AISeeRisk Privacy Policy

Data, purposes and bases

Data may include business contact details, roles, account identifiers, IP and security logs, billing data, authorization records and minimum technical evidence. Do not submit secrets or sensitive data without separate agreement.

• accounts, organizations, SSO/MFA and service delivery — contract or pre-contract steps;
• communications, security, abuse prevention and claims — legitimate interests;
• invoicing, tax and accounting — legal obligation;
• marketing — separate consent only;
• technical data and evidence — confirmed scope and customer instructions only.

Recipients and transfers

Only authorized personnel and necessary infrastructure, email, identity, payment or AI providers receive data under appropriate agreements. We do not sell data. EEA transfers require a lawful mechanism and safeguards assessment.

Retention

• public server/security logs — normally up to 30 days;
• account — agreement plus up to 90 days for export/closure;
• evidence — plan setting, 90 days by default;
• audit/security events — normally 12 months after termination;
• pre-contract communications — up to 12 months after last contact;
• tax/accounting records — statutory period.

AI, rights and security

AI may explain and prioritize risk, but deterministic evidence and human approval remain mandatory. We make no solely automated legally significant decisions about individuals and do not train general models on customer data without a separate basis.

You may request access, correction, deletion, restriction, portability, object or withdraw consent via privacy@aiseerisk.pl, and complain to UODO or your EEA authority. We use least privilege, isolation, MFA, encryption, retention controls, append-only audit and recovery testing.