Privacy Policy

BackboneAI, established in Limassol, Cyprus, acts as the data controller for personal data collected through this website and during client engagements. We process personal data in accordance with the EU General Data Protection Regulation (Regulation 2016/679, the GDPR) and Cypriot data protection law (Law 125(I)/2018).

For any privacy question, write to hello@backboneai.io. We respond within 30 days, as required by law.

We only collect what we need to talk to you and deliver our services. Specifically:

• Contact details you provide voluntarily through booking forms, the Cal.com scheduler, or email (name, work email, company, role, the message you send us).
• Meeting metadata generated when you schedule a discovery call (date, time, time zone, link to the video room).
• Basic technical information from your browser when you visit the site (IP address, user agent, referring page, pages viewed). This is used for security and aggregate analytics only.
• Operational data shared with us during a client engagement, governed by a separate written agreement and a data processing agreement where required.

We use the data above to:

• Respond to your enquiry and schedule a call.
• Deliver, support, and improve the services agreed in a client engagement.
• Operate and secure the website and prevent abuse.
• Meet our legal, accounting, and tax obligations.

We do not sell personal data, we do not use it for advertising profiling, and we do not use it to train third-party AI models.

We rely on the following legal bases under Article 6 GDPR:

• Performance of a contract, or steps taken at your request before entering into a contract, when you book a call or engage us for services.
• Legitimate interests in operating, securing, and growing our business, balanced against your rights.
• Legal obligation, when we are required to retain certain records.
• Consent, where required for non-essential cookies or marketing communications. You can withdraw consent at any time.

We use a small number of vetted service providers to run the business. They act as processors on our behalf under a data processing agreement:

• Hosting and email infrastructure, hosted within the European Union or European Economic Area where possible.
• Cal.com, used to schedule discovery calls.
• Video conferencing for the call itself.

Where a transfer outside the EEA is necessary, we rely on the European Commission's Standard Contractual Clauses or another lawful transfer mechanism.

We keep personal data only as long as we need it for the purpose it was collected, and then we delete or anonymise it. As a guide:

• Enquiries that do not lead to an engagement: up to 12 months.
• Client records and project artefacts: for the duration of the engagement and up to 7 years afterwards, to meet accounting and tax obligations.
• Web server and security logs: up to 90 days.

Under the GDPR you have the right to:

• Access the personal data we hold about you.
• Have inaccurate data corrected.
• Have your data erased, where the law allows.
• Restrict or object to certain processing.
• Receive your data in a portable format.
• Withdraw any consent you have given, at any time.

To exercise any of these rights, write to hello@backboneai.io. You also have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection of the Republic of Cyprus, at dataprotection.gov.cy.

We use a minimal set of cookies and similar technologies that are strictly necessary to operate the site and remember your preferences. We do not use advertising cookies, and we do not engage in cross-site tracking.

We apply technical and organisational measures appropriate to the risk, including encryption in transit, access controls on a need-to-know basis, and regular review of our processors. No system is completely secure, so we ask you to share sensitive information through agreed channels only.

We may update this policy from time to time to reflect changes in our practices or the law. The date at the top of this page shows when it was last updated. Material changes will be communicated through the website.

For any privacy-related question or request, write to hello@backboneai.io. We aim to respond within 30 days.