1. Introduction
This Privacy Policy explains how IRLABS LTD ("Pristina.AI Solutions", "we", "us", or "our") collects, uses, stores, and protects your personal data when you use Autorun, our website at https://pristina.ai, and related services (collectively, the "Services").
By using the Services, you agree to this Privacy Policy. If you do not agree, please do not use the Services.
2. Who we are
Data controller:
IRLABS LTD
Trading as: Pristina.AI Solutions
Email: info@pristina.ai
3. What data we collect
We collect the following types of data:
- Account data: Email address, first and last name, company name (if applicable), profile picture (if uploaded), account preferences.
- Payment data: Billing address, VAT or tax identification number (for business customers). We do not store your payment card details — these are collected directly by Stripe.
- Content data: Prompts, text, images, sketches, 3D files, CAD files, textures, materials, reference images, and other content you upload to Autorun; generated images, renders, visualisations, and other outputs; project metadata such as file names, project titles, tags, and comments.
- Usage data: IP address, browser type and version, device type and operating system, pages visited, features used, generation requests, export actions, error logs, session duration.
- Communications data: Support tickets, feedback, and email correspondence.
- Cookies: We use cookies to operate, secure, and improve the Services. See Section 11.
4. How we collect your data
- Directly from you when you create an account, upload content, make a purchase, or contact us.
- Automatically through cookies, server logs, and analytics tools when you use the Services.
- From third parties when you authenticate via social login or connect third-party integrations.
5. Legal basis for processing
Under UK and EU data protection law, we process your personal data on the following legal bases:
| Purpose | Legal Basis |
|---|---|
| Providing and maintaining the Services | Contractual necessity |
| Processing payments | Contractual necessity |
| Customer support | Contractual necessity |
| Service improvement and analytics | Legitimate interests |
| Marketing communications | Consent |
| Legal compliance and fraud prevention | Legal obligation |
| AI model training (free/trial users only) | Consent or legitimate interests, as applicable |
You can withdraw consent at any time by contacting info@pristina.ai.
6. How we use your data
- To create and manage your account.
- To process your generation requests and produce outputs.
- To store and retrieve your projects and assets.
- To enable collaboration features and workspaces.
- To monitor service performance and troubleshoot issues.
- To develop analytics and aggregated usage insights.
- To conduct security monitoring and fraud prevention.
- To communicate with you about service updates and support.
- To send marketing communications (only with your consent).
- To comply with legal obligations and enforce our Terms of Business.
AI model development: For free, trial, promotional, and educational users, we may use content to test and improve the Services. For paid Enterprise Plan users, we will not use your content to train our public models unless your order form or a separate agreement expressly permits it.
7. AI-generated content
Autorun uses artificial intelligence to generate outputs from your inputs. Important points:
- Autorun generates design visualisations and renders based on your creative inputs. It does not make decisions about individuals that produce legal or similarly significant effects.
- If you upload images containing identifiable individuals or include personal information in your inputs, you are responsible for ensuring you have a lawful basis to do so.
- AI-generated outputs may visually resemble real people, places, or objects. These are probabilistic generations, not reproductions of personal data from our training data.
- Where outputs are AI-generated, we indicate this where required by applicable law.
8. Data retention
| Data Category | Retention Period |
|---|---|
| Account data | Until account deletion, or 12 months after last activity if inactive |
| Content (inputs and outputs) | Until you delete it, or until account termination |
| Payment records | 7 years (legal requirement) |
| Usage logs and analytics | 12 months |
| Support communications | 3 years |
| Marketing consent records | Until consent is withdrawn |
After the retention period, we securely delete or anonymise your data. We may retain anonymised or aggregated data indefinitely for analytics.
9. Data sharing
We share your data only where necessary:
- Service providers: We use third-party providers for hosting, payment processing, analytics, and email delivery. All providers process data only on our instructions and under appropriate contractual safeguards.
- AI model providers: Your inputs may be processed by third-party AI model providers to generate outputs. These providers act as subprocessors under our instructions.
- Legal and regulatory: We may disclose data if required by law, court order, or regulatory request, or to protect our rights, property, or safety.
- Business transfers: If IRLABS LTD is involved in a merger, acquisition, or asset sale, your data may be transferred as part of that transaction. We will notify you before your data becomes subject to a different privacy policy.
- With your consent: We may share data with third parties where you have given explicit consent.
10. Payment processing
We use Stripe to process payments. Stripe collects your payment card details directly. We do not store or have access to your full card number.
Stripe processes your data in accordance with its own privacy policy and is certified to PCI-DSS standards.
11. Cookies
We use cookies to:
- Operate the Services (authentication, security)
- Remember your preferences and settings
- Understand how the Services are used and improve them
- Deliver relevant communications (with consent)
You can manage your cookie preferences through your browser settings or our cookie banner. Essential cookies cannot be disabled.
12. Data security
We implement technical and organisational measures to protect your data, including encryption of data in transit and at rest, access controls, and regular security monitoring.
No system is completely secure. You are responsible for maintaining the confidentiality of your account credentials.
13. Your rights
You may have the following rights under applicable data protection law:
- Access: Request a copy of the personal data we hold about you.
- Rectification: Request correction of inaccurate or incomplete data.
- Erasure: Request deletion of your data.
- Restriction: Request limitation of processing in certain circumstances.
- Portability: Request transfer of your data to another service.
- Objection: Object to processing based on legitimate interests.
- Withdraw consent: Withdraw consent where processing is based on consent.
To exercise your rights, contact info@pristina.ai. We will respond within one month.
You can delete your account and associated data through your Account settings. We will delete your data within 30 days, except where we are legally required to retain it.
14. Your responsibilities
You are responsible for:
- Ensuring you have lawful grounds to upload any personal data about third parties.
- Obtaining necessary consents or permissions.
- Not uploading sensitive personal data unless your Plan permits it and you have a lawful basis.
15. Children's privacy
The Services are not intended for children under 16. We do not knowingly collect personal data from children under 16. If you believe we have collected such data, contact us at info@pristina.ai and we will delete it.
16. International data transfers
Your data may be transferred outside the UK and European Economic Area. When we do so, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or equivalent mechanisms approved under applicable law.
You can request a copy of the safeguards we use by contacting info@pristina.ai.
17. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. For material changes, we will notify you by email or through the Services at least 30 days before the changes take effect.
18. Contact us
IRLABS LTD
Trading as: Pristina.AI Solutions
Email: info@pristina.ai