Privacy notice

Who we are

EDGECLUSTER, Nairobi, Kenya, is the data controller for personal data about people who contact us or use Assure, and a data processor for the chatbot replies we receive during a test, under the Data Protection Act, 2019.

What we collect

• Contact requests: your name, organisation, role, email, phone if you give it, and your message.
• Account data for people who sign in: email, name, role and sign-in records.
• Test data: the messages our agents send and your chatbot's replies.

How we protect test data

• Personal data in a chatbot reply is masked when it is stored.
• The unmasked reply is encrypted and can be read only by our analysts, in a two-step sign-in session. Every read is logged. It is destroyed 90 days after the report is approved, or sooner if your permission letter says so.
• Model providers we use do not train on our data under their terms.
• Encrypted backups are deleted after 30 days.

Where data is held

Our database is hosted in the European Union (Ireland). Test workers and backups are in South Africa (Johannesburg). Conversations are processed by a model provider in the United States.

Your rights

You can ask to see, correct or delete personal data we hold about you, or object to how we use it, by contacting us. You can also complain to the Office of the Data Protection Commissioner.