Privacy notice

Scope and controller

This page covers the SoAI website and direct support contacts. It does not describe collection from a running, self-hosted SoAI installation.

Roberto Martini is the controller for website and direct support records. Telephone: +393500342078. Privacy requests: privacy@soai.to.

Website records and optional analytics

Minimized server logs, security and audit events, and backup evidence support the legitimate interests in securing and recovering the website, investigating abuse, and establishing or defending legal claims. Source-IP records used for website abuse detection do not identify unique users.

Optional first-party analytics is disabled until affirmative consent. Consent records and optional analytics events measure public-site use under Article 6(1)(a) GDPR. Consent may be withdrawn, and declining optional analytics does not prevent use of the website. No analytics data is sent or sold to an analytics provider.

Essential session and security storage supports requested website features. Installer and update counters measure requests rather than completed installations.

Direct contacts and providers

Contact details and material you send in a support case are used to respond to the request, investigate issues, and protect the service. Do not send private credentials or unrelated personal information.

Cloudflare provides public DNS, reverse-proxy, traffic-security, and delivery services when a request reaches the public website. Purelymail processes direct support email. The origin service is operator controlled. Professional advisers and public authorities receive data only when needed for a specific professional or legal duty.

For a restricted transfer made by Roberto Martini, the applicable basis will be an adequacy decision or the European Commission's standard contractual clauses. A copy of the applicable safeguard may be requested at privacy@soai.to.

Retention and rights

For website abuse detection, encrypted source-IP captures are retained for 30 days. Separate keyed, pseudonymous request matching is retained for 90 days from each request; a new request does not extend older request history. Readable-IP expiry does not end matching within that window. Shared or changing IP addresses mean these records do not identify unique users. Installer and update counters measure requests rather than completed installations, and update checks include the client-reported installed version without an installation identifier or completion callback. Nonidentifying aggregate counts may be retained beyond these periods. In concrete terms: identifying web server and application logs, failed or unclaimed credential-delivery material, expired checkout intents, and unactivated evaluation reservations are deleted within 30 days, and routine backups containing them age out within 30 days on the same cycle. Diagnostic material attached to a support case is deleted 30 days after the case closes, unless it is subject to an open dispute, a security investigation, or a legal hold. Administrative access logs are kept for six months, the minimum retention Italian rules impose on system-administrator access records, and are deleted after it. Support time entries, which exist only to account for the included and prepaid balance, are kept for the paid term and afterwards with the accounting records. Order, invoice, payment-reference, and accounting evidence is kept for ten years from the last entry, as Italian accounting law requires. Licensing identity, acceptance records, entitlement history, and the signed audit chain are kept while the entitlement exists and for ten years afterwards, matching the ordinary Italian limitation period for contract claims. Analytics consent records are kept while consent stands and for 30 days after it is withdrawn. Where one record falls into several categories the longest applicable period governs, and anything under legal hold is kept until the hold ends.

Depending on applicable law, people may request access, correction, erasure, restriction, portability, or objection; withdraw consent without affecting earlier lawful processing; and complain to a supervisory authority, including the Italian Garante per la protezione dei dati personali and the authority of the EU or EEA country where they live, work, or believe the issue arose. Some records must remain for legal claims, fraud prevention, or other legal duties. Identity is verified proportionately before disclosure.

Material privacy changes are communicated through this page and, where required, directly. Access separation, encryption where appropriate, scoped credentials, integrity checks, bounded logs, backups, restoration tests, and incident procedures protect records in proportion to risk. No system is described as absolutely secure.

Legal notice version 1.0 · effective 22 August 2026.

Use your browser’s print command for a print-ready copy.