This policy explains how ActAI Compliance ("we", "us") handles personal data when you use actaicompliance.com or buy our products. For privacy questions, contact isaac@actaicompliance.com. We are the controller of the personal data described below, except where it says Paddle is.
What we collect and why
- Technical data from visiting the site. Our hosting provider, Cloudflare, processes your IP address and request details (such as browser type and pages requested) to deliver the site and keep it secure. Legal basis: our legitimate interest in running and protecting the site.
- Answers to the free checker tools. The free EU AI Act and US AI law checkers run in your browser. Your answers are not sent to us. They stay on your device.
- Personal AI law report. If you buy a personal report, we store the answers you give in its questionnaire together with your email address, so we can build the report, show it to you, email it to you and let you open it again from a private link. The answers describe your organisation and your AI system, so please do not enter personal data about other people. Legal basis: performing our contract with you.
- Purchase and contact details. If you buy a product, Paddle collects your payment and billing details and passes us your name, email address, country and order information so we can deliver the product and give support. Legal basis: performing our contract with you.
- Emails you send us. We keep correspondence so we can reply and keep a record. Legal basis: our legitimate interest in answering you.
- Browser storage. The site stores a small amount of data on your device, such as a service worker cache so pages work offline. We do not use advertising cookies.
Who we share data with
- Paddle.com, our Merchant of Record, which processes payments and is itself responsible for the payment data it handles. See Paddle's privacy notice.
- Service providers that help us run the site and send briefings, such as our hosting provider (Cloudflare) and our email provider (Resend), who may only use data on our instructions.
- Professional advisers and authorities where the law requires it or we need to protect our rights.
We do not sell your personal data.
International transfers
Our providers may process data outside your country, including outside the UK and European Economic Area. Where this happens we rely on an adequacy decision or standard contractual clauses, as applicable.
How long we keep it
Server logs are kept for a short period, usually no more than a few weeks. Purchase records are kept for as long as tax and accounting law requires. Personal report answers and the finished report are kept for 12 months after purchase so you can open your report again, and then deleted, or sooner if you ask us to delete them. Support emails are kept for as long as needed to deal with your request and for a reasonable time afterwards.
Your rights
Depending on where you live, you may have the right to access, correct or delete your personal data, to restrict or object to its use, to move it to another service, and to complain to your data protection authority. Email isaac@actaicompliance.com to use any of these rights.
Security
We use reasonable technical and organisational measures to protect personal data, including encrypted connections (HTTPS). No system is completely secure, but we work to keep your data safe.
Changes
We may update this policy and will change the date below when we do. Last updated 5 November 2026.