Privacy Policy

1. Data controller

The data controller is [COMPANY LEGAL NAME], [REGISTERED ADDRESS]. For any question relating to your personal data, you can reach us at hello@elephantintheroom.ai.

2. Data we collect

We collect information you provide directly, such as your name, business email, and company details when you contact us or book a call. When you use the platform, we process the operational data your organization chooses to share with us.

We also collect limited technical data (such as browser type and pages visited) to operate and improve our website.

3. How we use data

We use personal data to provide and improve the platform, respond to your requests, and communicate with you about our services. We do not sell your personal data.

Operational data submitted to the platform is used solely to deliver the service to your organization, in line with our contractual commitments.

4. Legal basis

Where the GDPR applies, we process personal data on the basis of your consent, the performance of a contract, our legitimate interests, or to comply with a legal obligation, depending on the context.

5. Data sovereignty and security

We work with clients in regulated professions where confidentiality is not optional. Data sovereignty, professional secrecy, and access controls are designed into the platform. We apply appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or disclosure.

6. Data retention

We retain personal data only as long as necessary for the purposes described in this policy, or as required by applicable law.

7. Your rights

Depending on your location, you may have the right to access, correct, delete, or restrict the processing of your personal data, and to object to certain processing. To exercise these rights, contact us at hello@elephantintheroom.ai.

8. Third-party providers

We rely on selected infrastructure and AI providers (which may include Google Cloud, Anthropic, and OpenAI) to operate the platform. These providers process data on our behalf under appropriate data-processing agreements.

9. Changes to this policy

We may update this Privacy Policy from time to time. The updated version is indicated by the “Last updated” date above.