Privacy Policy

1. Data Controller

The controller of personal data processing is:

Full company details are available through the official public registers.

2. Types of Data Processed

3. Purposes of Processing

Personal data are processed for the following purposes:

• provision of the Drusilla services (demo, free and pro);
• management of the user account;
• saving of settings and generated content;
• monitoring and improvement of the quality of the AI assistant's answers;
• security of the service and prevention of improper use;
• compliance with legal obligations.

4. Legal Basis of Processing

The processing of data is based on:

• performance of a contract or pre-contractual measures;
• consent of the user, where required;
• legitimate interest of the controller in the security and continuity of the service.

5. Methods of Processing

Processing is carried out by means of IT tools, in compliance with the principles of lawfulness, fairness and transparency, adopting technical and organizational measures adequate to ensure the security of the data.

6. Use of Artificial Intelligence Technologies

Drusilla uses artificial intelligence technologies to provide informational and decision-making support to users.

Processing is carried out through Gemini API, including File Search features, provided by Google LLC.

The data sent to the AI services:

• are limited to what is necessary for the provision of the service;
• are not used for Drusilla marketing purposes;
• are not intended for the direct identification of the end user.

7. Third-Party Services

Third-party providers may be used for the operation of the service, including:

These parties act as data processors pursuant to Art. 28 GDPR, with the exception of Telegram Messenger Inc. and Meta Platforms Ireland Ltd., which, for the transmission of messages on their respective platforms, act as independent data controllers, in accordance with their own privacy policies.

8. Telegram and WhatsApp Chat Channels

Registered users may also use Drusilla through chat channels on Telegram and WhatsApp, subject to the voluntary activation of the link from the application. In this case, the following are processed: the Telegram chat identifier or the WhatsApp phone number, the name or username of the messaging profile, the association with the Drusilla account and the content of the conversations (questions, any locations shared for the soil analysis and restricted areas verification services, the assistant's answers).

• messages transit through the servers of the respective platforms (Telegram Messenger Inc. and Meta Platforms Ireland Ltd. for WhatsApp), which process them as independent data controllers in accordance with their own privacy policies;
• the legal basis of the processing is the performance of the contract: the channel responds exclusively to the user's requests and is not used for unsolicited promotional communications;
• any location shared in the chat is used solely to process the requested answer and is recorded in the service logs; no continuous location tracking is carried out;
• the logs of chat conversations follow the same retention terms as the AI assistant logs indicated in this policy;
• the link can be removed at any time by writing to privacy@drusilla.ai; removal does not delete the Drusilla account.

9. Transfer of Data to Non-EU Countries

The use of services provided by Google LLC and, in case of activation of the chat channels, by Telegram Messenger Inc. and Meta Platforms, may involve the transfer of data to countries located outside the European Union.

Such transfers take place in compliance with the GDPR, through the adoption of Standard Contractual Clauses (SCC) or other safeguard instruments provided for by the applicable legislation.

10. Data Retention

Personal data are retained:

• for the time necessary for the provision of the service;
• for the period required by legal obligations;
• for security and abuse prevention purposes.

11. Rights of the Data Subject

The user may exercise the rights provided for by Arts. 15-22 of the GDPR, including:

The user also has the right to lodge a complaint with the competent supervisory authority (in Italy, the Garante per la protezione dei dati personali).

12. Account Security

The user is responsible for the confidentiality of their access credentials.

For security reasons, only one active session per account is allowed. A new login automatically invalidates the previous session.

13. Cookies and Similar Technologies

Drusilla uses technical and functional cookies strictly necessary for the operation of the service.

Detailed information on the use of cookies is available in the Cookie Policy.

14. Changes to the Privacy Policy

This Privacy Policy may be updated at any time.

Changes will be published on this page and will take effect from the date of publication.

15. Contacts

For information regarding the processing of personal data or to exercise the rights provided for by the GDPR, the user may contact the data controller: