Privacy Policy
1. Who is responsible
AI 4 WATER LTD is the controller of the personal data described below. Questions, requests and complaints: [email protected].
2. What we collect
| Category | What it is | Why we have it |
|---|---|---|
| Contact data | Name, email address and the content of your message when you use the contact form or email us | To answer you and keep a record of the enquiry |
| Customer and billing data | Name, email, company, billing country, tax reference where required, subscription status, invoice history. Card numbers are entered on our payment provider's page and are never stored on our systems — we only see a payment token and the last digits of the card | To deliver the service, take payment and meet tax and accounting duties |
| Service usage data | API key identifier, endpoint called, timestamp, response size, IP address, and the parameters of the request where they are needed to serve it | To operate the service, apply rate limits, detect abuse and keep it reliable |
| Website analytics | Aggregate, cookieless visit statistics (Cloudflare Web Analytics): page views, referrer, country, device type. No cross-site identifiers, no advertising profiles | To understand which pages are useful |
| Correspondence | Emails and messages exchanged with us, including support requests | To resolve issues and document what was agreed |
We do not deliberately collect data from children, and we do not buy or sell personal data.
3. Legal bases
- Contract — to deliver what you paid for, manage your subscription and support you (Art. 6(1)(b)).
- Legal obligation — to keep accounting, tax and company records (Art. 6(1)(c)).
- Legitimate interests — to secure the service, prevent fraud and abuse, enforce our terms and improve our service (Art. 6(1)(f)). We balance these against your rights.
- Consent — for any newsletter or optional update you ask for, which you can withdraw at any time (Art. 6(1)(a)).
4. Who we share it with
We use a small number of processors, each under a written agreement, and we share only what they need:
- our payment services provider — to process card payments and subscriptions;
- Cloudflare — website hosting, DNS, CDN and cookieless analytics;
- GitHub — static hosting of this website;
- our email service provider — to send transactional email such as receipts and service notices;
- our cloud infrastructure provider — to run the API that serves paid data.
We may also disclose data where we are required by law, or to professional advisers (accountants, lawyers) under confidentiality. Where personal data is transferred outside the UK/EEA, we rely on an adequacy decision or on standard contractual clauses plus, where needed, additional safeguards.
5. How long we keep it
- Contact and support correspondence — up to 24 months after the last exchange.
- Billing, invoice and tax records — up to 6 years, as UK law requires.
- API usage logs — up to 12 months, then deleted or aggregated.
- Newsletter and update consent records — until you withdraw consent.
6. Your rights
You have the right to be informed, to access your data, to have inaccurate data corrected, to have data erased, to restrict or object to processing, to data portability, and to withdraw consent where consent is the basis. Some of these rights are limited where we must keep records by law.
To exercise a right, email [email protected]. We reply within one month (extendable by two months for complex requests) and we may ask you to verify your identity first.
If you are unhappy with how we handle your data you can complain to the UK Information Commissioner's Office (ico.org.uk). If you live in the Netherlands you can also complain to the Autoriteit Persoonsgegevens.
7. Cookies and tracking
This website does not set advertising or tracking cookies, and there is no advertising or profiling on it. The only measurement in place is Cloudflare Web Analytics, which is cookieless and reports aggregate statistics without identifying individual visitors. Essential technical headers and server logs are used to serve the site and to protect it from abuse.
8. Security
We use encryption in transit, access control on our servers, hashed or tokenised secrets for API keys, and keep our software updated. No system is perfect; if a breach affects your rights we will notify you and the relevant supervisory authority as required.
9. Changes
We update this policy when our processing changes; the version number and date at the top always show the current text. Material changes are announced on this page.