Effective Date: July 3, 2026 Version: 3.1
OneClick AI Solutions s.r.o., with its registered office at Sokolovská 428/130, Karlín, 186 00 Prague 8, ID No. (IČO): 23948353, Tax ID (DIČ): CZ23948353, registered with the Municipal Court in Prague under file no. C 435717 (hereinafter the "Company"), takes care to protect the personal data you provide to us. It is important that you know that we process the personal data you provide responsibly and transparently, and that you have the right to request information about the personal data on record, its correction, or erasure, where it is given on the basis of consent granted by you. Should you have any questions regarding the processing of your personal data, you may contact us in writing at the company's registered office.
The Company processes personal data in accordance with the law and, as the controller, requires only such personal data as is necessary for the performance of its activity, which is the provision of a leisure-time communication service with artificial intelligence (AI Characters) on the domain www.sweetbun.ai. Personal data is recorded for the period stipulated by law, or for the period strictly necessary to fulfil a particular purpose required to ensure the operation of the offered services, or until consent is withdrawn, where the data is recorded on the basis of consent.
We use personal data in particular for the purpose of verifying identity and age, logging in to the user account, linking the user account with social network profiles, processing payments, resolving technical issues, answering inquiries, protecting the platform against misuse, and for the purpose of promoting our platform.
The Company records the following personal data: first and last name, address, date of birth, bank details, email, IP address, …
Some personal data must be shared with the company operating the Finby payment gateway, and in the event of linking the user account with social networks (at the user's own decision), personal data is also shared with the relevant social network (Google, Discord, X – Twitter). If payment is made via the cryptocurrency payment provider CoinGate, we do not process any personal data.
The Company takes care of the security of the personal data you provide to us. We have adopted appropriate technical and organizational measures to sufficiently protect your data with regard to the seriousness of its processing. No unauthorized person has access to your personal data that we have obtained from you, and we do not pass it on to other entities for further processing without your consent, unless required by law or except in the cases set out in these policies.
Data containing personal data is shared with operators of virtual servers, providers of the database platform, and the platform of the companies Vercel (Vercel Inc.), Supabase (Supabase Pte. Ltd.), Upstash (Upstash, Inc.).
You have the right to request information from the Company about what personal data, to what extent, and for what purpose we process about you. We will provide this information free of charge within 30 days at the latest, and in exceptional situations within 90 days at the latest. We will inform you in good time about any extension of the period in exceptional cases. If you request the disclosure of the information we hold about you, we will first need to verify that you are indeed the person to whom this information belongs. Therefore, please provide sufficient identification of your person in your request. If necessary, we have the right to request additional information for your identification before we provide you with the personal data we process about you.
We have the right to refuse requests for information that are unfounded or unreasonably repetitive, or whose obtaining requires disproportionate effort or would be difficult to obtain (typically from backup systems, archives, etc.).
We retain personal data for the period of providing the services. After an account is closed (or after a longer period of inactivity), we retain the account, content, and media (chats, images, videos, custom AI Characters, and AI memories) for up to 3 years from the user's last activity and then delete them; you may request earlier complete erasure at any time. Financial, subscription, and accounting records (orders, payments, billing details, and aggregated usage indicators) are retained for the purposes of resolving claims for refunds or complaints, resolving disputes, preventing fraud, and complying with legal obligations, for the period stipulated by the legal regulations of the Czech Republic — accounting and tax documents for at least 10 years under VAT law.
If you believe that we do not process your personal data in accordance with the applicable legislation of the Czech Republic and the Union, you have the right to raise an objection, and we will subsequently examine the legitimacy of your request. We inform you that you also have the right to lodge an objection regarding the processed personal data we process about you with the competent supervisory authority for the protection of personal data at the address:
Office for Personal Data Protection (Úřad pro ochranu osobních údajů) Pplk. Sochora 27 170 00 Prague 7
If you have ever granted us consent to process your personal data (for example, for marketing purposes), you have the right to withdraw it at any time, and we are obliged to erase the data we process solely on the basis of your consent. The right to erasure does not apply to data processed within the framework of the obligation to perform a contract, legal grounds, or legitimate interests. If some of your data is retained in backup systems that automatically ensure the resilience of all our systems and serve to protect against data loss in the event of disasters, it is not within our power to erase this data also from the backup systems, and frequently this is not even technically feasible. However, this data is not further actively processed in any way and will not serve any further processing purposes.
You may also direct your questions on personal data protection to the email support@sweetbun.ai.
OneClick AI Solutions s.r.o., with its registered office at Sokolovská 428/130, Karlín, 186 00 Prague 8, ID No. (IČO): 23948353, Tax ID (DIČ): CZ23948353, registered with the Municipal Court in Prague under file no. C 435717 (hereinafter the "Company"), provides users with a service in the form of communication with software – artificial intelligence (AI) – for entertainment and for the purpose of leisure time (hereinafter the "Service").
All communication (telephone, written, using images) by the user within the Service constitutes machine-generated content, in which the user communicates solely with the Software – artificial intelligence (hereinafter "AI").
It is therefore exclusively and solely up to the user's choice and decision what kind, form, or content of communication with the AI they choose. In general terms, however, with regard to the standardly accepted principles of security in the field of information technology and artificial intelligence, users are strongly advised not to share sensitive data (e.g., payment card numbers, names and dates of birth of the user's children, etc.) within the communication with the AI.
The Company is aware that, with regard to the purpose of communication with the AI, which is entertainment and relaxation, the information communicated by users may be of a highly confidential and intimate nature and may contain users' personal data.
All content data (User Content), such as text prompts, chat conversations with AI Characters, AI Character preference settings (appearance, voice, personality), uploaded images, or voice inputs, are confidential, and the Company takes care to protect users' privacy.
The Company takes care to ensure users' privacy and, within the ordinary operation of the Service (unless otherwise stated below), the Company does not have access to the content of users' communication. The Company only, within the given user account, monitors in general terms the facts needed to manage and ensure the operation of the application, namely user interactions, session length, generation history, token status, etc.
In order to ensure the authenticity and attractiveness of communication, machine procedures for automated processing (profiling) of communication are used in providing the Service, aimed at personalizing the responses of AI Characters according to users' preferences.
The meaning and purpose of the Service provided by the Company through the AI is personalized communication of the software with the user, and to achieve this purpose, analysis of users' emotions and the training and improvement of the AI automatically take place within the given behavioural and contextual environment created by the user based on their inputs (prompts).
However, the Company reserves the right, for the purpose of ensuring the safe operation of the Service and checking compliance with legal regulations, to monitor the content of users' communication, both using automated tools and, in justified cases, also by means of manual review. In the case of machine review, this concerns in particular the use of automated tools for the detection of prohibited or objectionable content that is contrary to the terms of use of the Service.
Although the content of communication is purely private, it may exceptionally, in certain specific cases, happen that the Company secures access to the user's communication. This concerns in particular the following cases:
In such a situation, the Company will review only the necessary segment of the conversation for the purpose of verifying compliance with the Terms of Use of the Service.
Within the framework of ensuring the operation of the Service, the Company uses third-party software products and tools. The user acknowledges that text or image inputs (Prompts) are automatically sent to these operators for the purpose of generating the AI's response and the requested reaction.
At the level of the functioning of the AI, these are operators who, within the Service, enable the translation and processing of text conversations (chat), the generation of images and videos, and the generation of voice outputs and voice calls with AI Characters.
For the operation of the application itself, providers of hosting services and database storage are used. The database storage is standardly secured and the data encrypted.
For the purpose of traffic analysis, conversion measurement, audience building, and affiliate referral tracking, third-party software products are also used.
In all cases, these are verified and established information technology operators who take care of the protection of users' data and have data and personal data protection terms in place. However, the user acknowledges that these providers may also be established outside the territory of the European Union.
Upon cancellation of the user account, your access is disabled and you can no longer log in, and the email address is released for re-registration. The information and data entered into the AI (chats, images, videos, AI Characters, etc.) are not deleted immediately — we retain them for up to 3 years from the user's last activity and then delete them, or erase them earlier upon your explicit request (see "Data Retention" above).
The Company bears no responsibility for damage or harm caused by the loss or deletion of the user's data entered into the AI.