Legal

Privacy Policy

How Aitelligent Ltd collects, uses, shares and protects personal data across our website and post-sales intelligence platform. Written to meet UK GDPR, EU GDPR and our enterprise customers' due-diligence standards.

Last updated: 6 August 2026

1. Who we are

Aitelligent Ltd ("Aitelligent", "we", "us") is a company registered in England & Wales, with its principal place of business in London, United Kingdom. We provide a post-sales customer intelligence platform that unifies CRM records, support tickets, conversations and product signals into customer health scores, churn alerts and automated playbooks.

For personal data relating to our own website visitors, prospects, newsletter subscribers and direct account holders, Aitelligent acts as a data controller. For personal data that our customers upload, connect or otherwise process through the Aitelligent Dashboard, Aitelligent acts as a data processor on that customer's instructions under a Data Processing Agreement (DPA).

Privacy questions, requests and complaints: info@aitelligent.co.

2. Personal data we collect

  • Account & identity data — name, company email, company, job title, authentication identifiers, and role/permission assignments.
  • Commercial & billing data — plan tier, subscription status, invoices, and payment metadata (card data is handled by our PCI-DSS compliant payment processor; we never store full card numbers).
  • Customer platform data — data you connect from integrated systems (for example CRM contacts and opportunities, support tickets, chat transcripts, call recording metadata, meeting notes and usage events). This may include the personal data of your own customers and end users.
  • Support & communications data — messages you send to us, in-app AI support conversations, demo requests and newsletter preferences.
  • Technical & security data — IP address, device and browser information, timestamps, audit logs, and error diagnostics.

We do not seek to collect special category data or children's data. Please do not upload special category data into free-text fields unless it has been agreed in writing with us.

3. Lawful bases for processing

  • Performance of a contract — providing the Dashboard, integrations, playbooks, CSQL handoffs and AI support to account holders.
  • Legitimate interests — securing the platform, preventing fraud and abuse, improving reliability, and business-to-business marketing to relevant professional contacts (always balanced against your rights and subject to opt-out).
  • Consent — newsletter subscriptions (double opt-in), non-essential cookies and analytics, and any optional communications. Consent can be withdrawn at any time.
  • Legal obligation — accounting, tax, statutory reporting and responding to lawful requests from authorities.

4. How we use personal data

  • Operating and securing your Aitelligent workspace and user accounts.
  • Generating customer health scores, churn and expansion signals, recommended tasks and playbook actions.
  • Delivering CSQL handoffs and status syncs to your connected CRM systems at your direction.
  • Providing AI-assisted support, diagnostics and escalation to our team.
  • Billing, service notices, security alerts and product updates.
  • Aggregated, de-identified benchmarking and product analytics.

5. AI and automated processing

Aitelligent uses machine learning and large language models to score account health, summarise conversations, and suggest next-best actions. Our commitments:

  • Customer content is not used to train foundation models, and we contractually require model providers to exclude our traffic from training.
  • Model outputs are decision support, not automated decisions with legal effect. A human owner reviews and actions every recommendation, alert and handoff.
  • Prompts and outputs are logged for auditability and retained under the retention schedule below.
  • You can restrict which data sources (tickets, transcripts, call recordings, health metrics) each AI persona may access from within the Dashboard.

6. Disclosure and sub-processors

We never sell personal data. We share it only with vetted sub-processors under written data processing terms, and only to the minimum extent needed to run the service:

  • Cloud hosting, managed database and serverless compute providers.
  • Transactional and newsletter email delivery providers.
  • AI model and inference providers (no training on customer content).
  • Payment processing, error monitoring and product analytics providers.
  • Systems you explicitly connect (for example Salesforce, HubSpot, Slack, Microsoft Teams, Gmail, Outlook, Notion, Trello, Asana) — data flows to those systems on your instruction and is then governed by their own terms.

We may also disclose data where required by law, to enforce our terms, or as part of a merger or acquisition (with notice to affected customers).

7. International transfers

Personal data is primarily processed in the United Kingdom and European Economic Area. Where data is transferred outside the UK/EEA, we rely on UK adequacy regulations, the EU Standard Contractual Clauses together with the UK International Data Transfer Addendum, and a documented transfer risk assessment supported by encryption in transit and at rest.

8. Retention

  • Active workspace data — retained for the life of the subscription.
  • After termination — deleted or returned within 30 days of a written request, and in any event within 90 days of contract end, excluding encrypted backups which age out within a further 35 days.
  • Security and audit logs — up to 12 months.
  • Billing and statutory records — 7 years, as required by UK law.
  • Marketing contacts — until you unsubscribe, plus a suppression record kept to honour your opt-out.

9. Security

We operate encryption in transit (TLS 1.2+) and at rest (AES-256), row-level tenant isolation on every database table, least-privilege access, secret management, audit logging, dependency and vulnerability scanning, and documented incident response.

Full detail is published on our Security & Compliance page.

10. Your rights

Subject to UK/EU GDPR you have the right to access, rectify, erase, restrict, port and object to processing of your personal data, to withdraw consent, and to object to direct marketing at any time. We respond to verified requests within one month.

To exercise any right, email info@aitelligent.co. If your data was uploaded by an Aitelligent customer, we will route your request to that customer as controller and support them in responding.

You may also complain to the UK Information Commissioner's Office (ico.org.uk) or your local supervisory authority.

11. Cookies

We use strictly necessary cookies for authentication, session integrity and security. Analytics and preference cookies are only set with your consent and can be withdrawn at any time via your browser settings or our cookie controls.

12. Changes to this policy

We may update this policy to reflect changes in law, technology or our services. Material changes are announced by email to account administrators and by an in-app notice at least 14 days before taking effect. The version date at the top of this page always reflects the current edition.

Contact our privacy team

General and privacy enquiries: info@aitelligent.co. Partnerships and commercial opportunities: partnerships@aitelligent.co.

Go to Contact