Dorik AI

Dorik AI is the artificial intelligence layer added to the Dorik no code website builder. From a short natural language prompt it generates a full multi page website, including copy, layout, images and basic SEO metadata, that the user can then refine inside the visual editor and publish on a Dorik subdomain or a custom domain.

What Dorik AI is and who operates it

Dorik AI is a feature of the Dorik SaaS platform operated by Dorik Inc., a company with Bangladeshi roots and US business operations. The product is positioned as an all in one builder where prompt based generation, drag and drop editing, hosting, CDN delivery and form handling are bundled in a single subscription. Sites built with Dorik AI are served from Dorik infrastructure on Amazon Web Services, most commonly in the us-east-1 region.

Data and cookies collected by Dorik AI

Inside the builder, Dorik sets session cookies to keep the user logged in and to preserve unsaved work. On published sites Dorik can inject its own analytics tags as well as third party scripts that the site owner enables (for example Google Analytics, Meta Pixel or HubSpot). The platform also stores account data, billing information, prompts submitted to the AI and the generated content itself. IP addresses and User Agent strings are processed for security, abuse prevention and basic audience measurement.

GDPR and ePrivacy implications

For EU visitors of a website built with Dorik AI, GDPR applies to all personal data collected through the site and the ePrivacy Directive applies to every non essential cookie or similar identifier. The site owner is the controller, Dorik Inc. acts as a processor for hosting and for the AI generation features. Analytics cookies, marketing cookies and any tracking pixel embedded on the published site require informed consent collected before the script runs.

Consent requirements

Strictly necessary cookies that keep a logged in editor session or remember a shopping cart are exempt from consent. Everything else, including Dorik audience analytics, embedded social widgets and any pixel added through the integrations panel, must be blocked until the visitor gives an explicit opt in. A compliant consent banner must offer a refuse option that is as visible as the accept option, must log the choice and must allow the visitor to withdraw consent at any time.

Data transfers and US hosting

Because Dorik AI is hosted on AWS in the United States, personal data of EU visitors is transferred outside of the European Economic Area as soon as a page is requested. The site owner must rely on a valid transfer mechanism, typically the EU US Data Privacy Framework if Dorik is certified, or Standard Contractual Clauses combined with a transfer impact assessment. The privacy notice on the published site should explicitly mention the United States as a destination country and describe the safeguards in place.

Practical compliance steps

Sign a Data Processing Agreement with Dorik Inc., complete a transfer impact assessment for the US flow, enable a Consent Management Platform on every published site, block all non essential scripts until consent is granted, document the cookies and trackers active on the site, and update the privacy notice with the categories of data, the retention periods and the contact details of the controller. Keep an internal record of processing activities and review it whenever the site evolves or new AI features are activated.