Skip to main content

Privacy Policy

Introduction

RAIDS AI LTD (“RAIDS” or “we” or “us”) has created this Privacy Policy in order to disclose its processing, collection, use and disclosure of personal information and other data about you by RAIDS, its employees, affiliates, and successors and assigns, in connection with its website, applications, software, services, including the service that allows monitoring of other AI systems for rogue behaviour, and other RAIDS properties or technology displaying or referencing this Privacy Policy (collectively, the “Services”).

If you use the Services, you acknowledge this policy and the collection, use and sharing of your personal information and data as described herein, and in accordance with the applicable agreements with RAIDS, including but not limited to any applicable terms of service.

It is important that you read this privacy policy together with any other privacy policy or fair processing policy we may provide on specific occasions when we are collecting or processing personal data about you so that you are fully aware of how and why we are using your data. This privacy policy supplements other notices and privacy policies and is not intended to override them.

The Services are not intended for children and we do not knowingly collect data relating to children.

Please read the following carefully to understand our practices regarding your personal data and how we will treat it.

‍

Who we are

We are RAIDS AI Ltd, a limited liability company registered in the Republic of Cyprus under company number HE 466437. Our registered office is at Nikis 26, TRANSAFRICA, Floor 3, Flat/Office 301, 1086 Nicosia, Cyprus. Our email is info@raidsai.ai.

We are the controller responsible for your personal data. In some cases, we may process your personal data based on an agreement with a third party. In those cases, that third party is a data controller, and we are a data processor. In relation to the Services, we may act as the data processor of business customers that may provide personal information in their feedback to us. In such instances, we will only process your data to provide the Services based on a relevant data processing agreement, in accordance with applicable law. This Privacy Policy covers our processing as a controller.

If you have any questions about this Policy or how we process your personal data or our privacy practices, please contact us at info@raidsai.ai.

‍

What personal information we collect about you

RAIDS only collects the most relevant, proportionate to each purpose and necessary personal information from you in the course of our business when you use the Services. RAIDS may collect or receive information about each person who visits, utilizes or interacts with the Services.

RAIDS collects, uses, stores and transfers personal data about you as follows:

  • Identity Data that includes your first name, last name, username or similar identifier, Contact Data that includes but is not limited to billing address, delivery address, email address, telephone numbers
  • Financial Data that includes but is not limited to bank account and payment card details
  • Transaction Data that includes but is not limited to details about payments to and from you and other details of products, services you have purchased from us
  • Technical Data: When you visit any Services, we may automatically collect certain information, including information about your device such as your web browser, IP address, time zone, and other information on your device in connection with our site and Services.
  • Additionally, we collect information as you browse the website, including the web pages you view, the referral source (such as the page, website or search terms that brought you to the site), and other information about your interactions with our Sites (Usage Data). Such information may or may not be considered personal information. To the extent they are considered personal data, we will process them in accordance with this Privacy Policy.

We also collect, use and share aggregated data such as statistical or demographic data for any purpose. Aggregated data could be derived from your personal data but is not considered personal data in law as this data will not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific feature of our Sites. However, if we combine or connect aggregated data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy policy.

The Services do not require you to include sensitive information (e.g., racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union memberships, genetic data, biometric data, data concerning health or data concerning sexual orientation). In the event that you provide such sensitive information without an express agreement authorizing it, you acknowledge that you have provided RAIDS explicit consent concerning the collection, use and disclosure of such information in accordance with this Privacy Policy or as otherwise described to you at the time of collection. If the jurisdiction where you reside requires affirmative, separate, opt-in consent, this paragraph does not apply to you and you are required to provide consent at or before the time of collection, or if not, do not provide the sensitive information to RAIDS. In any case, we advise you not to share any sensitive information with us.

‍

If you fail to provide information

Where we need to collect personal data by law, or under the terms of a contract we have with you, and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with goods or services). In this case, we may have to cancel a product or service you have with us, but we will notify you if this is the case at the time.

‍

How we obtain your personal information

We use different methods to collect data from and about you including through:

  • Information you give us. This is information you consent to giving us about you by filling in forms on Services, including by opening an account, or by corresponding with us (for example, by email or any other form we have on our website). It includes information you provide when you register to use the Services, sign up or make an account with us, subscribe to any of our Services, subscribe to our publications, apply for our services, share data via social media functions of the Services, request marketing to be sent to you, enter a competition, promotion or survey, give us feedback, and when you report a problem with our Services, or when Services send us error reports. If you contact us, we will keep a record of that correspondence.

Additionally, we may collect information about you when you include it as part of your feedback and input to our AI service that monitors the performance of AI systems.

  • Information we collect about you via automated technologies or interaction. Each time you visit or use our website and Services, we will automatically collect personal data including Technical Data about your equipment, browsing actions and patterns, and Usage Data. We collect this data using cookies and other similar technologies. Please see our cookie policy at https://app.raidsai.ai/cookies-policy for further details.
  • Information we collect as described to you at or before the time of collection
  • Information we receive from other sources including third parties and publicly available sources.

We will receive personal data about you from various third parties as set out below:

  • analytics providers, such as Google Analytics.
  • advertising networks, search information providers.
  • Contact, Financial and Transaction Data from providers of payment services
  • our affiliates, organizations with a relationship with RAIDS (such as customers, prospects and suppliers),
  • social media sites, organizations providing marketing contacts,
  • publicly available databases,
  • other third-party services and organizations to supplement information provided by you.

Some personal information may also be collected by a third-party such as a customer, service provider, or social networking site. If you interact with these third-parties or other third-party services, such as social media companies, particularly where you have an account with the third party, they may collect additional information separate from RAIDS.

‍

Use and Disclosure of Personal Information

Purposes for which we will use your personal data

We will use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

  • When we have your consent,
  • Where we need to perform the contract we are about to enter into or have entered into with you.
  • Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
  • Where we need to comply with a legal obligation.

We shall not carry out any automated decision-making activities, including profiling, using your personal information which produce legal effects concerning you or similarly significantly affect you.

‍

Change of Purpose

We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us.

If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.

Please note that we may process your personal data without your knowledge or consent, in compliance with the rules in these policy, where this is required or permitted by law.

‍

Purposes and lawful basis for processing

We use and disclose your personal information for the following purposes:

  • To provide, deliver, and improve the Services, including:
    • registering you as a new customer or onboarding you, creating and administering your account
    • generating outputs and reports based on your feedback and input regarding performance of AI systems
  • Lawful Basis for Processing: Performance of a contract with you
  • To allow you to submit payment for our products and services, and process and deliver your order, including:
    • Managing payments, fees, and charges,
    • Collecting and recovering money owed to us
  • Note: We store limited payment-related data. Most such data is transferred to our payment processor. Please review our payment processor’s Privacy Policy for details on their data usage. By using our site and services, you agree to be bound by our provider’s Privacy Policy.
  • Lawful Basis for Processing:
  • Performance of a contract with you
  • Necessary for our legitimate interests (to recover debts due to us)
  • To manage our commercial relationship with you, including:
  • Notifying you about changes to our terms or privacy policy
  • Notifying you about changes to our website, or Services
  • Asking you to leave a review or take a survey
  • Providing customer support, answering and managing your support requests, including fixing errors or bugs related to your use of our Services
  • Performing functions as instructed by you or otherwise described to you at the time of collection
  • Responding to requests, inquiries, and questions made by you, and providing requested information
  • Lawful Basis for Processing:
    • Performance of a contract with you
    • Necessary to comply with a legal obligation
    • Necessary for our legitimate interests (to keep records updated and study how customers use our products/services)
  • To administer and protect our business and website, including:
    • Managing the Security of our Services
    • Troubleshooting, data analysis, testing, system maintenance, support, reporting, and hosting of data
    • Auditing and monitoring the Services
    • Providing and maintaining the Services
    • Providing analysis and insights to improve the Services
    • Protecting the rights, property, or safety of the company or third parties
    • Detecting, preventing, resolving, and addressing technical issues
  • Lawful Basis for Processing:
    • Necessary for our legitimate interests (for running our business, administration, IT services, network security, fraud prevention, and in the context of a business reorganization or group restructuring exercise)
    • Necessary to comply with a legal obligation
  • To deliver marketing, including
    • Sending newsletters with updates and information about the Services
    • Inviting you to our events and webinars
    • Developing leads and business opportunities
  • Lawful Basis for Processing
    • Your consent for sending you our newsletters. You can withdraw your consent at any time by unsubscribing or contacting us at
  • To conduct a sale of all or substantially all of our business or assets, including the sale, assignment, or transfer of your personal information in connection with such a transaction
  • Lawful Basis for Processing:
    • Necessary for our legitimate interests (to enable a potential sale or reorganization of our business)
  • To comply with any applicable law, court order, judicial process, or regulatory requirements, including:
    • Fulfilling legal, compliance, regulatory, and risk management obligations
    • Identity verification, auditing transactions, and other compliance activities
    • Using data as otherwise required or permitted by law
  • Lawful Basis for Processing:
    • Necessary to comply with a legal obligation
  • To enforce our legal rights, terms and conditions, and other agreements, including
    • Monitoring breaches of our Terms or Acceptable Use Policy
    • Managing requests of our customers seeking to enforce part of the Terms
    • Establishing, exercising, or defending legal claims
    • Responding to investigation, court orders, legal process, or investigating, preventing or taking action regarding illegal activities, suspected fraud, security of systems or data, or situations involving potential threats to the physical safety of any person, or as otherwise required by law.
  • Lawful Basis for Processing:
    • Performance of a contract with you
    • Necessary to comply with a legal obligation
    • Necessary for our legitimate interest (ensure security)
  • To resolve disputes and defend ourselves, including
    • Investigating and resolving any disputes that may arise out of your use of the Services, including defending against potential claims
    • Enforcing our contract, including actions such as suspending your account
  • Lawful Basis for Processing:
    • Legitimate interest (protecting and exercising our legal rights)
    • Performance of a contract with you
  • To reply to your requests about your personal data
    • We use your personal data to reply to your requests to exercise your rights on your personal data
  • Lawful basis: Our legal obligation to reply to your requests

‍

Who we share your personal information with

We may share personal information the following categories of third parties as necessary:

  • Service providers who provide IT, system administration services and customer screening services.
  • Our payment processors in order to allow them to carry out and process your payments for the purchase of our products/services/content. Please make sure to review the payment processor’s Privacy Policy to determine how they use, disclose and protect the relevant payment data.
  • Third parties to whom we outsource certain support services such as, without limitation, IT systems and/or software and/or storage providers, IT Support service providers, document and information storage providers.
  • Professional advisers including lawyers, bankers, auditors, insurers and other professionals who provide consultancy, banking, legal, insurance, corporate, administration and accounting services.
  • Government or governmental agencies, regulatory authorities, courts and law enforcement agencies, registries. We may be required to disclose your information to comply with legal or regulatory requirements. We will use reasonable endeavours to notify you before we do this, unless we are legally restricted.
  • Appropriate parties in the event of emergencies.
  • Advertising networks: to support and display ads on our Services, and other social media tools.
  • Third party service providers to assist us with client insight analytics, such as Google Analytics.

Please note the following:

  • This list is non-exhaustive and there may be other examples where we need to share with other parties in order to provide our services as effectively as we can.
  • We do not sell, rent or otherwise make personal information commercially available to any third party, except with your prior permission.
  • We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

‍

Cookies

We use cookies and/or other tracking technologies to distinguish you from other users of the Services, or any other relevant services sites and to remember your preferences. This helps us to provide you with a good experience when you use the Services and also allows us to improve the Services. For detailed information on the cookies we use, the purposes for which we use them and how you can exercise your choices regarding our use of your cookies, see our cookie policy.

‍

Data Retention

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal data for longer if we are required to do so based on our regulatory, compliance, or professional indemnity obligations or in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you. To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements. We may remove your personal information based on our retention policies in compliance with our security standards without further notice or liability.

In some circumstances you can ask us to delete your data: see Your legal rights below for further information.

In some circumstances we will anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.

‍

How we protect your personal information

We use a variety of technical and organisational measures to help protect your personal information from unauthorised access, use, disclosure, alteration or destruction consistent with the applicable data protection laws including the EU General Data Protection Regulation. We have also implemented appropriate information security policies, rules and technical measures to secure your personal information collected by us. Your personal information is saved in an encrypted form.

All of our partners, employees, consultants, workers and data processors (i.e., those who process your personal information on our behalf), who have access to, and are associated with the processing of personal information, are obliged to respect the confidentiality of such personal information, keep it secure and protect it.

Our AI Service allows you to submit feedback, input, and data. Please note human operators will not have access to the feedback, input, and data used by RAIDS AI Service. In any case, ensure when using these features that you do not submit any personal data that you do not want to be seen, collected, or used by other users.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator when we are legally required to do so.

Please note that certain data uploaded to enable the operation of our Services is stored temporarily for user validation purposes and deleted after analysis. This includes baseline data. Other data may be stored to enable the operation, maintenance, and provision of Services. We implement security measures to protect the confidentiality of such data.

‍

International Transfers

In order to provide our services, we may need to transfer your personal information to locations outside Cyprus. This may entail a transfer of your information from a location within the European Economic Area (the “EEA”) to outside the EEA, or from outside the EEA to a location within the EEA.

For any transfer of data outside the EEA, we will implement appropriate measures to ensure that your personal information remains protected and secure in accordance with applicable data protection laws and the EU General Data Protection Regulation.

‍

Your rights regarding your personal information

You have the following rights in relation to the personal information we hold about you in the EU and the UK. Please note that some of these rights will only apply in certain circumstances and some of them may be limited where we have an overriding interest or legal obligation to continue to process the data or where data may be exempt from disclosure due to reasons of confidentiality obligations.

  • Access: you are entitled to ask us if we are processing your data and, if we are, you can request access to your personal data. This enables you to receive a copy of the personal data we hold about you and certain other information about it;
  • Correction: you are entitled to request that any incomplete or inaccurate personal data we hold about you is corrected;
  • Erasure: you are entitled to ask us to delete or remove personal data in certain circumstances. There are also certain exceptions where we may refuse a request for erasure, for example, where the personal data is required for compliance with law or in connection with claims;
  • Restriction: you are entitled to ask us to suspend the processing of certain of your personal data about you, for example if you want us to establish its accuracy or the reason for processing it;
  • Transfer: you may ask us to help you request the transfer certain of your personal data to another party;
  • Objection: where we are processing your personal data based on legitimate interests (or those of a third party) and you may challenge this. However, we may be entitled to continue processing your information. You also have the right to object where we are processing your personal information for direct marketing purposes;
  • Automated decisions: you may contest any automated decision made about you where this has a legal or similar significant effect and ask for it to be reconsidered.
  • Consent: where we are processing personal data with consent, you can withdraw your consent.

In certain states in the United States, you have the following rights:

  • Access. You may have the right to access your personal data or the categories of personal data that our Company processes.
  • Correct/Update. You may have the right to correct and/or update your personal data.
  • Erasure. You may have a broader right to erasure of personal data that we hold about you. For example, if it is no longer necessary in relation to the purposes for which it was originally collected. Please note, however, that we may need to retain certain information for record keeping purposes, to complete transactions or to comply with our legal obligations, among other things.
  • Data portability. In certain circumstances, you may have the right to be provided with your personal data in a structured, machine readable and commonly used format and to request that we transfer the personal data to another data controller without hindrance.
  • Confirm processing. You may have the right to confirm our processing of your personal data.
  • Transparency. You may have the right to request additional information not contained in this Privacy Policy. Note: if your US state requires specific privacy disclosures, please see our disclosures above concerning our collection, use and disclosure of personal information as well as the information contained in the California privacy rights section below.
  • Cross-contextual behavioral advertising. You may have the right to opt out of the “sharing” of personal data in connection with cross-contextual behavioral advertising.
  • Restrict processing. You may have the right to request that we restrict processing of your personal data in certain circumstances. For example, where you believe that the personal data we hold about you is inaccurate or unlawfully held. You may also be able to opt-out of targeted advertising, processing of sensitive data, and profiling in furtherance of law.
  • Accessibility: You may have the right to additional assistance with your privacy rights. If you are unable to reasonably access this Privacy Policy due to a disability, please contact us via the contact information below so that we may determine how to provide you with alternate notice.

If you would like to exercise any of the above rights, please contact us by email (see our contact details in the “Contacts” Section below). We will consider your request in accordance with applicable laws. To protect your privacy and security, we may take steps to verify your identity before complying with the request.

Where our services are made available to you through an organization (e.g. your employer), that organization is the administrator of the services and is responsible for the accounts and/or service over which it has control. Please direct your data privacy questions to your administrator, as your use of the services is subject to that organization's policies. We are not responsible for the privacy or security practices of an administrator's organization, which may be different from this policy.

RAIDS will not discriminate against a data subject for exercising any of its data protection rights.

For reconsideration of our response to your request under any applicable law that provides for an appeal, please request an appeal within the time frame for the appeal notice set forth in the applicable law (or in the event no time frame is provided, then fifteen days) by utilizing the contact information published below.

If you need further assistance regarding your rights, please contact us using the contact information provided below and we will consider your request in accordance with applicable law. There may be exceptions to the foregoing rights and some or all of the above rights may not apply to you. Where a privacy law permits an organization to continue to maintain and/or use personal information for a particular purpose, despite receiving your request, we reserve the right to utilize your personal information for such purpose. In some cases, our ability to uphold these rights for you may depend upon our obligations to process personal data for security, safety, fraud prevention reasons, compliance with regulatory or legal requirements, or because processing is necessary to deliver the services you have requested. Where this is the case, we will inform you of specific details in response to your request.

If you are an individual in the EU / EEA, you have the right to make a complaint to the relevant Supervisory Authority. A list of EU / EEA Supervisory Authorities is available here: http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm. If you are in the UK, you have a right to make a complaint to the UK Information Commissioner's Office. You can visit their website at www.ico.org.uk.

If you live in a different country, state or other jurisdiction that provides for additional rights or disclosures regarding your personal information, and you wish to exercise those rights or receive those disclosures, please contact us using the contact information below.

‍

Our Marketing Policy

We will only process your personal data for marketing purposes once we have your consent. You have the right to object where we are processing your personal information for direct marketing purposes. This means you can opt-out from receiving direct marketing from us at any time.

You can opt-out of receiving direct marketing from us at any time. You can do this by clicking on the "unsubscribe" link included at the end of any marketing email we send to you, or by contacting us at info@raidsai.ai.

You have the right to ask us not to continue to process your personal data for marketing purposes.

‍

Links to third party websites or apps

Our Services, email updates and other communications may, from time to time, contain links to and from the websites or apps of others. The personal data that you provide through these websites or apps is not in any case subject to this Privacy Policy and the treatment of your personal data by such websites is not our responsibility.

You should consult the third parties’ Privacy Policy notices which will set out how your information is collected and processed when visiting those websites or apps, as we have no control over information that is submitted to, or collected by, these third parties.

‍

Children

We do not knowingly collect information from children or other persons who are under 16 years old without the consent and acceptance by any of their parent and/or guardian. If you are under 16 years old, you may not submit any personal data to us without the consent and acceptance by any of your parent and/or guardian.

‍

Changes to this Policy

We may make changes to this Privacy Policy from time to time. To ensure that you are always aware of how we use your personal information we will update this Privacy Policy from time to time to reflect any changes to our use of your personal information. We may also make changes as required to comply with changes in applicable law or regulatory requirements. Where it is practicable, we will notify you by email of any significant changes. However, we encourage you to review this Privacy Policy periodically to be informed of how we use your personal information.

It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.

‍

Contact us

Notwithstanding any other specific provision in this Privacy Policy, you can contact us at info@raidsai.ai to:

  • See what data we have about you,
  • Change or correct any data we have about you,
  • Request us to delete any data we have about you,
  • Opt-out of receiving promotional communication and content from us,
  • Ask questions, make inquiries, complaints, or claims, or provide feedback.

‍

California Privacy Rights and Disclosures

Below is a list of categories of personal data (from the California Consumer Privacy Act) we have collected and disclosed about consumers for a business purpose in the past 12 months:

  • Category A: Identifiers;
  • Category B: Personal Data categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e));
  • Category C: Protected classification characteristics under California or federal law;
  • Category D: Commercial information;
  • Category F: Internet or other electronic network activity;
  • Category G: Geolocation data;
  • Category I: Professional or employment-related information;
  • Category K: Inferences drawn from other Personal Data to create a profile about a consumer.

The above list does not include information about personal information collected and disclosed while operating as a service provider to our customers.

Personal information may be used and disclosed for business purposes such as ensuring the security of the Sites, performing services on our behalf, short-term transient use, providing advertising and marketing services, technological research and development, and other business purposes.

Service providers and other categories of third parties that may receive personal information under a business purpose include advertising networks, affiliates, data analytics providers, email providers, government entities, internet and other technology service providers, lendors or other financing, payment processors, and social networks.

If the California Consumer Privacy Act, as amended (“CCPA”) applies to your personal information, please also see the section titled “Your Privacy Rights” above.

If you are a California resident, California Civil Code Section 1798.83 permits you to request certain information regarding our disclosure of personal information to third parties for the third parties’ direct marketing purposes. To make such a request, please contact us by sending an e-mail to privacy@raidsai.ai.

Our website and/or application are not intended to appeal to minors. However, if you are a California resident under the age of 18, and a registered user of our website and/or application, California Business and Professions Code Section 22581 permits you to request and obtain removal of content or information you have publicly posted. To make such a request, please send an e-mail with a detailed description of the specific content or information to privacy@raidsai.ai. Please be aware that such a request does not ensure complete or comprehensive removal of the content or information you have posted and that there may be circumstances in which the law does not require or allow removal even if requested.

Under California law, California residents who have an established business relationship with us may opt-out of our disclosing personal information about them to third parties for their marketing purposes.

‍

Last updated: 12/8/2025

‍