Privacy Policy

Version 2026-07-27-r18 — last updated: 27/07/2026

This notice applies to DoggieAI, available at ai.doggieeducation.online and through the widget embedded in authorised websites. The other Doggie Education and DoggieHub platforms have their own notices.

1. Controller

The controller operates under the name Doggie Education, Italian VAT number 07083600481. For privacy matters: contattaci@doggieeducation.it — 055 0317729.

2. Personal data we process

  • Chat: submitted text, responses, recent history, a random conversation identifier and, for the widget, the host website domain.
  • Live sessions: real-time audio and, only when you enable the camera, camera frames; transcript, journey summary, duration and technical session data. DoggieAI does not retain audio or video recordings as files.
  • Security: non-reversible HMAC fingerprint of the IP address, abuse events and essential technical data.
  • Cookie preferences: choice, categories, notice version, random token, date, expiry, HMAC fingerprint of the IP address and essential browser information.
  • Analytics and campaigns, with prior consent: pages visited, referrer, campaign parameters, browser technical data, sign-up or contact events, purchase value and currency and a technical transaction identifier used to prevent duplicate counts.
  • Subscriptions and purchases: email, plan, price, renewal, usage, contractual acknowledgements and Stripe identifiers.
  • Withdrawal requests: name, confirmation email, identified contract, date and time, any notes and processing status.
  • Voluntary contact details: name, email or phone only if you ask to be contacted and confirm the request.
  • Staff area: administrative credentials, technical session and operations needed to manage the service.

We do not ask for the user’s health data or identity documents. Do not enter special-category data, unnecessary information about other people, card numbers or credentials in the chat. Information about a dog’s health is not normally personal data, but it may become personal data when linked to identifying details about the owner.

Chat content and contact details are provided directly by the user; technical, security and preference data are generated while the service is used. We do not purchase contact lists or enrich user profiles with personal data obtained from public sources.

3. Purposes and legal bases

  • Provide the free chat, Chat consultation and requested Live sessions: performance of the service and requested pre-contractual steps.
  • Activate subscriptions and manage purchases, renewals, access, withdrawal and support: performance of the contract and legal obligations.
  • Prevent abuse, protect accounts and infrastructure and diagnose failures: legitimate interest in the security and reliability of the service.
  • Record and demonstrate choices concerning optional technologies: compliance with data-protection obligations and legitimate interest in properly managing preferences.
  • Retain administrative and tax records: legal obligation.
  • Remember the free conversation on the device across visits when you choose “Preferences”: consent, withdrawable at any time.
  • Produce aggregate DoggieAI usage statistics when you choose “Analytics”: consent, withdrawable at any time.
  • Measure and attribute sign-ups and contacts to Google Ads campaigns, without ad personalisation, when you choose “Advertising measurement”: consent, withdrawable at any time.
  • Contact you at your request: consent or steps taken at your request before entering a contract, depending on the contact; you can ask us to stop contacting you at any time.

Age confirmation is required to access the configured AI services. We do not collect your date of birth; we record only the date of the declaration.

4. Required and optional data and consequences

Message text, acceptance of the Terms and acknowledgement of this notice are required to use the chat. Live needs browser microphone permission; the camera is optional. Without a microphone you cannot use Live, while refusing camera access does not prevent voice conversation. Purchases require an email, plan, pre-contractual confirmations and payment details requested directly by Stripe. Without this data we cannot provide the requested function or complete the purchase. Name, phone number, contact request, notes, persistent storage, Analytics and advertising measurement are optional; refusing them does not prevent informational chat use or a purchase.

5. Widget embedded in other websites

When DoggieAI appears on an authorised website, the widget code runs in the host page and sends Doggie Education, through DoggieAI, the text you choose to submit and strictly necessary technical data. Before the first message, the widget separates acceptance of the Terms from acknowledgement of the notices: the latter records that the information was shown and is not consent to processing necessary for the service.

The host website operator must describe the widget, storage created on its origin and the connection to DoggieAI in its own notices. If another party operates the website, the respective roles and any agreements depend on who actually determines the purposes and means of processing; the checkbox inside the chat does not replace that assessment.

6. How AI processing works

Before generation, Google Gemini converts the question into a numerical representation to find relevant knowledge-base content. The question, a limited part of the history and relevant extracts are then sent to the Gemini API. We do not send Google the personal access link or full card details; nevertheless, do not include unnecessary personal data in messages.

During Live sessions, audio and optional camera frames are sent to Google Gemini in real time to generate the spoken response. DoggieAI receives the transcript and may create a summary for continuity across modules. The camera sends periodic frames rather than a continuous recording; DoggieAI does not save audio or video files when the session ends.

Application rules and a selected knowledge base govern the output, but it remains probabilistic and may contain errors. DoggieAI does not make solely automated decisions producing legal or similarly significant effects on the user.

7. Recipients and providers

  • Google: paid Gemini API for the conversational model, Live audio/video, transcription, embeddings and semantic search; Google Analytics and Google Ads only with prior consent for statistics and conversion measurement.
  • Stripe: payments, fraud prevention, renewals, refunds and customer portal.
  • Other providers: hosting, email and technical support, only as needed for the service.

Providers act under their applicable roles and agreements. Stripe collects card details directly; DoggieAI does not store them.

The Gemini API is configured through a Cloud project with active billing and therefore as a Paid Service. Under the Gemini Terms effective 23 March 2026, Google does not use Paid-Service prompts and responses to improve its products and processes them under the applicable Data Processing Addendum. Abuse-monitoring documentation updated 9 June 2026 states that prompts, context and output are retained for 55 days solely for security, policy enforcement and legal obligations; flagged content may be reviewed by authorised personnel and is not used to train or fine-tune models other than models used specifically for policy enforcement.

DoggieAI enables Live session resumption to try to recover brief disconnections. Google states that, when a resumption handle is generated, conversation state, including text, audio and video, may be retained by the provider for up to 24 hours. Implicit in-memory caching, isolated by project, may also last up to 24 hours. DoggieAI does not use Grounding with Google Search or Maps, the File API, Interactions API or explicit caches and does not claim zero data retention at Google.

Gemini API Additional Terms · Google abuse-monitoring and retention information · Stripe Privacy Center

8. Transfers outside the European Economic Area

Google and Stripe may process data or permit access outside the European Economic Area. Paid-Service Gemini content is covered by the Data Processing Addendum referenced in the Terms, including transfer safeguards and standard contractual clauses where applicable. Stripe’s DPA and Data Transfers Addendum apply to Stripe processing and provide for the Data Privacy Framework and alternative mechanisms, including standard contractual clauses, where their conditions are met.

We do not automatically replace the AI provider. Any future provider, model or feature change affecting processing will first be assessed for roles, agreements, transfers and retention, and this notice will be updated where required.

9. Retention

  • Conversations and messages: up to 180 days after the last activity, unless needed to establish, exercise or defend a claim.
  • Live transcripts, summaries and metadata in DoggieAI systems: up to 180 days after the last activity; DoggieAI does not retain audio or video recordings as files.
  • Voluntary contact details: for the time needed to respond and no longer than 180 days, unless a later request or relationship applies.
  • Subscriptions, payments, withdrawal and contractual evidence: for the relationship and applicable administrative, tax and claims periods.
  • Queued email: encrypted content until sending; after sending, recipient and content are erased from the queue. Residual rows are removed by the configured cleanup cycle.
  • Cookie-preference register: up to 730 days to document choices, changes and withdrawals.
  • Analytics and Google Ads identifiers on the device: as described in the Cookie Policy and in any event until withdrawal or browser deletion; data received by Google follows account settings and service agreements.
  • Technical logs: rotated to limit size and duration, accessible only to authorised staff and retained for as long as needed for security and diagnosis.

Google’s and Stripe’s independent retention follows their agreements and settings; the Gemini-specific periods above also apply. Deleting data from DoggieAI systems does not erase records that must be retained by law or data a provider processes independently under its obligations.

10. Security

We use authenticated encryption for contact details, withdrawal requests and queued email; store personal links only as hashes; limit requests and devices; verify payment-webhook signatures; and use protected sessions, secret separation and administrative access controls. No measure removes every risk; incidents are handled under applicable procedures and obligations.

11. Your rights

You may request access, rectification, erasure, restriction, portability where applicable, object to processing based on legitimate interests and withdraw consent. Withdrawal does not affect the lawfulness of earlier processing. To exercise your rights, write to the address below; we may request only the information needed to verify identity and locate the data. contattaci@doggieeducation.it.

You may also lodge a complaint with the Italian Data Protection Authority.

12. Changes

We update this notice when processing, providers or applicable rules change. Material changes are identified by a new version and communicated to affected users where required.

← Back to home
Your privacy, clearly explained

We use necessary technologies for security and operation. With your consent, we can remember the Chat, measure site usage and attribute purchases to campaigns. Optional choices stay off until you enable them.

Necessary Security, session and operation in the current tab.
Always active
Cookie Policy You can change your choice at any time using the cookie icon.