MY-RESEARCH.AI LTD – Privacy Policy

Last Updated: 20/02/2025

Thank you for choosing to be part of our community at MY-RESEARCH.AI LTD (referred to as "Company," "we," "us," or "our"). We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and share (collectively, "process") your information when you use our website at https://my-research.ai (the "Site"), or any other products or services that link to this policy (collectively, the "Services").

If you have any questions or concerns about this Privacy Policy or our practices with regard to your personal data, please contact us at support@my-research.ai.

1. WHO WE ARE

Controller: MY-RESEARCH.AI LTD

Registered Address: [Insert your company's registered office address]

Company Number: 16262553

Email: support@my-research.ai

We operate in the United Kingdom and comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, among other relevant legislation.

2. WHAT INFORMATION DO WE COLLECT?

A. Information You Provide Voluntarily

Account Information: When you create an account on our Site, we may ask for your name, email address, and a password.

Payment Information: If you make a purchase (e.g., credits or subscriptions), we may collect billing details such as your billing address and payment method details. However, payment card information is processed by our third-party payment processor (Stripe), and we do not store your full payment card details.

User Queries and Content: You may submit queries or text prompts to our RAG chatbot. While we do not encourage you to include personal or sensitive data in your questions, any information you voluntarily submit may be processed by us to provide the requested service.

B. Information Collected Automatically

When you visit, use, or navigate the Site, we may automatically collect certain information through the use of cookies, server logs, and similar technologies. This might include:

• IP address
• Browser and device characteristics
• Operating system
• Referring URLs
• Pages visited, links clicked, and other usage data

3. LEGAL BASES FOR PROCESSING YOUR DATA (UK USERS)

We will only process your personal data if we have a valid legal basis, such as:

• Consent: You have given clear consent for us to process your personal data for a specific purpose.
• Contract: Processing is necessary for the performance of a contract to which you are a party.
• Legal Obligation: Processing is necessary for compliance with a legal obligation.
• Legitimate Interests: Processing is necessary for our legitimate interests and does not override your fundamental rights and freedoms.

4. HOW DO WE USE YOUR INFORMATION?

• Account Creation and Authentication: To register you as a user and allow you to log in securely.
• Service Provision: To provide the chatbot answers, manage your credits or subscription plans, and deliver other features you request.
• Payment Processing: To process payments, refunds (if applicable), and other financial transactions through our third-party payment processor.
• User Support and Communications: To send you information about your account, respond to your inquiries, or notify you of changes to our Terms or Privacy Policy.
• Analytics and Improvements: To analyze trends, track user interactions, and improve our Site and Services.
• Legal and Security: To maintain the security of our Services, prevent fraud, and comply with legal obligations.

5. DO WE SHARE YOUR INFORMATION?

We do not sell or rent your personal data to third parties. We may share your personal data in the following circumstances:

• Service Providers: We use trusted third-party providers to support our operations. Examples include:
• Stripe for payment processing
• Supabase for database and authentication
• Pinecone (for vector database services)
• Business Transfers: If we go through a merger, acquisition, or asset sale.
• Legal Obligations: Where required by law or to protect rights and safety.

6. INTERNATIONAL DATA TRANSFERS

We primarily store your data in the United Kingdom or the European Economic Area (EEA). However, some of our service providers may be located outside the UK or EEA. Whenever we transfer your data internationally, we ensure it is protected by appropriate safeguards, such as the UK's International Data Transfer Agreements (IDTAs) or the European Commission's Standard Contractual Clauses.

7. HOW LONG DO WE KEEP YOUR INFORMATION?

We keep your personal data only for as long as is necessary to fulfill the purposes for which it was collected, unless a longer retention period is required or permitted by law. After that period, we will either delete or anonymize your personal data.

• Account Information: Retained for as long as you maintain an account with us.
• Payment Information: Retained as needed for auditing, tax, or legal compliance reasons.
• Chat History or User Queries: Retained as long as needed to provide the Services or improve them, unless you request deletion sooner.

8. SECURITY OF YOUR PERSONAL DATA

We implement appropriate technical and organizational measures to secure your personal data and protect it from unauthorized access, alteration, disclosure, or destruction. However, no online platform can guarantee 100% security. You share and access information on our Services at your own risk.

9. COOKIES AND SIMILAR TECHNOLOGIES

We use cookies and similar tracking technologies to collect and store information about how you use our Site. This information helps us improve user experience, analyze performance, and deliver relevant content.

10. YOUR DATA PROTECTION RIGHTS

Under the UK GDPR, you have the following rights (subject to certain exemptions):

• Right of Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can request that any inaccurate or incomplete data be corrected.
• Right to Erasure: You can ask us to delete or remove your personal data where there is no good reason for us to continue processing it.
• Right to Restrict Processing: You can request we suspend the processing of your personal data in certain scenarios.
• Right to Data Portability: You can request the transfer of your personal data to another provider in a machine-readable format.
• Right to Object: You can object to certain processing based on legitimate interests.
• Right to Withdraw Consent: If we rely on your consent, you can withdraw it at any time.

To exercise any of these rights, please contact us at support@my-research.ai. We will respond within one month of receiving your request.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO). For more information, visit https://ico.org.uk/.

11. CHILDREN'S PRIVACY

Our Services are not directed at individuals under the age of 18, and we do not knowingly collect personal data from children under 18. If you believe a child has provided us with personal data, please contact us. We will take steps to delete such information as soon as possible.

12. THIRD-PARTY LINKS

Our Site may contain links to third-party websites or services that we do not control. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any external sites you visit.

13. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time. The updated version will be indicated by an updated "Last Updated" date and will be effective as soon as it is accessible. If we make material changes to this Privacy Policy, we will notify you via email or through the Services. We encourage you to review this Privacy Policy frequently to stay informed of how we are protecting your information.

14. HOW TO CONTACT US

If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please reach out to us at:

MY-RESEARCH.AI LTD

Email: support@my-research.ai