Privacy & GDPR

Draft placeholder - review required by qualified legal/DPO counsel before publication. Last updated: [date].

1. Data controller

PayServices BV/SRL, Elfbunderslaan 55, B-1650 Beersel, Belgium, VAT BE 0464770154 is the data controller for personal data processed via CyberTRIZ.AI.

2. What we collect

Account information: email address, name, organization details you provide.
Query content: the challenges, company/sector information, and questions you submit to the platform.
Company lookup data: VAT/company numbers you enter, matched against public Belgian company registry (KBO) data.
Session and usage data: pages visited, features used, for service improvement and abuse prevention.

3. Legal basis for processing

We process personal data on the basis of: performance of a contract (providing the service you requested), legitimate interest (service improvement, security), and consent where explicitly requested.

4. Third-party processors

Query content may be transmitted to Anthropic (provider of the Claude AI models) for the purpose of generating responses. We do not sell personal data to third parties. Belgian company data (KBO) originates from a public government register.

5. Data retention

We retain account and query data for as long as necessary to provide the service and comply with legal obligations. Session-level "memory" used to improve conversation continuity is retained per conversation tree and can be deleted on request.

6. Your rights under GDPR

As a data subject, you have the right to: access your personal data, request rectification, request erasure, restrict or object to processing, and data portability. To exercise these rights, contact us.

7. Cookies and local storage

The platform uses local browser storage (not third-party tracking cookies) to maintain session continuity (e.g. Prompt Navigator session token). No advertising cookies are used.

8. Security

We apply industry-standard security measures including encrypted credential storage and access controls. No system is perfectly secure; report suspected security issues to contact us.

9. International transfers

Where data is processed by third-party providers outside the EU/EEA, we rely on appropriate safeguards (such as Standard Contractual Clauses) as required under GDPR Chapter V.