top of page

Privacy Policy

1. Introduction

​

At AI Governance International, protecting your privacy is fundamental to our work. This Policy describes how we collect, use, disclose, transfer, secure, retain, and delete Personal Data, and the rights available to you under applicable laws.

Personal Data means any information that can identify a person, either alone or when combined with other data (e.g., name, email, device ID, payment details, location data, or online identifiers).

​

We apply privacy-by-design and data-protection principles consistent with leading global standards, including:

​

  • GDPR — strong consent, data minimization, lawful basis

  • PIPEDA — fair use and retention limits

  • LGPD — transparency, purpose limitation

  • POPIA — lawful collection, security safeguards

  • CPPA — data protection principles

  • IFA — consent and data-transfer oversight

  • CPA — opt-out rights

  • UCPA — consumer protections

  • ​

This Policy applies when you interact with our online services, including visiting our websites that display or link to this Privacy Policy.

​

2. Scope

 

This Policy applies to all services operated by AI Governance International, including websites, domains, tools, APIs, applications, digital services, educational programs, and other online or offline interactions that involve Personal Data.

 

This Policy does not apply to third-party websites or services linked from our platforms. Those services operate under their own policies.

​

3. Personal Data We Collect

​

A. Data you provide directly

​

We may collect Personal Data when you:

  • Create an account

  • Purchase or attempt to purchase a product or service

  • Submit inquiries, forms, surveys, or messages

  • Subscribe to newsletters or updates

  • Use our applications or online tools

  • Engage with us through third-party login or authorized connection (e.g., social login)

  • Provide permissions to interact with external data sources or linked services

  • ​

The categories you provide may include:

  • Identity Data (name, username)

  • Contact Data (email, phone number)

  • Account Data (password—stored hashed and secured)

  • Transaction Data (purchases, payment status)

  • Payment Data (billing details, card details collected by secure payment providers, not stored directly unless necessary)

  • Consent Records (logs of consent approvals or withdrawals)

  • Technical Support Interactions (messages exchanged for service assistance)

​

B. Data collected automatically

​

When using our websites or apps, we may automatically collect:

  • Device Data (browser, OS, screen size, language preferences, IP country, device type)

  • Usage Data (pages visited, clicks, session length, interactions)

  • Security and Debug Logs (to detect errors, abuse, or fraud patterns)

  • Cookie signals (if enabled by your browser settings and with consent where required)

​

C. Data received from third parties

​

With your authorization, we may receive data from:

  • Secure payment processors

  • Analytics providers (e.g., website performance and aggregated usage insights)

  • Identity providers during authorized login

  • Anti-fraud and security networks

  • Partners providing AI Governance International services where you are a participant or customer

  • Authorities or legal entities when disclosure is permitted or legally required

​

4. Purposes & Legal Basis for Processing

​

We collect and process data only for clear and legitimate purposes, including:

  • Delivering products, services, or content you request

  • Account creation, authentication, and support

  • Secure payment processing (handled via compliant third parties)

  • Customer service, technical support, and communications

  • Website safety, fraud prevention, and legal compliance

  • Improving product performance using aggregated, anonymized analytics

  • Sending communications where consent has been provided, and allowing opt-out at any time

  • Operating services under legitimate interest, contract necessity, or explicit consent, depending on jurisdiction

​

We do not sell Personal Data. Any sharing is limited to what is necessary to perform or secure services, or to comply with valid legal requests.

 

5. International Data Transfers

 

Your Personal Data may be transferred across borders only where permitted by law, under appropriate safeguards including:

  • Verified adequacy agreements (e.g., recognized data-transfer frameworks)

  • Standard contractual clauses or equivalent protections

  • Encryption in transfer

  • Purpose-limited processing by verified providers

 

Where feasible, we process or store data within or near your region, but this may not always be within your country. Transfers only occur where secured and legally permitted.

 

6. Data Retention & Deletion

 

We retain Personal Data:

  • Only as long as required to fulfill the original purpose

  • Or longer where required to comply with laws (tax, security, legal defense, record retention)

  • And delete or anonymize it when no longer needed

 

You may request deletion of your Personal Data at any time, unless retention is legally required or necessary to defend a legal claim.

 

7. Security Measures

 

We protect data using appropriate safeguards including:

  • HTTPS and encrypted transfer in all browser/server communications

  • Hashed password storage for accounts

  • Restricted internal access based on roles

  • Mandatory security standards for all analytics, identity, or payment partners

  • Breach notification processes where required under law

  • Anti-abuse and fraud-detection monitoring using minimal necessary data

 

8. Your Rights

 

You may have the ability to request or exercise:

  • Access to data we process about you

  • Correction (rectification) of inaccurate data

  • Erasure / deletion

  • Processing restriction

  • Portability of data you directly provided

  • Objection to processing based on legitimate interest

  • Opt-out from marketing or targeted processing

  • Right against discrimination or retaliation for exercising privacy rights

  • Appeal rights, where applicable

  • Complaint submission to your regional Data Protection Authority

 

We may request identity verification to protect data integrity and prevent unauthorized release.

 

9. Cookies & Tracking

 

Cookies are used only where enabled by your browser and accepted via consent where required.
You may disable or control cookies through your browser. Some functionality may be limited if you do so.

(If you truly do not use cookies, I can generate a compliance replacement clause for that section.)

 

10. Third-Party Disclosures

 

We may share Personal Data only with:

  • Essential service providers (authentication, analytics, payments, security)

  • Partners you authorize

  • Legal authorities when we are permitted or required to respond to lawful requests

 

All sharing remains purpose-limited, legally justified, and secure.

 

11. Children's Privacy

 

We do not knowingly collect Personal Data from children under 18.
If detected or submitted unintentionally, we will delete it or require guardian authorization where required by law.

 

12. Updates to This Policy

 

We may revise this Policy periodically. Updates are posted on our website.
Users may be asked to review and confirm acceptance in order to continue using certain services.

 

13. Contact

 

For data requests, privacy inquiries, or rights exercise, contact:

​

bottom of page