Legal
Privacy Notice
What SECfilingAI collects on this website, what it collects for KYC and export-control screening, and what it never collects.
This page is a draft prepared by the product team for counsel review. It is not legal advice and may change. For questions, contact legal@secfilingai.com.
1. Who we are
The controller is Glidelogic Corp., Los Angeles, California. For privacy questions, contact privacy@secfilingai.com.
2. Scope
This notice covers the public website, contact and corrections requests, the sales and licensing process, KYC and export-control screening, and hardware referrals. It does not cover customer data processed inside the Workstation or Intelligence Engine on customer machines. We do not receive that data.
3. What we collect on this site
- Contact form and email data: name, work email, organisation, country, role, and message.
- Corrections requests: identity, claim, evidence, and page URL.
- Server logs: IP address, user agent, requested path, and timestamp, kept for security and abuse prevention.
Phase 1 of the site does not use third-party analytics, advertising trackers, pixels, or session replay. If we add privacy-respecting analytics later, this notice will be updated first.
4. What we collect in sales and licensing
- Contact and organisation details.
- Product interest and general use case.
- Contract, order, and delivery details.
- License activation data: license ID, hardware identifiers used to bind the license, and the installation address from the end-use certificate.
- Optional license check-in: license ID, version, tier, and pack versions only.
5. KYC and export-control data
Before any future delivery, we may collect and process:
- Legal name, registration number, registered address, and country.
- Beneficial ownership and control information.
- Signatory identity and contact details.
- Sanctions and restricted-party screening results.
- End-use and end-user information.
- Whether you plan to use GPUs, the planned GPU type and quantity, and the hardware environment.
- Installation location, and cloud provider and region if applicable.
- End-user certificate and hardware environment disclosure.
We use this information to comply with export-control and sanctions law, to screen customers and transactions, and to decide whether to proceed. We may pause, refuse, or terminate a transaction if we cannot verify the information.
6. What we never collect
We do not collect product queries, watchlists, holdings, notes, case contents, or Workstation usage analytics. The private products are designed so that this data stays on the customer's machine.
7. Purposes and legal bases
We use personal data to respond to inquiries, perform contracts, comply with export-control and sanctions law, secure the site, and, where permitted, send information the recipient asked for. We do not sell personal information.
8. Sharing
We may share data with hosting providers, screening providers, professional advisers, and authorities when legally required. We do not share data for advertising. We do not have any hardware partnership to announce.
9. Sharing with hardware vendors
If you ask us to introduce you to a hardware vendor, and you consent, we may share the minimum necessary KYC and hardware environment information with that vendor for its independent screening and fulfilment. We require the vendor to keep the information confidential and to use it only for screening and fulfilment. We do not rely solely on the vendor's screening for our own compliance.
10. International transfers
We operate in the United States and Asia. Where required, we use appropriate transfer mechanisms. The specific mechanisms are being confirmed with counsel.
11. Retention
Leads are kept for up to 24 months unless a longer period is needed for a contract or legal obligation. KYC and export-control records are kept for at least 5 years, and preferably 10 years, or for the period required by law. Server logs are kept for a short security window.
12. Your rights
Depending on your location, you may have rights to access, correct, delete, or object to the processing of your personal data. Contact privacy@secfilingai.com. You may also complain to your local data-protection authority. Export-control recordkeeping obligations may limit deletion.
13. Security
We use access controls, encryption where appropriate, and logging. No system is completely secure. Please do not send confidential information or identity documents in a first contact message.
14. Changes
We will update this notice when our practices change and show the date at the top of the page.
15. Personal data in public filings
Names of officers, directors, and insiders appear because they appear in public regulatory filings. We do not add personal information about private individuals beyond what is in regulated filings. Individuals named in filings can ask us to correct errors in how we present their information through the corrections process.
SECfilingAI.com is operated by Glidelogic Corp. and is not affiliated with the U.S. Securities and Exchange Commission. Not investment advice. All legal pages.