AskGuardianAI GDPR Policy

AskGuardianAI may operate as either a Data Controller or a Data Processor depending on the circumstances.

We aim to process personal data according to the core GDPR principles of lawfulness, fairness and transparency; purpose limitation; data minimisation; accuracy; storage limitation; integrity and confidentiality; and accountability.

When acting as Data Processor, we process personal data only according to documented customer instructions unless applicable law requires otherwise. Customers are responsible for ensuring that their use of AskGuardianAI and their instructions comply with applicable data-protection laws.

Access to personal information is limited to authorised personnel who require access for legitimate operational purposes. Personnel with access to personal data are subject to appropriate confidentiality obligations.

We maintain technical and organisational security measures appropriate to the type of information processed and the risks involved. Depending on the relevant system, these may include encryption in transit, authentication controls, restricted infrastructure access, access management, security monitoring, logging, server-side credential protection, and backup and recovery procedures.

AskGuardianAI may use third-party service providers, known as subprocessors, to help provide the service. These may provide cloud hosting, AI processing, payment services, email delivery, monitoring, security or technical infrastructure. Where required by the GDPR, appropriate contractual arrangements are maintained with subprocessors.

Where personal data is transferred outside the European Economic Area, we use an appropriate legal transfer mechanism where required. This may include an adequacy decision, European Commission Standard Contractual Clauses, supplementary safeguards or another legally recognised transfer mechanism.

Where applicable, individuals may have the right to access personal data, correct inaccurate information, request deletion, restrict processing, object to processing, request data portability and withdraw consent.

Where we act as Data Controller, requests can be submitted directly to us. Where we act as Data Processor, we will assist the relevant business customer in responding to valid requests.

We aim to consider privacy and security throughout the design and development of AskGuardianAI. Where reasonably possible, we seek to process only information necessary for the relevant functionality, restrict unnecessary access, minimise exposure of credentials, protect communications, provide customer controls and avoid unnecessary collection of personal information.

AskGuardianAI is not intended as a general-purpose platform for processing special-category personal data.

Customers should avoid intentionally configuring AskGuardianAI to collect information relating to health, biometrics, religion, political opinions, sexual orientation or other special-category information unless they have independently established an appropriate lawful basis and implemented the necessary safeguards.

We maintain procedures for identifying, assessing and responding to personal-data breaches. Where we act as Data Processor and become aware of a relevant personal-data breach affecting customer data, we will notify the relevant Data Controller without undue delay as required by applicable law.

Where we act as Data Controller, we will make notifications to the appropriate supervisory authority and affected individuals where legally required.

Following termination of a customer relationship, personal data processed on behalf of that customer will be deleted or returned where required by our contractual and legal obligations. Some information may remain temporarily in secure backups until it is removed through normal backup rotation. Information may also be retained where required by law.

We maintain appropriate documentation and internal procedures according to the nature and scale of our processing activities. This may include records relating to processing activities, security, subprocessors, international transfers, data requests and data incidents.

Where the use of AskGuardianAI is likely to result in a high risk to individuals, the relevant Data Controller is responsible for determining whether a Data Protection Impact Assessment is required. Where reasonably possible and legally required, we will assist business customers with information necessary to assess their use of AskGuardianAI.

AskGuardianAI is an artificial-intelligence system designed to communicate directly with website visitors. Customers should ensure that visitors are informed that they are interacting with an AI assistant where required under applicable law. AskGuardianAI should not be intentionally configured to mislead visitors into believing that the AI assistant is a human operator.

INOTECHMENT LTD is established in the Republic of Cyprus. The relevant national supervisory authority is the Office of the Commissioner for Personal Data Protection, Republic of Cyprus.

Depending on the circumstances, individuals may also have the right to lodge a complaint with another competent supervisory authority within the European Union or European Economic Area.

For GDPR or privacy-related matters, please contact INOTECHMENT LTD / AskGuardianAI, Company Registration No. HE 428448, Republic of Cyprus, at support@askguardianai.com. Full registered company information is available through the Company Information section of our website.