Data Donation Terms

These Data Donation Terms (“Terms”) govern the Data Donation service operated by Jan Brožíček, company/registration no. IČO 08764832, registered address Rižská 1492/2, 102 00, Praha, e-mail brozicekj@gmail.com, website https://llmpanel.cz (“Operator”, “we”, “us”).

If you are a consumer, nothing in these Terms limits any rights that cannot be waived under mandatory European Union law or the law of the country of your habitual residence.

“Data Donation” is a product label for a voluntary contribution of a user-selected copy of part of the user’s supported AI-assistant export that has been sanitized locally before transfer. It is not an irrevocable legal gift, does not transfer ownership of personal data, and does not waive any data-protection rights. Your GDPR rights, including the right to withdraw consent, remain unaffected.

At launch, the service is intended only for persons aged 18 or over. By registering, you confirm that you are at least 18. You must not use the service on behalf of another natural person or submit another person’s export without appropriate authority.

Accounts are created and accessed using an e-mail address and Magic Link authentication. You must use an e-mail address you are entitled to use and keep access to your mailbox secure. Notify us at brozicekj@gmail.com if you suspect misuse of your account.

The original export ZIP is processed locally in your browser and is not uploaded to the Operator as a Data Donation file.

The application locally loads only supported conversational data needed to prepare the Data Donation. Account data, user.json, attachments and other unnecessary files are not transferred as Data Donation content.

Before transfer, you can exclude entire conversations and individual prompts/messages and choose whether to include sanitized AI responses.

A separate sanitized donation copy is created before transfer. The original unsanitized text is not sent to the server as a separate copy.

Only your selected sanitized text and associated safe technical/redaction metadata described in the Privacy Notice are transmitted to the backend.

Sanitization runs automatically and locally in the browser. It is designed to reduce the risk of transferring selected identifiers and high-risk technical elements, such as e-mail addresses, telephone numbers, IP addresses, probable tokens/secrets, sensitive URL values, source code and scripts. Removed code is replaced only with a generic marker such as [CODE_PYTHON] or [CODE_SQL]. If no transferable text remains, a neutral [NO_TRANSFERABLE_TEXT] placeholder may be stored.

Sanitization is heuristic. We do not guarantee that it will identify or remove every personal datum, sensitive fact, name, contextual identifier or other information from which a person could be identified. You must therefore review the selected sanitized donation copy before transfer and exclude anything you do not wish to contribute.

A Data Donation may include:

• selected sanitized human prompts;
• sanitized AI responses if you opt in;
• safe technical record/provider metadata;
• redaction metadata and metadata about removed source code, without the removed code;
• pseudonymized deterministic fingerprints used mainly for deduplication;
• a historical snapshot of your analytics profile at the time the Data Donation is completed.

A Data Donation does not include:

• the original ZIP;
• a separate server-side copy of the original unsanitized text;
• raw AI-provider message/conversation IDs;
• conversation titles;
• attachment content;
• removed source code;
• user.json content.

Within the scope of your consent, we may use your analytics profile and Data Donations to analyse how people use AI assistants, including categories and topics of prompts, frequency of categories, differences between demographic groups, differences between AI providers, characteristics of AI responses, trends over time, and the structure or quality of interactions.

Results may also be used commercially, including in paid analytics reports, dashboards, benchmarks, statistics, dataset insights and other analytical products supplied to customers. We do not present this service as a scientific research study and your consent is not a request to participate in academic research.

At launch, third-party customers receive only aggregated and/or genuinely anonymised outputs that are not intended to identify an individual participant. We will not provide customers with pseudonymised row-level Data Donation records without a new legal and consent framework appropriate to that materially different use.

We may use anonymised illustrative examples only after a reasonable anonymisation review and removal/generalisation of identifying context.

AI conversations may contain special categories of personal data, including health information, political opinions, religious or philosophical beliefs, trade-union membership, genetic data, biometric data used for unique identification, sex-life information or sexual orientation. We process such information about you as part of a Data Donation only if you give a separate explicit consent under Article 9(2)(a) GDPR.

Your explicit consent applies only to special-category personal data concerning you. It does not authorise you or us to process another person’s special-category data without a separate lawful basis/condition.

Before completing a Data Donation, you must reasonably review the selected content. You must not knowingly contribute identifiable personal data about another person, particularly their special-category personal data, unless you have an appropriate legal entitlement to do so. You must also not knowingly contribute personal data relating to criminal convictions, offences or related security measures.

If you later discover that you submitted such information by mistake, contact brozicekj@gmail.com without undue delay or use the deletion function for the relevant Data Donation. We may restrict, exclude or delete content where we reasonably believe it violates these Terms or creates disproportionate risk to another person’s rights.

A Data Donation does not transfer ownership of your content or personal data. To the extent that a licence or other intellectual-property permission is technically or legally required for the lawful analytics described here, you grant us a non-exclusive, royalty-free, worldwide licence to use the sanitized donation copy only for the purposes described in these Terms and the Privacy Notice and only for the period during which we may lawfully process it.

To the extent reasonably expected of you, you represent that you are entitled to provide the selected content for these purposes. This licence does not limit your GDPR right to withdraw consent. On withdrawal, we delete the personal/pseudonymised donation copy in accordance with the Privacy Notice; rights in genuinely anonymised aggregate outputs already lawfully created are not affected.

You may withdraw consent to Data Donation processing at any time without affecting the lawfulness of processing before withdrawal. The account provides a “Withdraw consent & delete my Data Donations” function. When used, we delete participant-linked personal/pseudonymised donation records from active systems, including relevant profile snapshots and participant-linked fingerprints, in accordance with the Privacy Notice.

Genuinely anonymised aggregate statistics that can no longer reasonably be linked to you cannot be reverse-extracted, and GDPR no longer applies to those anonymous results.

We may improve or change the service, for example by adding supported providers or improving sanitization and analytics. If a change introduces a new or materially different purpose for processing personal data, we will not automatically treat it as covered by an existing consent; we will provide appropriate information and obtain fresh consent where required before the new processing starts.

We may restrict or suspend access for security, operational or legal reasons. This does not limit mandatory consumer rights relating to digital services where such rules apply.

If we later offer AI credits, digital benefits or money in connection with Data Donations, separate reward rules will apply. A reward does not replace a GDPR legal basis or the Article 9 explicit-consent requirement. Withdrawal of consent must not be made disproportionately detrimental; any reward rules will explain how withdrawal affects future eligibility without using consent withdrawal as a penalty.

These Terms are governed by the laws of the Czech Republic. If you are a consumer habitually resident in another EU/EEA country, this choice does not deprive you of the protection of mandatory provisions that would otherwise apply and cannot be contractually waived.

Questions about the service or these Terms: brozicekj@gmail.com. Privacy questions: brozicekj@gmail.com.