Privacy policy

EUAIFit is a UK-based early-stage service developing EU AI Act readiness tools for B2B SaaS teams. The current service includes public information, an in-browser exposure check, contact forms, and invite-only readiness pilots. For any questions about this privacy policy or your personal data, contact us at support@euaifit.com.

We collect and process the following categories of data: Account data: Your name, email address, and organisation name when you create an account. If you sign in via Google or Microsoft SSO, we receive your verified email and profile name from the provider. Enquiry data: Information you submit through our contact or pilot-update forms, including your email address and any company information or message you choose to provide. Pilot data: If you join an invite-only readiness pilot, we process the AI-system, obligation, reviewer and audit information entered in your workspace. If your organisation selects managed evidence storage, this can include evidence files and associated metadata. The purpose, capacity, retention, hosting, subprocessors and approved transfer methods will be explained during onboarding. Do not submit confidential AI-system evidence through the public contact form. Exposure-check data: The public exposure check runs in your browser. The current version does not send or save your answers. Usage data: Standard server logs including IP address, browser type, timestamps, and page views. We use this for security, abuse prevention, and product improvement. We do not sell your data. We do not use your data to train AI models.

The public website is delivered through our hosting provider and uses encrypted HTTPS connections. Contact and pilot-update submissions are sent through our email-delivery provider when configured. Managed evidence files are held in private object storage configured for the pilot and are available only through authenticated workspace access. Reference-only workspaces retain evidence in the customer's own controlled system and EUAIFit stores the evidence reference and review metadata. Pilot customers receive current hosting, subprocessor, retention, and international-transfer information during onboarding.

We use HTTPS, restricted service access, managed authentication, organisation-scoped authorisation, file integrity checks and audited evidence access for the current website and early workspace. Managed storage tiers include retention-review and controlled-deletion workflows. Production file approval requires the configured malware-scanning control. During the pilot, customers should use only the approved transfer method and avoid sending confidential, special-category, or production data through public forms. Contact support@euaifit.com for the current security and subprocessor information.

Under the UK GDPR and EU GDPR, you have the following rights: • Right to access: You can request a copy of your personal data at any time. • Right to rectification: You can correct inaccurate or incomplete data. • Right to erasure: You can request deletion of your personal data, subject to legal retention obligations. • Right to restrict processing: You can ask us to limit how we use your data. • Right to data portability: You can receive your data in a structured, machine-readable format. • Right to object: You can object to processing based on legitimate interests. • Right to withdraw consent: Where processing is based on consent, you can withdraw it at any time. To exercise any of these rights, email support@euaifit.com. We respond within 30 days.

If you have a concern about how we handle your data, contact us first at support@euaifit.com. We take all complaints seriously and will investigate promptly. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) in the UK at ico.org.uk, or with your local EU supervisory authority. This privacy policy was last updated on 23 August 2026.