Privacy notice

1. Who we are

EIGENVECTOR LTD, a company registered in England and Wales under company number 17434555, with its registered office at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom is the controller of personal information used to operate this website and handle business enquiries. You can contact us at hi@eigenvector.app, through the contact form (select “Security or privacy”) or by post at our registered office.

2. Information we collect

When you send an enquiry, we collect your name, email address, company or team name, selected interest, any budget you choose to provide, your message, submission time and an acknowledgement of the privacy notice. We generate a reference and store the enquiry so it can be reviewed. Please do not send passwords, payment-card details, medical information or sensitive customer content.

Our hosting and security providers may process network information such as your IP address, request metadata and security logs to deliver and protect the site. The contact endpoint uses a time-limited hash of the connecting IP address for abuse prevention. The application does not store the original IP address in the enquiry record.

3. Why we use it and our lawful bases

We use enquiry information to assess your requirements, respond to questions, prepare requested proposals and communicate about potential business services. The legal basis is taking steps at your request before entering a contract, where that basis applies to you, or our legitimate interest in responding to business contacts and developing business relationships.

We rely on legitimate interests to protect the website, prevent spam and preserve the integrity of submissions. We process information where necessary to comply with legal obligations or establish, exercise or defend legal claims. The form acknowledgement records that you have seen this notice; it is not consent to marketing.

We do not use contact-form submissions to make solely automated decisions with legal or similarly significant effects, and we do not enrol you in a marketing mailing list through this form.

4. Who receives information

Enquiries are accessible to authorised company personnel and the infrastructure providers that operate the site and its database. This website is hosted directly on Cloudflare Workers, with Cloudflare D1 for enquiry records. If you contact us by email, the email delivery and mailbox providers also process that correspondence.

We may disclose information to professional advisers, competent authorities or other recipients when legally required or necessary to protect legal rights. We do not sell enquiry information. Customer model providers and deployment subprocessors are identified separately when scoping a customer service; they are not recipients of a website enquiry merely because their model is featured here.

5. International processing

Website hosting, network delivery, platform operations and support can involve processing outside the UK or EEA. The registered office does not determine the location of all processing. Where applicable, restricted transfers require an appropriate legal mechanism, such as an adequacy regulation, the UK International Data Transfer Agreement or UK Addendum, or EU Standard Contractual Clauses, together with required assessments.

Contact us for information about the safeguards relevant to a particular activity. Deployment-specific processing locations and approved access arrangements are documented in the applicable customer agreement. We do not make a blanket UK-only or EU-only website-hosting claim.

6. Retention

The website assigns enquiry records a 12-month retention period from submission. Expired records are removed during routine database maintenance performed as enquiries are processed. We may keep relevant correspondence separately for an ongoing customer relationship, legal obligations or the establishment or defence of claims. Such records are retained only for as long as reasonably necessary for that purpose.

Application abuse-prevention records expire after 24 hours and are removed during routine maintenance. Infrastructure providers may retain their own operational and security logs under their applicable terms. Contact us to request earlier deletion where the law gives you that right.

7. Your rights

Subject to applicable law and relevant exemptions, you may request access to your information, correction, erasure, restriction of processing or data portability. You may object to processing based on legitimate interests. If processing is based on consent, you may withdraw that consent without affecting earlier lawful processing.

Send a request to hi@eigenvector.app or use the contact form and choose “Security or privacy”. Describe the right you wish to exercise and include an enquiry reference if available. We may need proportionate information to verify your identity. We normally respond within one month, subject to legally permitted extensions.

You can complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint, or to the relevant data protection authority in the EEA if applicable. We welcome the opportunity to address your concern first, but you do not have to contact us before approaching a regulator.

8. Customer inference content

Prompts, files and outputs processed for a customer under its instructions are governed by the customer agreement and applicable data processing terms. Our role may be processor or subprocessor depending on the activity. The customer determines the purposes of its application and must provide its own notices where required. The website enquiry notice does not replace those arrangements.

9. Changes and contact

We may update this notice to reflect changes in the website, our operations or the law. The revision date identifies the current version. For privacy questions, contact hi@eigenvector.app or write to the registered office above.