card details, official identifiers, or other information whose disclosure would pose an unreasonable risk to you.
12. Persons under 18
Rewrite Mentor is intended only for persons aged 18 or over. If we learn that a younger person is using the service, or that their personal data has been provided to us without appropriate authorisation, we will take reasonable steps to restrict access and delete the data.
13. Changes to this Policy
We may reasonably update this Policy, in particular when the service, the suppliers involved, or legal requirements change. The current version will always be available on this website together with its effective date. We may also notify users of material changes by email or through the service.
Related rules for using the service are set out in the Terms of Use.