Privacy Policy
Last updated: 23 October 2026
This policy explains what personal data AI Store Plus collects, why, who we share it with, how long we keep it and what your rights are. It is written to meet the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. If you live in Türkiye, please also read our KVKK notice.
1. Who is responsible for your data
The controller is Corelix Software Limited, trading as AI Store Plus, registered in England and Wales (company number 17156660), Office 18421, 182-184 High Street North, East Ham, London, E6 2JA, United Kingdom. For any privacy question or request, email info@aistoreplus.com or use the contact form on our Contact page.
2. What we collect
| Data | When |
|---|---|
| Name and email address | When you place an order, create an account, register a pre-order or contact us |
| Phone number (optional) | Only if you choose to give it at checkout or on a pre-order |
| Order details: products, prices, currency, order status, delivered product details, guarantee claims, and the record of the consent you give at checkout | When you buy and when we deliver or handle a claim |
| Account email or username for activation | Only for invitation and upgrade products that need it |
| Email address and password of your own account to be upgraded | Only for products that upgrade your own account (for example the Zoom Pro package that upgrades your own account), at checkout. The password is stored encrypted, used only to carry out the upgrade and shown only to authorised staff. The email address is kept with the order record. |
| The account’s current password in a warranty claim | Only on some products whose password may be changed, and only if you have changed it. It is stored encrypted and used only to check the account. |
| Card payment result: Shopier order number, amount, currency and status | When you pay by card. You enter your card details on Shopier’s payment page; they never reach our server and we do not store them. |
| Crypto payment details: transaction ID (TxID) or Binance order ID, the sending address shown on the blockchain, the amount and the network | When you pay with crypto, to verify the payment |
| Google account name and email | Only if you choose to sign in with Google |
| Messages to the AIStore Assistant | When you use the chat (see section 5) |
| Technical data: IP address, browser type, pages requested, cookies | When you visit the Site. For rate limits on the assistant and pre-order forms we store only a keyed hash of your IP address, not the address itself. |
| Your cookie choice and a consent record | When you make a choice in our cookie banner. Your choice is stored in the “asp_ck” cookie, and we keep a consent record (time, choice, and a hash of your IP address and browser details) as proof. |
| Meta Pixel events: page view, product view, add to cart, checkout start, purchase | Only if you accept marketing cookies in our cookie banner (see section 10) |
| Emails and contact form messages you send us | When you contact support |
3. Why we use it and our legal basis
| Purpose | Legal basis (UK GDPR art. 6) |
|---|---|
| Taking your order, taking and verifying your payment, delivering the product (including carrying out the upgrade for products that upgrade your own account), sending delivery emails, handling guarantee claims and refunds | Performance of a contract |
| Running your account and order history | Performance of a contract |
| Keeping accounting and tax records, and the record of the consent you give at checkout | Legal obligation |
| Preventing fraud and abuse, securing the Site, rate-limiting forms and the assistant | Legitimate interests |
| Answering your questions by email, through the contact form or through the AIStore Assistant | Legitimate interests, or steps you ask for before a contract |
| Emailing you when a pre-ordered product is back in stock | Consent, given when you submit the pre-order form; you can withdraw it at any time |
| Storing your cookie choice and keeping proof of your consent | Legal obligation (UK GDPR and PECR require us to be able to show consent) |
| Measuring and personalising Meta advertising, if you accept marketing cookies | Consent, which you can withdraw at any time |
We do not sell your data. Unless you accept marketing cookies, we do not use it for advertising, and we do not send marketing emails without your consent.
4. Who we share it with
- Shopier, which processes card payments.
- Hostinger, which hosts the Site and our email.
- Product suppliers, only when needed to deliver a specific order, for example your email address for an invitation or the account username needed for an upgrade. We never pass on payment details.
- An AI model provider (OpenRouter, routing to Anthropic in the United States), to generate replies in the AIStore Assistant.
- Google, only if you choose to sign in with Google.
- Meta Platforms (Meta Pixel), only if you accept marketing cookies in our cookie banner. Your browser then sends Meta these events: page view, product view, add to cart, checkout start and purchase. We do not currently send any data to Meta from our server.
- Professional advisers, authorities or courts where the law requires it.
5. The AIStore Assistant
When you chat with the AIStore Assistant, your messages and the page you are on are sent to our AI provider (OpenRouter, routing to Anthropic) to generate a reply. We do not store the content of your messages on our servers; we keep only counters (such as the number of requests) and a hashed IP address for rate limits. Your conversation is kept in your browser’s session storage so it survives page changes, and is cleared when you close the browser session. Please do not share passwords, card details or sensitive information in the chat.
6. Telegram
We also sell through a Telegram bot. That is a separate channel: if you use it, Telegram processes your data under its own terms, and the data you give in the bot is handled for the same purposes described here.
7. International transfers
Some providers process data outside the UK: OpenRouter and Anthropic in the United States; Meta in the United States and Ireland, only if you accept marketing cookies; and Shopier in Türkiye for card payments. Where a country does not have a UK adequacy decision, we rely on appropriate safeguards such as the UK International Data Transfer Addendum or the UK Extension to the EU-US Data Privacy Framework.
8. How long we keep it
| Data | Retention |
|---|---|
| Orders, invoices and payment records | Up to 10 years, to meet UK and Turkish accounting and tax rules |
| Password given for an account upgrade | Deleted 32 days after the order, or when the order is cancelled or refunded |
| Password given in a warranty claim | Deleted when the claim is closed, or after 30 days at the latest |
| Site account | Until you ask us to delete it (order records are kept as above) |
| Pre-order registrations | Until we notify you or you cancel, then 1 more year |
| Support emails | For as long as needed to resolve your request and any follow-up |
| Assistant chat content | Not stored by us |
| Server and security logs | About 30 days |
9. Your rights
You can ask to access your data, correct it, delete it, restrict or object to its use, receive it in a portable format, and withdraw consent at any time. Email info@aistoreplus.com from the address linked to your order. We reply within one month. If we must keep some records by law, we will tell you.
You can also complain to the Information Commissioner’s Office (ICO), ico.org.uk. We would appreciate the chance to deal with your concern first.
10. Cookies
We use cookies needed to run the shop. Marketing cookies (Meta Pixel) run only if you accept them in our cookie banner. Your choice is stored in the “asp_ck” cookie, and you can change or withdraw it at any time with the cookie preferences link at the bottom of every page. See our Cookie Policy.
11. Security
The Site uses HTTPS. Site login passwords are stored in hashed form, and account passwords you give for an upgrade or a warranty claim are stored encrypted. Card payments are taken on Shopier’s payment page, and access to order data is limited to staff who need it.
12. Children
The Site is not intended for children under 18 and we do not knowingly collect their data.
13. Changes
We will publish any changes on this page and update the date above.
