Privacy Policy
1. Overview & Data Controller
Auredane AI ("Company," "we," "us," or "our") respects your privacy and is firmly committed to safeguarding personal data collected in connection with our automated trading software, web endpoints, and analytical services. This Privacy Policy details our procedures regarding the collection, handling, storage, and transfer of information in compliance with the UK Data Protection Act 2018, the UK General Data Protection Regulation (UK GDPR), and internationally aligned data protection statutes.
For the purposes of applicable data protection legislation, the designated data controller is Auredane AI, having operations registered at Fenchurch Street 61, EC3M 4AJ Edinburgh, United Kingdom.
2. Categories of Information We Collect
In operating our automated market intelligence services, we process information categorized under the following operational branches:
- Identity & Contact Data: Name, contact telephone number, professional email address, and country of residence provided during onboarding or communications.
- Technical & Telemetry Data: IP address, device fingerprints, browser classification, time-zone settings, latency statistics, platform interactions, session tokens, and crash reporting metrics.
- Platform Usage & Algorithmic Logs: API request frequency, model query histories, risk parameter configurations, and platform feature engagement timings.
- Verification Data: Information required for fraud prevention, anti-abuse checks, and compliance verification where mandated by regulatory authorities.
3. Legal Bases for Processing
We process personal data solely when supported by a valid legal justification under UK GDPR principles, specifically:
- Performance of a Contract: Facilitating platform functionality, computational model processing, customer account administration, and infrastructure provisioning.
- Legitimate Interests: Optimizing our quantitative engine, mitigating platform abuse or distributed attacks, maintaining cryptographic security, and defending legal rights.
- Legal & Regulatory Obligations: Complying with statutory accounting directives, regulatory reporting, anti-financial crime obligations, and lawful court subpoenas.
- Explicit Consent: Where you provide consent for optional technical analytics or communication updates, which you may revoke at any time.
4. Cookies & Tracking Technologies
Our website utilizes strictly essential session cookies and performance telemetry necessary to maintain connection security, authentication tokens, and user layout preferences. We do not sell, rent, or commercialize behavioral tracking data to third-party ad networks. You may adjust browser controls to decline non-essential cookies, though certain platform features may experience diminished performance.
5. Disclosure & International Transfers
Auredane AI enforces stringent data isolation protocols. We only disclose personal information under limited conditions:
- To vetted cloud infrastructure hosts, enterprise database providers, and cybersecurity vendors bound by strict confidentiality and data processing agreements;
- To professional legal advisors, auditing institutions, or compliance examiners under duty of professional secrecy;
- To statutory law enforcement bodies or regulatory agencies when strictly required by enforceable judicial order or legislative mandate.
Where personal data is transferred outside the United Kingdom, we implement Standard Contractual Clauses (SCCs), International Data Transfer Agreements (IDTAs), or verify adequacy designations to ensure your protections remain robust.
6. Cryptographic Security & Data Retention
We employ military-grade AES-256 encryption at rest, TLS 1.3 encryption in transit, strict zero-trust role-based access controls, and automated intrusion monitoring to protect against unauthorized data manipulation, exfiltration, or disclosure. We retain personal data strictly for the duration necessary to fulfill contractual services, resolve potential claims, and satisfy applicable statutory limitation periods.
7. Your Statutory Rights
Subject to applicable criteria under UK data protection legislation, you are entitled to exercise the following rights regarding your personal information:
- Right of Access: Request a copy of the personal information we maintain concerning your identity;
- Right to Rectification: Request correction of inaccurate, obsolete, or incomplete personal records;
- Right to Erasure: Request the deletion of data when retention is no longer justified by law;
- Right to Restriction & Objection: Object to specific processing activities based on legitimate interests;
- Right to Data Portability: Obtain your digital records in a structured, machine-readable format.
8. Inquiries & Supervisory Authority
To exercise your statutory rights or submit privacy-related inquiries, please direct correspondence to our Data Protection Officer at [email protected]. If you consider that our processing breaches your legal rights, you retain the right to submit a formal complaint to the Information Commissioner's Office (ICO) in the United Kingdom.