Navigation
Home About Legal Upcoming Contact
Account
Customer Login Get Started
Follow Us
Facebook
← Back to Legal
Casper AI
General Data Protection Regulation (GDPR)
Our compliance with GDPR, including how the memory feature interacts with your data rights.
📅 Published: 2026-08-15
🔄 Last Updated: 2026-08-24
📑 Sections: 8
Section 1
Introduction
This section outlines how Casper AI, operated by Super Technology Studios and Casper Global, complies with the EU/UK General Data Protection Regulation (GDPR), where applicable to users in the EU/UK or otherwise covered by GDPR.
Section 2
Legal Basis for Processing
We process personal data on the following legal bases: performance of a contract (providing the Service), legitimate interests (improving and securing the Service, powering the memory/recall feature), consent (where required, e.g. marketing communications), and compliance with legal obligations.
Section 3
Data Controller & Processor Roles
Super Technology Studios / Casper Global acts as the Data Controller for account, billing, and conversation data associated with your use of Casper AI.
Section 4
Conversation Memory & GDPR
Casper AI stores and searches your conversation history to enable persistent memory across sessions. This constitutes ongoing processing of personal data you provide. You may exercise your rights under this section (including erasure) over your conversation history through your account settings or by contacting us.
Section 5
Your Rights Under GDPR
If GDPR applies to you, you have the right to: access your personal data; rectify inaccurate data; request erasure ("right to be forgotten"), including deletion of stored conversation history; restrict or object to processing; data portability; and withdraw consent at any time where processing is based on consent. Requests can be made via our Contact page and will be responded to within statutory timeframes (generally 30 days).
Section 6
International Data Transfers
Where personal data is transferred outside the EU/UK (including to our infrastructure in Australia), we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) or equivalent mechanisms to ensure adequate protection.
Section 7
Data Protection Officer / Contact
For any GDPR-related inquiries or to exercise your rights, contact us via the details provided on our Contact page.
Section 8
Data Breach Notification
In the event of a personal data breach likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours where required, and notify affected individuals without undue delay where the breach poses a high risk.