AML Precheck

Privacy Policy

Effective date: 21 October 2026

This policy explains how personal data is handled when you use the AML Precheck plugin (the "Plugin") and this website (the "Website").

1. Who we are

The Plugin and the Website are provided by GLOBAL CONSUMER ASSOCIATION z.s., Dlouhá 715/38, 110 00 Praha, Czech Republic, ID No. (IČO) 23086742, represented by its director Evgeny Bataen ("we", "us"). We are the controller of the personal data described in sections 5 and 6. For any privacy question or request, contact support@iambig.ai.

2. Summary

The Plugin is a set of instructions and a local validation script that run inside the AI assistant you use. We do not operate any server that receives your conversations, and we do not receive, store or have access to what you type, the files you upload or the results the assistant produces. The Website does not use analytics, advertising or tracking cookies.

3. Data processed when you use the Plugin

When you use the Plugin, your messages and any files you share (for example names, countries, IBAN/BIC, amounts and the purpose of a payment) are processed by the provider of the AI assistant platform on which you installed the Plugin. That provider acts under its own terms and privacy policy, which govern storage, retention, model training settings and your rights over that data. See, for example:

To check sanctions lists, registers and warnings, the assistant may run web searches using the platform's own search tool and open public websites such as the EU Sanctions Map, the UN and OFAC lists, business registers or regulator warning lists. These searches may include the names you provided. They are performed by the platform, not by us, and the visited websites apply their own privacy policies.

We do not have access to the platform's records of your conversations. If you want your conversation data deleted, use the controls of the platform you used or contact its provider.

4. Data you should not share

The Plugin is designed to work with the minimum information needed. Never share payment card numbers, CVV/CVC codes, PINs, one-time codes, online-banking passwords or national identification numbers. The Plugin will not ask for them. You may mask parts of an IBAN or use placeholders for names and addresses if you only need general advice.

5. Data processed when you visit the Website

The Website is a static site hosted on Cloudflare. To deliver pages and protect the Website against abuse, Cloudflare processes technical data such as your IP address, browser type, requested URL and time of the request. Cloudflare may set strictly necessary security cookies. We do not use these data to identify you, and we do not use analytics, advertising or tracking cookies. See the Cloudflare Privacy Policy.

Legal basis: our legitimate interest in operating a secure website (Article 6(1)(f) GDPR).

6. Data processed when you contact us

If you email us, we process your email address and the content of your message to answer you. Legal basis: our legitimate interest in responding to inquiries, or steps taken at your request (Article 6(1)(b) and (f) GDPR). We keep this correspondence for as long as needed to handle your request and for up to 24 months afterwards, unless a longer period is required by law.

7. Sharing and transfers

We do not sell personal data and do not share it with third parties except our hosting and email providers, which act as processors on our behalf, or where required by law. Some providers may process data outside the European Economic Area; in that case transfers rely on an adequacy decision or the European Commission's Standard Contractual Clauses.

8. Your rights

Under the GDPR and similar laws you have the right to access, rectify and erase your personal data, to restrict or object to processing, and to data portability. To exercise these rights for data we hold (Website and email correspondence), contact support@iambig.ai. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state where you live or work. Our lead supervisory authority is the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů, uoou.gov.cz).

9. Children

The Plugin and the Website are not intended for persons under 18. We do not knowingly collect data about children.

10. Changes

If we add server-side features to the Plugin (for example our own sanctions screening service), we will update this policy before those features become available and describe what data they process. We will publish any change on this page with a new effective date.