Privacy Policy

Aitelligent Ltd ("Aitelligent", "we", "us") is a company registered in England & Wales, with its principal place of business in London, United Kingdom. We provide a post-sales customer intelligence platform that unifies CRM records, support tickets, conversations and product signals into customer health scores, churn alerts and automated playbooks.

For personal data relating to our own website visitors, prospects, newsletter subscribers and direct account holders, Aitelligent acts as a data controller. For personal data that our customers upload, connect or otherwise process through the Aitelligent Dashboard, Aitelligent acts as a data processor on that customer's instructions under a Data Processing Agreement (DPA).

Privacy questions, requests and complaints: info@aitelligent.co.

• Account & identity data — name, company email, company, job title, authentication identifiers, and role/permission assignments.
• Commercial & billing data — plan tier, subscription status, invoices, and payment metadata (card data is handled by our PCI-DSS compliant payment processor; we never store full card numbers).
• Customer platform data — data you connect from integrated systems (for example CRM contacts and opportunities, support tickets, chat transcripts, call recording metadata, meeting notes and usage events). This may include the personal data of your own customers and end users.
• Support & communications data — messages you send to us, in-app AI support conversations, demo requests and newsletter preferences.
• Technical & security data — IP address, device and browser information, timestamps, audit logs, and error diagnostics.

The service is not designed to process special-category personal data or children's data. Do not upload or connect such data unless agreed in writing with us and covered by an appropriate lawful basis and safeguards. This is a customer instruction, not an automated detection or blocking control. General names, emails and other personal data are not automatically redacted across all ingestion paths; remove unnecessary or sensitive personal data before uploading or connecting sources.

• Performance of a contract — providing the Dashboard, integrations, playbooks, CSQL handoffs and AI support to account holders.
• Legitimate interests — securing the platform, preventing fraud and abuse, improving reliability, and business-to-business marketing to relevant professional contacts (always balanced against your rights and subject to opt-out).
• Consent — newsletter subscriptions (double opt-in), non-essential cookies and analytics, and any optional communications. Consent can be withdrawn at any time.
• Legal obligation — accounting, tax, statutory reporting and responding to lawful requests from authorities.

• Operating and securing your Aitelligent workspace and user accounts.
• Generating customer health scores, churn and expansion signals, recommended tasks and playbook actions.
• Delivering CSQL handoffs and status syncs to your connected CRM systems at your direction.
• Providing AI-assisted support, diagnostics and escalation to our team.
• Billing, service notices, security alerts and product updates.
• Aggregated, de-identified benchmarking and product analytics.

Aitelligent uses machine learning and large language models to score account health, summarise conversations, and suggest next-best actions. Our commitments:

• Customer content is not used to train foundation models, and we contractually require model providers to exclude our traffic from training.
• Model outputs are decision support, not automated decisions with legal effect. A human owner reviews and actions every recommendation, alert and handoff.
• Prompts and outputs are logged for auditability and retained under the retention schedule below.
• You can restrict which data sources (tickets, transcripts, call recordings, health metrics) each AI persona may access from within the Dashboard.

We never sell personal data. We share it only with vetted sub-processors under written data processing terms, and only to the minimum extent needed to run the service:

• Cloud hosting, managed database and serverless compute providers.
• Transactional and newsletter email delivery providers.
• AI model and inference providers (no training on customer content).
• Payment processing, error monitoring and product analytics providers.
• Systems you explicitly connect (for example Salesforce, HubSpot, Slack, Microsoft Teams, Gmail, Outlook, Notion, Trello, Asana) — data flows to those systems on your instruction and is then governed by their own terms.

We may also disclose data where required by law, to enforce our terms, or as part of a merger or acquisition (with notice to affected customers).

Personal data is primarily processed in the United Kingdom and European Economic Area. Where data is transferred outside the UK/EEA, we rely on UK adequacy regulations, the EU Standard Contractual Clauses together with the UK International Data Transfer Addendum, and a documented transfer risk assessment supported by encryption in transit and at rest.

• Active workspace data — retained for the life of the subscription.
• After termination — our service target is deletion or return of active customer data within 30 days of a verified written request, and no later than 90 days after contract end, subject to the applicable agreement and legal retention duties. The 30-day and 90-day periods have different starting points; they are not added together. Deletion is handled by our team, not triggered automatically by cancelling a subscription.
• Database backups and stored files — the hosting service provides daily database snapshots with roughly 14 days of retention. Deleted database records may remain in earlier snapshots until those snapshots expire. This is separate from the active-data deletion target; we do not promise a 35-day backup window or a 125-day total. Backups exclude stored files, which require separate deletion. Daily snapshots do not provide point-in-time recovery. The actual available snapshots must be checked when handling a deletion request.
• Security and audit logs — our retention target is up to 12 months; expiry is reviewed by our team.
• Billing and statutory records — 7 years, as required by UK law.
• Marketing contacts — until you unsubscribe, plus a suppression record kept to honour your opt-out.

We operate encryption in transit (TLS 1.2+) and at rest (AES-256), row-level tenant isolation on every database table, least-privilege access, secret management, audit logging, dependency and vulnerability scanning, and documented incident response.

Full detail is published on our Security & Compliance page.

Subject to UK/EU GDPR you have the right to access, rectify, erase, restrict, port and object to processing of your personal data, to withdraw consent, and to object to direct marketing at any time. We respond to verified requests within one month.

To exercise any right, email info@aitelligent.co. If your data was uploaded by an Aitelligent customer, we will route your request to that customer as controller and support them in responding.

You may also complain to the UK Information Commissioner's Office (ico.org.uk) or your local supervisory authority.

We use strictly necessary cookies for authentication, session integrity and security. Analytics and preference cookies are only set with your consent and can be withdrawn at any time via your browser settings or our cookie controls.

We may update this policy to reflect changes in law, technology or our services. Material changes are announced by email to account administrators and by an in-app notice at least 14 days before taking effect. The version date at the top of this page always reflects the current edition.