Privacy Statement

Who We Are

PrivGPT ("we", "us", "our") provides governed private AI and RAG services. For privacy-related requests, contact us at contact@privgpt.com.

What Data We Process

• Contact information you submit (for example: email address and message content).
• Technical and security logs (for service reliability, abuse prevention, and auditing).
• Operational metadata needed to deliver and secure the service.

Legal Bases (GDPR)

• Performance of a contract or pre-contractual steps (Article 6(1)(b) GDPR).
• Legitimate interests such as security, fraud prevention, and service improvement (Article 6(1)(f) GDPR).
• Consent where required by law (Article 6(1)(a) GDPR), including for non-essential cookies/trackers.
• Legal obligations where applicable (Article 6(1)(c) GDPR).

Cookies and Similar Technologies

We use cookies/trackers in line with EU rules. Strictly necessary technologies may run without consent when needed to provide a service explicitly requested by the user. Non-essential analytics/marketing technologies require prior consent.

• You can accept or reject non-essential cookies.
• You can withdraw consent at any time as easily as it was given.
• Access to core site functionality is not conditioned on consenting to non-essential cookies.

Data Sharing and Transfers

We may use processors/sub-processors to deliver services (for example hosting, infrastructure, and support providers). Where personal data is transferred outside the EEA, we use recognized safeguards such as Standard Contractual Clauses and supplementary measures where needed.

Retention

We retain personal data only as long as necessary for the purposes described in this statement, including legal, security, and contractual requirements. Retention periods may vary by data type and customer configuration.

Your Rights

Subject to applicable law, you may request access, rectification, erasure, restriction, objection, and data portability, and may withdraw consent where processing is based on consent. You may also lodge a complaint with your local supervisory authority.