Cookies Policy

1. Introduction

TheAIAudit ("TheAIAudit," "we," "us," or "our") provides a patent-pending AI governance platform that helps enterprises measure and manage their AI portfolio. This Privacy Policy explains how we collect, use, share, and protect personal information when you visit our website, request a demo, communicate with us, or use our platform.

By using our website or services, you agree to the practices described in this policy. If you do not agree, please do not use our website or services.

2. Who We Are

The entity responsible for your personal information is:

[Legal entity name]

[Business address]

[Contact email]

3. Information We Collect

Information you provide directly

• Contact information: name, business email, phone number, company name, job title, and any details you share when filling out a form or requesting a demo.

• Account information: name, email, role, and authentication credentials if you create or are added to a platform account.

• Communications: messages, attachments, and any information you choose to share when contacting us by email, form, or chat.

• Payment information: billing address and payment method details if you become a paying customer. Full card numbers are handled by our payment processor and are not stored by us.

Information collected automatically

• Usage data: pages viewed, features used, time spent on pages, clicks, and referring URL.

• Device and technical data: IP address, browser type and version, operating system, device type, and language preference.

• Cookies and similar technologies: to operate the site, remember preferences, measure usage, and support marketing. See Section 11.

Information about your AI systems (Customer Data)

When you use the platform, we process data about your AI models, vendor systems, agents, and the metrics needed to compute your AI Health Score. This Customer Data is governed by our customer agreement and Data Processing Addendum, not by this Privacy Policy. We process Customer Data only as instructed by you.

4. How We Use Your Information

We use the information we collect to:

• Operate, maintain, and improve our website and platform.

• Respond to inquiries, provide customer support, and deliver requested services.

• Process transactions and manage subscriptions.

• Send service updates, security alerts, and administrative messages.

• Send marketing communications, which you can opt out of at any time.

• Measure platform performance and analyze usage patterns.

• Detect, prevent, and respond to fraud, abuse, and security incidents.

• Comply with legal obligations and enforce our agreements.

5. Legal Basis for Processing (GDPR)

If you are in the European Economic Area, the United Kingdom, or Switzerland, the legal basis for processing your personal data depends on the purpose:

• Performance of a contract: to deliver the services you request.

• Legitimate interests: to operate, secure, and improve our business, where those interests are not overridden by your rights.

• Consent: for marketing communications and non-essential cookies.

• Legal obligation: to comply with applicable laws.

You may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing before the withdrawal.

6. How We Share Information

We do not sell personal information. We share information only as follows:

• Service providers: third parties who help us run the business, including hosting, analytics, email delivery, customer support, and payment processing. They are contractually required to safeguard your information and use it only for the purposes we specify.

• Professional advisors: lawyers, accountants, and auditors when needed.

• Legal and safety: when required by law, subpoena, court order, or to protect the rights, property, or safety of TheAIAudit, our customers, or others.

• Business transfers: in connection with a merger, acquisition, financing, reorganization, or sale of assets. The receiving party will be subject to protections at least as strong as those in this policy.

• With your consent: any other sharing you specifically authorize.

7. International Data Transfers

Your information may be transferred to and processed in countries other than the one you live in, including the United States. When we transfer personal data out of the EEA, UK, or Switzerland, we rely on approved transfer mechanisms such as the European Commission's Standard Contractual Clauses.

8. Data Retention

We keep personal information only as long as necessary to fulfill the purposes described in this policy, comply with our legal obligations, resolve disputes, and enforce our agreements. Retention periods vary by data type and purpose. When information is no longer needed, we delete or anonymize it.

9. Your Rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.

• Correct inaccurate or incomplete information.

• Delete your personal information.

• Restrict or object to certain processing.

• Receive a portable copy of your information.

• Opt out of marketing communications.

• Lodge a complaint with a supervisory authority in your country.

To exercise these rights, email us at [privacy email]. We will respond within the timeframes required by applicable law. We may need to verify your identity before fulfilling certain requests.

California residents

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the CPRA, including the right to know what categories of personal information we collect, the right to delete, the right to correct, and the right to opt out of "sharing" for cross-context behavioral advertising. We do not sell personal information. To exercise California rights, email [privacy email].

10. Security

We use administrative, technical, and physical safeguards designed to protect your information. These include encryption in transit and at rest, access controls, employee training, and regular security reviews. No system is perfectly secure. If we learn of a security breach that affects your personal information, we will notify you as required by applicable law.

11. Cookies and Similar Technologies

Our website uses cookies and similar technologies to operate the site, remember preferences, measure usage, and support marketing. You can manage cookie preferences through our cookie banner or your browser settings. Disabling some cookies may affect site functionality. For more details, see our Cookie Policy [link].

12. Children's Privacy

Our services are not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

13. Third-Party Links

Our website may link to third-party sites and services. We are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party site you visit.

14. Do Not Track

Some browsers send a "Do Not Track" signal. Because there is no industry standard for how to respond, our website does not currently respond to these signals. You can still control tracking through our cookie banner.

15. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will post the new version here and update the "Last Updated" date. For material changes, we will provide additional notice, such as by email or a banner on our website.

16. Contact Us

For questions about this Privacy Policy or our privacy practices, contact:

[Privacy email]

[Mailing address]

[Data Protection Officer name and contact, if appointed]