Privacy policy

Robin8 AI is operated by [Legal entity name, e.g. Robin8 Technologies Ltd], registered at [Registered office address] under company number [Company registration number]. In this policy we refer to that company as Robin8, we or us.

Robin8 is the data controller for personal data we collect about visitors to this site and about the people who use our platform. When we run campaigns on behalf of a customer, that customer is usually the controller for the audience data involved and Robin8 acts as their processor under a separate data processing agreement.

Questions about this policy go to [privacy@example.com].

We collect three kinds of information.

• Information you give us. Your name, work email, company, role and anything you write in a demo request, waitlist signup or support message. If you become a customer we also hold billing contact details and account credentials.
• Information collected automatically. IP address, approximate location derived from it, browser and device type, referring page, the pages you view and how long you spend on them. This comes from server logs and from the analytics described in section 9.
• Information from other sources. Audience and engagement data from the advertising and social platforms a campaign runs on, and business contact data from commercial providers. We use this to build the audience models behind our personas and to measure what a campaign delivered.

We do not ask for special category data such as health, religion or political opinion, and we ask that you do not send it to us.

• To run the service. Provisioning agents, generating and scheduling content, attributing outcomes and reporting on them. Basis: performance of our contract with you.
• To respond to you. Answering demo requests, waitlist signups and support questions. Basis: your consent, or our legitimate interest in replying to a business enquiry you started.
• To improve targeting and ranking. Measured outcomes are written back into our ranking engine so future campaigns allocate budget better. Basis: legitimate interests, balanced against the limited and largely aggregated nature of the data.
• To keep the platform safe and lawful. Fraud prevention, abuse detection, enforcing our terms and meeting our accounting and disclosure obligations. Basis: legitimate interests and legal obligation.
• To market to businesses. Sending product updates to business contacts. Basis: consent where the law requires it, otherwise legitimate interests. Every message carries an unsubscribe link.

We do not sell personal data, and we do not use the personal data in customer campaigns to train general purpose models for anyone other than that customer.

Our personas are synthetic. They are generated from aggregated audience models rather than modelled on identifiable individuals, and they are labelled as AI wherever a platform or a regulator requires it.

Agents produce content and hold conversations with real people. Where an agent has a conversation with you, we keep a record of it so the resulting outcome can be attributed and so the exchange can be audited. Those transcripts are treated as customer content under section 5.

If you believe an agent has produced content about you that is inaccurate or that you want removed, write to [privacy@example.com] and we will investigate.

We share personal data with the following categories of recipient.

• Service providers. Hosting, storage, analytics, email delivery, payment processing and customer support tooling, each under contract and each limited to processing on our instructions.
• Distribution platforms. The social, search and advertising platforms a campaign runs on, to the extent needed to publish content and read back performance.
• Customers. Where you interacted with a campaign, the brand behind that campaign receives the resulting lead or conversation.
• Professional advisers and authorities. Lawyers, auditors, and regulators or law enforcement where we are legally required to disclose.
• An acquirer. If the business is sold or merged, subject to the acquirer honouring this policy.

A current list of our subprocessors is available from [privacy@example.com] on request.

We operate across borders, so your data may be processed outside the country you live in, including in countries whose laws differ from your own.

Where we move personal data out of the UK or the European Economic Area we rely on an adequacy decision where one exists, and otherwise on the UK International Data Transfer Addendum or the European Commission standard contractual clauses, together with a transfer risk assessment. Copies are available on request.

We keep personal data only as long as we need it for the purpose it was collected for.

• Enquiry and waitlist records: 24 months after the last contact.
• Customer account records: for the life of the account and 12 months after closure.
• Campaign transcripts and attribution records: 24 months, or longer where a customer contract requires it.
• Billing and tax records: 7 years, or whatever the applicable tax law requires.
• Server logs: 90 days.

After those periods we delete the data or aggregate it so it can no longer be linked to you.

Depending on where you live you have some or all of the following rights over your personal data: to access it, to correct it, to delete it, to restrict or object to how we use it, to receive it in a portable format, and to withdraw consent you previously gave.

If you are in California, you also have the right to know what we collect and disclose, to delete it, to correct it, and not to be discriminated against for exercising those rights. We do not sell personal information or share it for cross context behavioural advertising as those terms are defined by the CCPA.

To exercise any of these, write to [privacy@example.com]. We respond within one month. You can also complain to your local data protection authority if you are not satisfied with our response.

This site uses cookies and similar storage for two purposes: to make the site work, and to understand how it is used so we can improve it.

Strictly necessary storage is set without asking, because the site cannot function without it. Anything used for analytics or marketing is set only where you have agreed to it, and you can change that choice at any time through your browser settings or through the cookie controls on this site.

We encrypt data in transit and at rest, restrict internal access to the people who need it to do their job, log administrative access, and review our controls regularly.

No system is perfectly secure. If we become aware of a breach that puts your rights at risk, we will notify you and the relevant regulator within the timeframes the law sets.

The platform is a business product and is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has given us personal data, write to [privacy@example.com] and we will delete it.

We update this policy when our practices change. The effective date at the top of the page tells you which version you are reading. Where a change materially affects your rights we will tell account holders by email before it takes effect.

Write to [privacy@example.com], or post to [Legal entity name, e.g. Robin8 Technologies Ltd], [Registered office address].

For anything that is not a privacy question, the contact page is the faster route.