Privacy Policy

1. Data We Collect

We collect and process the following types of information:

• Personal Information: Including your name, email address, contact details, and payment information for account creation, service delivery, and billing purposes.
• Invention & Intellectual Property Data: Information related to your innovations, designs, and creative works submitted for patent and copyright filings.
• Usage Data: Log files, device information, browsing patterns, and other analytics that help us improve our platform and user experience.
• Communication Data: Records of correspondence when you contact us or interact with our customer support team.

2. How We Use Your Data

We use your data for the following purposes:

• To provide and improve our AI-powered intellectual property filing and management services.
• To process transactions and ensure secure payment processing.
• To personalize your experience and deliver content and product offerings relevant to your interests.
• To communicate with you about service updates, security alerts, and administrative messages.
• To detect and prevent fraudulent activity and enhance the security of our platform.
• To comply with legal obligations and intellectual property regulations.

3. Legal Basis for Processing

We process your personal data on the following legal grounds:

• Contract Performance: Processing necessary to fulfill our contractual obligations to you when providing our services.
• Legitimate Interests: Where processing is in our legitimate interests, such as improving our services and ensuring platform security.
• Consent: Where you have explicitly given consent for specific processing activities, such as marketing communications.
• Legal Compliance: Where we need to process your data to comply with legal obligations under UK and EU law.

4. Data Protection & Security

We implement robust security measures to safeguard your data, including:

• Advanced encryption for sensitive data and communications.
• Strict access controls and authentication protocols.
• Regular security assessments and vulnerability testing.
• Compliance with industry standards and best practices for data protection.

While we are committed to protecting your information, no method of data transmission or storage is 100% secure. We encourage users to take appropriate precautions when sharing sensitive information online.

5. Sharing Your Information

We do not sell or rent your personal data to third parties. However, we may share information with:

• Service Providers: Third parties that help us deliver our services, such as payment processors, cloud hosting providers, and analytics services.
• Legal Authorities: When required by law, court order, or governmental regulation, including compliance with the Regulation of Investigatory Powers Act 2000.
• Business Partners: In connection with specific services or joint offerings, always with appropriate data protection agreements in place.
• Professional Advisors: Including lawyers, auditors, and insurers where necessary for the operation of our business.

6. Your Rights

Under the UK Data Protection Act 2018 and GDPR, you have the following rights:

• Access: The right to request copies of your personal data.
• Rectification: The right to request that we correct inaccurate personal data.
• Erasure: The right to request that we delete your personal data in certain circumstances.
• Restriction: The right to request that we restrict processing of your personal data.
• Data Portability: The right to receive your personal data in a structured, commonly used format.
• Objection: The right to object to our processing of your personal data based on legitimate interests or direct marketing.

To exercise any of these rights, please contact us using the details provided below.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements. When determining appropriate retention periods, we consider:

• The amount, nature, and sensitivity of the personal data.
• The potential risk of harm from unauthorized use or disclosure.
• The purposes for which we process your data and whether we can achieve those purposes through other means.
• Legal requirements and statutory limitations periods.

8. International Data Transfers

ALY AI: Autograph primarily processes data within the United Kingdom and European Economic Area (EEA). However, some of our service providers may be located outside these regions. When we transfer data internationally, we ensure appropriate safeguards are in place, including:

• Standard contractual clauses approved by the UK Information Commissioner's Office.
• Adequacy decisions where the recipient country provides adequate protection.
• Data processing agreements that enforce equivalent data protection standards.

9. Cookies and Similar Technologies

Our platform uses cookies and similar tracking technologies to enhance functionality and user experience. These may collect information about your browsing activities and preferences. You can manage your cookie preferences through your browser settings, although this may affect certain features of our service.

10. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal information, please contact us, and we will take steps to remove such information.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of any material changes via email or through a notice on our website. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Email: privacy@alyautograph.com

Postal Address:
ALY AI: Autograph
Data Protection Team
123 Innovation Street
London, EC1A 1BB
United Kingdom

You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk).