AskGuardianAI Privacy Policy

Our role under data-protection law depends on how AskGuardianAI is being used.

For information connected with your AskGuardianAI account, subscription, billing, direct communication with us and use of our own website, INOTECHMENT LTD generally acts as the Data Controller.

When a business installs AskGuardianAI on its own website and we process website visitor conversations or related information on that business's behalf, INOTECHMENT LTD generally acts as a Data Processor, while the business operating the website acts as the Data Controller.

We process personal information where necessary to create and manage accounts; provide AskGuardianAI; activate and validate licence keys; manage subscriptions and process payments; monitor token allowances; connect and index customer websites; generate AI-powered responses and maintain conversation functionality; synchronise WooCommerce information; provide customer support; prevent fraud and abuse; protect service security; diagnose technical problems; comply with legal and accounting requirements; and improve service reliability and functionality.

Where the GDPR applies, our processing may rely on one or more of the following legal bases.

AskGuardianAI uses artificial intelligence to generate answers to visitor questions. To provide a relevant answer, the AI system may process the visitor's message, relevant website information, product catalogue information, customer instructions and previous conversation context.

The amount of information used depends on the configuration of the customer's website and the nature of the visitor's question.

If you use AskGuardianAI through a website belonging to one of our customers, that website owner generally determines why the chatbot is being used and what personal information is processed. The website owner generally acts as Data Controller and INOTECHMENT LTD / AskGuardianAI generally acts as Data Processor.

If you wish to exercise rights relating specifically to information submitted through that website, you should normally contact the website owner first. We will assist our customers with valid data-protection requests where required.

We may use trusted third-party companies to help us operate AskGuardianAI, including providers of cloud infrastructure, artificial intelligence services, payment processing, email delivery, security, monitoring and technical infrastructure.

These providers are only permitted to process information as necessary to provide their services and are subject to appropriate contractual and data-protection requirements.

Some service providers may process information outside Cyprus or the European Economic Area. Where the GDPR requires safeguards for an international transfer, we use an appropriate legal mechanism, which may include an adequacy decision, European Commission Standard Contractual Clauses or another legally recognised transfer mechanism. Additional safeguards may be used where appropriate.

We keep personal information only for as long as reasonably necessary. The exact retention period depends on the type of information, whether your account is active, contractual requirements, customer configuration, security requirements, legal obligations, accounting requirements and the need to resolve disputes.

Some billing and transaction information may need to be retained for longer periods where required by law. Customer information processed on behalf of a business will be deleted or returned following termination where required by our contractual and legal obligations, subject to reasonable backup and statutory-retention requirements.

We use appropriate technical and organisational measures to protect information processed through AskGuardianAI. These measures may include encrypted communications, access controls, authentication systems, server-side credential handling, security monitoring, logging, infrastructure protection and backup procedures.

No online service can guarantee complete security, but we take reasonable steps to protect the information entrusted to us.

The AskGuardianAI website and portal may use cookies or similar technologies for login and authentication, session management, security, account preferences and essential website functionality.

If we use non-essential analytics, advertising or similar cookies that require consent, they will be handled in accordance with applicable consent requirements. You can also manage cookies through your browser settings.

Depending on your location and the circumstances of the processing, you may have rights including the right to:

• request access to your personal information;
• correct inaccurate information;
• request deletion;
• restrict certain processing;
• object to certain processing;
• receive eligible information in a portable format;
• withdraw consent where processing is based on consent; and
• lodge a complaint with a competent supervisory authority.

These rights may be subject to legal conditions or exceptions.

AskGuardianAI automatically generates conversational responses and may provide product recommendations. AskGuardianAI is not designed, by default, to make decisions producing legal or similarly significant effects concerning website visitors solely through automated processing.

AskGuardianAI is primarily designed for businesses and website operators. AskGuardianAI accounts should not be created by individuals who are not legally capable of entering into the relevant agreement.

Businesses operating websites aimed at children remain responsible for implementing appropriate privacy, consent and age-related safeguards.

If we become aware of a personal-data breach, we will investigate it and take appropriate action. Where we act as Data Controller, we will make any notifications required by applicable law. Where we act as Data Processor, we will notify the relevant customer where required and assist them in fulfilling their obligations.

If you have a privacy concern, we encourage you to contact us first at support@askguardianai.com. Where applicable, you also have the right to lodge a complaint with the competent data-protection authority.

For INOTECHMENT LTD, the relevant supervisory authority is the Office of the Commissioner for Personal Data Protection, Republic of Cyprus. Depending on where you live or work, you may also be able to contact another competent EU or EEA supervisory authority.

We may update this Privacy Policy as AskGuardianAI develops or when legal requirements change. The latest version will always be published on our website together with the date of the most recent revision.

For privacy-related questions, please contact INOTECHMENT LTD / AskGuardianAI, Company Registration No. HE 428448, Republic of Cyprus, at support@askguardianai.com. Full registered company information is available through the Company Information section of our website.