GDPR Compliance

We process personal data lawfully, fairly, and transparently. We only collect what is necessary and use it solely to deliver and improve the Services, including powering Co-Pilot "Rex" to provide inventory insights, sales forecasting, email automation, supplier management, competitor scanning, and all other features.

We rely on the following lawful bases:

You have the following rights under GDPR. To exercise these rights, contact us at info@destinyai.com. We respond to verified requests within 30 days, or as required by law.

Data may be transferred and processed in the United States. We use appropriate safeguards, including Standard Contractual Clauses, to ensure your data receives the same level of protection as required under GDPR.

We implement industry-standard technical and organizational measures to protect Co-Pilot "Rex" and your personal data. However, no system is completely secure.

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by law.

Active account and subscription information is retained for the duration of the Subscription plus thirty (30) days after termination or cancellation.

Customer business data, including inventory records, sales data, forecasts, emails, and related records, is retained for the duration of the Subscription plus sixty (60) days after termination or cancellation to allow for account recovery, dispute resolution, and compliance purposes.

Anonymized or aggregated data that does not identify an individual may be retained indefinitely for product improvement and analytics.

System logs and audit trails are retained for up to twelve (12) months for security and regulatory compliance.

After the applicable retention period, we will securely delete or irreversibly anonymize the data, unless retention is required by law. For full details on data deletion upon termination, please refer to the Customer Agreement.

Our Services are not directed to children under 18. We do not knowingly collect or process personal data of children.

We may update this GDPR Compliance page and will post the new version with a revised effective date. Continued use of the Services after changes constitutes acceptance.

For any GDPR-related questions, requests, or complaints, please contact our data protection team.