Getsolved

GDPR overview

Implementation is concrete but incomplete. The privacy policy, last updated 24 March 2026, names LESTAS UAB (Lithuanian registration 302620120) as controller. Section 4 lists the legal bases relied on in the EEA and the UK, namely consent, performance of the contract, legitimate interests and legal obligations, citing the GDPR and UK GDPR by name. Section 12 sets out six rights: access, rectification, erasure, portability, restriction and objection, exercised by email to the dedicated GDPR address with Access, Update or Delete as the mandatory subject keyword. Section 6 frames international transfers with standard contractual clauses where the law requires it, and section 3 states that sensitive data is not processed and that consent can be withdrawn at any time. Missing: no named DPO, no published DPA and no subprocessor list. No Article 27 representative is designated, the company being EU-established. The site never claims compliance outright.

Who owns the data?

Under section 8 of the terms, you keep ownership of the content you submit, to the extent applicable law allows. LESTAS UAB, the Lithuanian publisher, receives a limited, non-exclusive license to host, store, process, transmit and analyze that content, solely to operate, maintain, secure and improve the services. Any rights the company might hold in the output generated from your content are assigned back to you, provided you comply with the terms, and identical or similar outputs may be produced for other users. The privacy policy adds that content can be shared with contracted service providers and transferred in a merger, asset sale, financing or acquisition.

Reuse rights

Output generated from your own text is assigned to you, so you can reuse, edit and publish it without asking further permission, as long as you comply with the terms. The service itself is another matter: the license is non-exclusive, non-transferable and granted solely for your own personal purposes, and you may not sublicense, sell, resell, transfer, distribute or commercially exploit it, nor build a product that reproduces its features or its look. The terms also make you solely responsible for reviewing, verifying, editing and deciding how to use any output, including checking that it complies with applicable laws and does not infringe the rights of third parties. Two product-level limits complete the picture: paraphrasing does not remove the duty to cite the original source, and the AI Humanizer improves results without guaranteeing that rewritten text will pass a third-party detector.

Data retention & training

Hosting summary

No hosting country or region is named anywhere on the pages collected. Section 6 of the privacy policy states that data may be transferred to, stored in and processed in countries other than the user's country of residence, and that where applicable law requires it, those transfers rely on standard contractual clauses approved by the competent authorities or on other lawful mechanisms. Section 5 describes service providers by category only, covering cloud infrastructure, analytics, support platforms, marketing tools, payment processors and AI technologies, with no names and no subprocessor list. The only third parties named on the site are Google, for advertising and analytics, and the payment processors Flintn and Solid. Security is presented as appropriate and reasonable technical and organizational measures, with no certification cited, no SOC 2 and no ISO 27001. The controller is established in Lithuania, therefore inside the European Union, and Lithuanian law applies. The front end is served behind Cloudflare, which is a delivery layer rather than a storage location. In short: an EU publisher, an EU legal framework and no documented data residency.