Privacy Policy

1. Introduction

AI Compound ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, website, and mobile applications (collectively, the "Services").

By using our Services, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not use our Services.

2. Information We Collect

Personal Information

We may collect personally identifiable information that you voluntarily provide to us, including:

• Name, email address, and phone number
• Business name, address, and company details
• Profile photo and digital signature
• Payment and billing information (processed securely via Stripe)
• Account credentials and authentication data

Usage Data

We automatically collect certain information when you access our Services:

• IP address, browser type, and device information
• Pages visited, time spent, and click patterns
• App usage statistics and feature interactions
• Login and session history

Business Data

As part of our business operations platform, we process data you input including timesheets, briefing sheets, maintenance records, surveys, and other operational data.

3. How We Use Your Information

We use the collected information for the following purposes:

• To provide, operate, and maintain our Services
• To process transactions and manage subscriptions
• To authenticate users and prevent unauthorised access
• To send service-related communications and updates
• To respond to customer support requests
• To improve our Services and develop new features
• To comply with legal obligations and enforce our terms
• To detect, prevent, and address technical issues or fraud

4. Legal Basis for Processing (UK GDPR)

We process your personal data under the following legal bases:

• Contract: Processing necessary to perform our contract with you
• Legitimate Interests: Improving our Services and ensuring security
• Legal Obligation: Complying with applicable laws and regulations
• Consent: Where you have given clear consent for specific purposes

5. How We Share Your Information

We do not sell your personal information. We may share your data with:

• Service Providers: Trusted third parties that help us operate our Services (e.g., Stripe for payments, Google for authentication, hosting providers)
• Legal Authorities: When required by law, court order, or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: For any other purpose disclosed at the time of collection

6. Data Security

We implement appropriate technical and organisational security measures to protect your personal data, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure password hashing and two-factor authentication
• Regular security audits and vulnerability assessments
• Restricted access to personal data on a need-to-know basis
• Secure cloud infrastructure with industry-standard protections

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law (e.g., for tax, accounting, or other legal requirements). When data is no longer needed, it is securely deleted or anonymised.

8. Your Rights

Under UK GDPR and applicable data protection laws, you have the following rights:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restrict Processing: Request limitation of how we use your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time where applicable

To exercise any of these rights, please visit our Account Deletion page or contact us at support@aicompound.app.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience, analyse usage, and remember your preferences. You can control cookie settings through your browser, but disabling cookies may affect the functionality of our Services.

Types of cookies we use:

• Essential Cookies: Required for core functionality and security
• Analytics Cookies: Help us understand how users interact with our Services
• Preference Cookies: Remember your settings and preferences

10. Third-Party Services

Our Services integrate with trusted third-party services to provide essential functionality:

• Stripe: Payment processing (subject to Stripe's privacy policy)
• Google OAuth: Authentication services (subject to Google's privacy policy)
• Cloud Hosting Providers: Secure data storage and infrastructure

These third parties have their own privacy policies, and we encourage you to review them.

11. International Data Transfers

Your information may be transferred to and processed in countries other than the United Kingdom. When we transfer data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK Information Commissioner's Office (ICO).

12. Children's Privacy

Our Services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete that information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of material changes by posting the updated policy on this page and updating the "Last Updated" date. Your continued use of our Services after changes constitutes acceptance of the updated policy.

14. Complaints

If you have concerns about how we handle your personal data, please contact us first so we can address your concerns. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.