Privacy Policy

Controller: ABC-AI Internet Solutions (redot1 / abc-io.online), Rochester, New York, United States. Contact: privacy@abc-io.com. Effective 2026-08-06.

1. Scope

We process personal data of customers, prospects, and visitors worldwide, including the European Economic Area (EEA) under GDPR (Reg. (EU) 2016/679) and California under CCPA/CPRA. New York residents are covered by the SHIELD Act.

2. Data We Process

• Account: name, email, company, billing country, plan.
• Service telemetry: usage events, correlation IDs, audit logs (tamper-evident).
• Support/chat: messages you send (plain-text in-system; never emailed out).
• Billing: transactions via Stripe; we do not store card numbers.

3. Legal Bases (GDPR Art.6)

Contract (Art.6(1)(b)) for service delivery; Legitimate interest (Art.6(1)(f)) for security/fraud prevention; Consent (Art.6(1)(a)) for non-essential cookies.

4. International Transfers

Data is hosted on our sovereign VPS infrastructure (no hyperscaler/Cloudflare). EEA transfers rely on Standard Contractual Clauses where applicable.

5. Your Rights

Access, rectification, erasure, restriction, portability, objection (GDPR Arts.15–21); know/delete/opt-out of sale (CCPA). Exercise via /legal/gdpr or email privacy@abc-io.com. We respond within 30 days.

6. Retention

Account data for the life of the contract + 90 days; logs 12 months; backups 30-day rolling (encrypted at rest by provider).

7. Security

See our Security & Compliance posture (SOC 2 / ISO 27001 control mapping, EU AI Act classification). Secrets are managed in self-hosted HashiCorp Vault; DB credentials are dynamic and short-lived.

8. Contact

Data Protection: privacy@abc-io.com. Supervisory authority: your local DPA (EEA) or California Privacy Protection Agency.