Data Sovereignty &
Privacy Standards.

LAST UPDATED: OCTOBER 2024
ENTITY: LASOTA GROUP LTD

This Privacy Policy describes how Aisy (trading as Lasota Group Ltd) collects, uses, and discloses your Personal Data when you use our infrastructure or any "Powered by Aisy" product (including SoAisy, TheEnquiryFilter, and others).

01. The Principle

We operate on a principle of Data Minimization. We only collect the data necessary to perform the specific logical function you have requested (e.g., filtering an email, posting a social update, or creating an account). Once the outcome is delivered, we retain only what is legally or operationally required.

Data We Collect

02. Account Infrastructure

When you create an Aisy ID to access any of suite of tools, we collect:

• Identity Data: Name, email address, and authentication credentials.
• Billing Data: Transaction history and billing address (payment processing is handled via Stripe; we do not store full card details).
• Technical Data: IP address, browser type, and device identifiers required for security auditing.

03. Operational Data

When you use a "Powered by Aisy" tool (e.g., TheEnquiryFilter), we process the data you input (e.g., the text of an email or a lead form submission). This data is:

• Processed instantly to generate the outcome (the "Result").
• Encrypted in transit and at rest.
• NOT used to train public AI models unless explicitly stated in a specific beta program opt-in.

How We Use Data

04. Usage Logic

We use your data solely for:

• Service Delivery: Authenticating you and running the automation/logic you requested.
• Security: Detecting and preventing fraud, abuse, or unauthorized access to the infrastructure.
• Communication: Sending you transactional alerts (invoices, password resets) or critical system updates.

Data Sharing & Security

05. Third-Party Subprocessors

Aisy acts as the infrastructure layer. To deliver services, we connect with trusted Tier-1 providers. We do not sell data. Key providers include but not limited to:

• Cloud Infrastructure: Krystal Hosting / Google Cloud (for server logic).
• AI Models: OpenAI / Gemini (via API, with zero-retention policies where applicable).
• Payments: Stripe.

06. Security Protocols

We employ enterprise-grade security measures, including HTTPS encryption for all data in transit. Access to personal data is restricted to authorised personnel with a specific operational need.

Your Rights

07. Control & Deletion

Under UK GDPR, you retain full sovereignty over your data. You have the right to:

• Access: Request a copy of all data held under your Aisy.
• Rectification: Correct any inaccurate data.
• Deletion ("Right to be Forgotten"): Request complete removal of your account and associated data logs.

To exercise these rights, contact our Data Controller directly at privacy@aisy.uk.

Cookies

08. Operational Cookies

We use cookies strictly for operational necessity—to keep you logged in and to remember your session preferences. We do not use third-party tracking pixels for advertising resale.