GDPR Compliance

Your Rights Under GDPR

The General Data Protection Regulation grants you comprehensive rights over your personal data. Here's how to exercise them with Singularity AI:

Data Processing Activities

As Data Controller

For account information, billing data, and usage analytics, Singularity AI acts as the data controller. We determine the purposes and means of processing this data.

As Data Processor

For the data you upload and process through our platform (your documents, conversations, and business data), Singularity AI acts as a data processor. You remain the data controller and we process this data only according to your instructions.

Security Measures

We implement comprehensive technical and organizational measures to protect your data:

• Encryption: TLS 1.3 for data in transit, AES-256 for data at rest
• Access Control: Role-based access, multi-factor authentication, audit logs
• Infrastructure: EU-only data centers with ISO 27001 certification
• Testing: Regular penetration testing and security audits
• Incident Response: 72-hour breach notification commitment
• Training: Regular GDPR and security training for all employees

Sub-Processors

We use a limited number of sub-processors, all located in the EU or with adequate safeguards:

*AI providers (OpenAI, Anthropic, Mistral, etc.) are only used when you explicitly choose them. You can opt for EU-only providers like Mistral.

International Transfers

By default, your data never leaves the European Union. If you choose to use an AI model provider outside the EU (e.g., OpenAI, Anthropic), the following safeguards apply:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Additional technical measures to protect data in transit
• Clear disclosure before any data is sent outside the EU
• Option to use EU-only providers (Mistral AI)

Data Retention

We retain personal data only as long as necessary:

• Account Data: Duration of account plus 2 years
• Billing Data: 7 years (legal requirement)
• Your Uploaded Data: Until you delete it or close your account
• Backups: Encrypted backups retained for 30 days
• Logs: Security logs retained for 12 months

Exercising Your Rights

To exercise any of your GDPR rights, you can:

• Use the self-service options in your account Settings
• Email us at hello@ai-singularity.app
• Contact your local Data Protection Authority

We will respond to all requests within 30 days as required by GDPR. For complex requests, we may extend this by an additional 60 days with prior notice.

Contact Our Data Protection Team