Privacy Policy

This Privacy Policy describes how AI SystemCraft Ltd and its affiliates ('AI SystemCraft', 'we', 'us', or 'our') collect, process, disclose, and safeguard personal data obtained through your interaction with our public digital properties (aisystemcraft.com), demonstration sandboxes, communication portals, and technical publications.

This policy applies exclusively to processing activities conducted as a data controller. Technical client data processed under enterprise software agreements is governed by the executed Master Services Agreement (MSA) and Data Processing Addendum (DPA) between AI SystemCraft and the respective client organization.

We collect information that identifies, relates to, describes, or is reasonably capable of being associated with an individual ('Personal Data'). The categories of Personal Data we collect depend on the nature of your interaction:

Information Directly Provided: Personal details submitted when requesting consultations, subscribing to research updates, or submitting contact inquiries.

Automatically Transmitted Technical Data: Technical attributes transmitted by your web browser, network router, or operating system during your session.

We process Personal Data strictly in accordance with applicable data protection laws, relying on defined legal bases:

Performance of a Contract: To fulfill technical consultation requests, provide access to evaluation environments, and deliver agreed advisory services.

Legitimate Business Interests: To protect infrastructure integrity, prevent security vulnerabilities, measure digital performance, and communicate with enterprise stakeholders.

Consent: Where required by law (such as non-essential telemetry cookies and promotional communications), we process data based on your explicit prior consent.

AI SystemCraft retains Personal Data only for the duration necessary to satisfy the purposes set forth in Section 3, or as required by applicable statutory, tax, or legal requirements.

Inquiry records and business communication logs are retained for twenty-four (24) months following the date of last interaction, after which they are systematically deleted or rendered permanently anonymous using irreversible sanitization algorithms.

AI SystemCraft maintains server infrastructure in secure data centers located within the United Kingdom, European Union, and the United States. Where Personal Data originating from the European Economic Area (EEA), UK, or Switzerland is transferred internationally, we enforce approved cross-border transfer mechanisms.

Transfers rely on European Commission Standard Contractual Clauses (SCCs), the UK International Data Transfer Addendum (IDTA), and data protection agreements incorporating technical encryption standards (TLS 1.3 in transit, AES-256 at rest).

We implement comprehensive administrative, physical, and technical safeguards designed to protect Personal Data against unauthorized access, destruction, modification, or disclosure.

Our security program incorporates network perimeter defense, zero-trust architecture, automated vulnerability scanning, strict role-based access controls (RBAC), and continuous threat monitoring to safeguard data.

Depending on your jurisdiction, you may exercise specific statutory rights regarding your Personal Data:

To submit a formal Data Subject Access Request (DSAR), exercise statutory rights, or direct inquiries regarding our data handling practices, please contact our Data Protection Officer at [email protected].

We investigate and respond to all verified privacy requests within thirty (30) days of receipt.