AIF Trust

Privacy Policy

Last updated: October 2026

1. Overview

AIF Trust ("we", "us", "our") operates the website aiftrust.us and provides the AIF Trust Enterprise Agent Governance Platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

We are committed to protecting your privacy. We do not sell your personal information. We collect only what is necessary to operate our platform, communicate with you, and improve our services.

2. Information We Collect

2.1 Information You Provide Directly

  • Early Access Applications: Name, work email, company, role, use case description, scale, compliance requirements, timeline.
  • Direct Communications: Email content when you contact us at [email protected] or other addresses.
  • Account Information: If you become a customer, we collect billing details, organizational information, and technical configuration data.

2.2 Information Collected Automatically

  • Usage Data: Pages visited, time spent, clicks, scroll depth, referrer.
  • Technical Data: IP address, browser type, operating system, device identifiers, screen resolution.
  • Platform Telemetry: If you use our platform, we collect execution metadata, performance metrics, and audit logs as described in our Terms of Service.

2.3 Cookies and Similar Technologies

See our Cookie Policy for details on cookies, local storage, and tracking technologies.

3. How We Use Your Information

  • Early Access Evaluation: To review applications, assess fit, and communicate with applicants.
  • Service Delivery: To provide, maintain, and improve the AIF Trust platform.
  • Communication: To send service updates, security notices, and (with consent) product updates.
  • Security & Compliance: To detect fraud, prevent abuse, and meet legal obligations.
  • Analytics: To understand website usage and improve user experience (aggregated, pseudonymized).

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area, we rely on:

  • Legitimate Interest: Website analytics, security, fraud prevention, improving our services.
  • Contract Performance: Delivering the platform to customers.
  • Consent: Marketing communications, non-essential cookies (withdrawable at any time).
  • Legal Obligation: Compliance with applicable laws, regulations, and legal requests.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share data only in these circumstances:

  • Service Providers: Cloudflare (hosting, CDN, WAF, analytics), email delivery (transactional only), payment processors (for customers). All processors sign DPAs.
  • Legal Requirements: When required by law, court order, or government request.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets (with notice).
  • With Your Consent: For any other purpose not listed here.

We do not share early-access application data with third parties for marketing purposes.

6. Data Retention

  • Early Access Applications: Retained for 24 months from submission, then deleted unless you become a customer.
  • Website Analytics: Aggregated data retained indefinitely; raw logs purged after 12 months.
  • Customer Data: Retained for the duration of the contract plus 7 years for legal/compliance purposes.
  • Platform Telemetry: Evidence packages retained per customer configuration (default: 7 years for audit).

7. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Erase your data ("right to be forgotten")
  • Restrict or object to processing
  • Data portability
  • Withdraw consent (where processing is based on consent)
  • Lodge a complaint with a supervisory authority

To exercise these rights, email [email protected]. We respond within 30 days.

8. International Transfers

Our infrastructure is hosted on Cloudflare's global network. Data may be processed in the United States and other jurisdictions where Cloudflare operates. We rely on Standard Contractual Clauses and Cloudflare's data processing addendum for transfers outside the EEA.

9. Security

We implement appropriate technical and organizational measures: TLS 1.3 in transit, encryption at rest, least-privilege access, regular security reviews. However, no internet transmission or storage is 100% secure. See our Security page for details.

10. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal information from children. If you believe we have collected such information, contact us immediately.

11. Changes to This Policy

We may update this policy. Material changes will be announced via email (to customers) or prominent website notice. The "Last updated" date above reflects the latest revision.

12. Contact Us

Questions about this policy or your data: