Privacy policy

This policy explains what personal data we process when you visit aisec.design or contact us, why we do it, and what your rights are under the General Data Protection Regulation (GDPR). It does not cover data processed by the AISec product on behalf of customers; that is governed by each customer’s agreement.

Who we are

The controller is AI Security (by Design), based in the Netherlands (Chamber of Commerce registration pending). For anything about privacy, email privacy@aisec.design.

What we process, why, and for how long

When you contact us or join the waitlist

• Data: your name, email address, and anything you choose to tell us (company, identity provider, message).
• Purpose: to answer your request, arrange a demo, or tell you when early access opens.
• Legal basis: steps at your request before a possible contract (Art. 6(1)(b) GDPR) and our legitimate interest in replying to people who contact us (Art. 6(1)(f)).
• Retention: up to 12 months after our last contact, unless we enter into an agreement with you. You can ask us to delete it sooner at any time.

When you visit this website

• Data: our web server records technical request data: IP address, date and time, requested page, response code and browser user agent.
• Purpose: to keep the website secure and running, and to investigate abuse.
• Legal basis: our legitimate interest in securing our website (Art. 6(1)(f)).
• Retention: 14 days, unless needed longer to investigate a specific incident.

Your theme preference

If you use the light/dark switch, your choice is saved in your own browser (local storage). It never leaves your device and we can’t read it. No consent is needed because it only remembers a setting you asked for.

What we don’t do

• No cookies, analytics, advertising or tracking pixels.
• No third-party scripts, fonts or embeds: everything loads from our own server.
• No selling or renting of personal data.
• No automated decision-making or profiling about you.

Who else receives your data

We use a small number of service providers (processors) who handle data only on our instructions, under a data processing agreement:

• our hosting provider, which runs the web server; [provider to be named]
• our email provider, which stores the messages you send us; [provider to be named]
• if enabled, a form-processing service that forwards contact-form submissions; [provider to be named]

We aim to keep all personal data within the European Economic Area. If a provider transfers data outside the EEA, we will rely on an adequacy decision or the European Commission’s standard contractual clauses, and update this page.

Your rights

You have the right to:

• access the personal data we hold about you;
• have it corrected or deleted;
• restrict or object to our processing of it;
• receive it in a portable format.

Email privacy@aisec.design. We respond within one month. If you’re unhappy with how we handle your data, you can complain to the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens, or to the authority in your own EU country.

Changes

If we change this policy, we’ll update the date at the top of this page. Significant changes will be highlighted here.