AIF Trust

Privacy Policy

Last updated: October 2026

1. Overview

AIF Trust ("we", "us", "our") operates the website aiftrust.us and provides the AIF Trust Enterprise Agent Governance Platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

We do not sell your personal information. The website and product are under development, and this policy must not be interpreted as a promise that production data-processing controls have been implemented or independently audited. The early-access form is currently a preview endpoint, not reliable lead intake.

2. Information We Collect

2.1 Information You Provide Directly

  • Early-access preview form: The page asks for name, work email, company, role, use case description, scale, compliance requirements, timeline, and consent. The current handler processes submitted fields in memory and is not configured for durable storage or staff notification. Do not submit real or confidential application data until the intake is made production-ready.
  • Direct Communications: Email content when you contact us at [email protected] or other addresses.
  • Account Information: If you become a customer, we collect billing details, organizational information, and technical configuration data.

2.2 Information Collected Automatically

  • Technical request data: Hosting and security services may process connection metadata (such as IP address and request headers) to deliver and protect the website. Exact production log fields and retention have not been independently inventoried in this review.
  • Analytics: The checked-in shared layout does not initialize Google Analytics. Do not infer click, scroll-depth, or user-analytics collection unless a deployed integration is verified.
  • Platform Telemetry: If you use our platform, we collect execution metadata, performance metrics, and audit logs as described in our Terms of Service.

2.3 Cookies and Similar Technologies

See our Cookie Policy for details on cookies, local storage, and tracking technologies.

3. How We Use Your Information

  • Early Access Evaluation: The page solicits interest in a potential evaluation, but the current preview handler is not durable lead intake. Requests cannot be reliably reviewed or tracked until persistent storage and routing are implemented.
  • Service Delivery: To provide, maintain, and improve the AIF Trust platform.
  • Communication: To send service updates, security notices, and (with consent) product updates.
  • Security & Compliance: To detect fraud, prevent abuse, and meet legal obligations.
  • Analytics: No website-analytics initialization was found in the checked-in shared layout; no analytics-based purpose is asserted unless a deployed integration is verified.

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area, we rely on:

  • Legitimate Interest: Only where applicable, for website delivery, security, and abuse prevention. Deployed configuration must be reviewed before making more specific processing claims.
  • Contract Performance: Delivering the platform to customers.
  • Consent: Communications or optional processing where separately enabled and consent is collected. The current checked-in layout does not expose an in-site cookie-consent banner or preference control.
  • Legal Obligation: Compliance with applicable laws, regulations, and legal requests.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share data only in these circumstances:

  • Hosting and security providers: Cloudflare Pages and associated Cloudflare services are used for the website as reported. The exact production subprocessor configuration and contractual data-processing terms should be verified before making additional vendor or DPA claims.
  • Legal Requirements: When required by law, court order, or government request.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets (with notice).
  • With Your Consent: For any other purpose not listed here.

We do not intentionally share submitted data for third-party marketing. The preview form is not production-ready; hosting providers may process request data to deliver the service. Do not submit real or confidential application data until the intake and its data flows have been reviewed.

6. Data Retention

  • Early-access preview form: The current handler has no durable application store or confirmed retention/deletion schedule. A success response is not evidence that an application was durably recorded; do not use the form for real applications until persistence and retention controls are implemented and verified.
  • Hosting and request logs: Exact production log contents and retention periods have not been verified in this review. Do not rely on a specific retention period until the active configuration is confirmed.
  • Customer data and platform telemetry: No default seven-year retention commitment is made by this website. Any future customer-data retention, export, and deletion terms must be specified in an applicable written agreement and matched to the actual deployment.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Erase your data ("right to be forgotten")
  • Restrict or object to processing
  • Data portability
  • Withdraw consent (where processing is based on consent)
  • Lodge a complaint with a supervisory authority

To exercise these rights, email [email protected]. We respond within 30 days.

8. International Transfers

Our infrastructure is hosted on Cloudflare's global network. Data may be processed in the United States and other jurisdictions where Cloudflare operates. We rely on Standard Contractual Clauses and Cloudflare's data processing addendum for transfers outside the EEA.

9. Security

We implement appropriate technical and organizational measures: TLS 1.3 in transit, encryption at rest, least-privilege access, regular security reviews. However, no internet transmission or storage is 100% secure. See our Security page for details.

10. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal information from children. If you believe we have collected such information, contact us immediately.

11. Changes to This Policy

We may update this policy. Material changes will be announced via email (to customers) or prominent website notice. The "Last updated" date above reflects the latest revision.

12. Contact Us

Questions about this policy or your data: