Who we are
Culturas ("Culturas", "we", "us") operates culturas.ai and is the controller of the personal data described in this policy. Questions, privacy requests and requests for our registered business details can be sent to connect@culturas.ai.
What this policy covers
This policy covers our public website, enquiries, research interactions and website-based CultureAI or CultureGraph experiences. It does not cover a customer's own processing or a third-party service linked from our site.
The data we collect
We collect only the information needed to run, secure and improve the site and to respond when you contact us:
- Information you provide: name, work email, company and the content of an enquiry.
- CultureAI interactions: prompts, recent conversation messages and the page section relevant to your question.
- Technical and usage data: route and section viewed, interaction and scroll events, elapsed time, viewport size, device type, reduced-motion setting, referring page, browser information and security logs. Our first-party journey measurement uses a random in-memory session identifier that is discarded when the experience ends.
We do not ask you to submit sensitive personal data through our forms or CultureAI. Please do not include confidential or sensitive information in a prompt or enquiry.
How and why we use data
| Purpose | Typical data | EU/UK legal basis |
|---|---|---|
| Respond to enquiries and scope potential work | Contact details, company and enquiry | Steps at your request before a contract; legitimate interests in business communications |
| Provide CultureAI and site experiences | Prompts, conversation context and technical data | Performance of a service you request; legitimate interests in providing and improving our services |
| Operate, measure and secure the site | Usage, device, log and error data | Legitimate interests in reliable, secure and effective services |
| Meet legal requirements and protect rights | Relevant account, enquiry and log data | Legal obligation; legitimate interests in establishing or defending legal claims |
| Optional communications or technologies, if introduced | The information described when consent is requested | Consent, which you may withdraw at any time |
CultureAI and automated processing
When you use a CultureAI feature, the prompt, recent conversation and relevant page context are sent to our AI gateway and model provider to generate a response. We use this information to answer your request, maintain safety and improve the experience. We do not use CultureAI to make decisions about you that produce legal or similarly significant effects.
International transfers
Our providers may process data outside your country, including outside the European Economic Area or United Kingdom. Where required, we use an adequacy decision, approved standard contractual clauses or another lawful transfer mechanism, together with supplementary safeguards where appropriate. Contact us for more information about the safeguard relevant to your data.
How long we keep data
We keep personal data only as long as needed for the purpose collected. We consider whether an enquiry remains active, the duration of a customer relationship, security and troubleshooting needs, source requirements, and legal limitation or record-keeping periods. We then delete or anonymise it unless law requires longer retention. You may ask us for the retention criteria that apply to your data.
Your privacy rights
Depending on where you live, you may have rights to access, correct, delete, restrict or object to processing, receive a portable copy, and withdraw consent without affecting earlier lawful processing. You may also object to processing based on our legitimate interests.
Email connect@culturas.ai to exercise a right. We may need to verify your identity and will normally respond within one month under EU/UK law. You may complain to your local data protection authority. The European Data Protection Board maintains a list of EU supervisory authorities.
Security
We use proportionate technical and organisational measures intended to protect personal data, including access controls, encrypted transport and restricted provider access. No online system is completely secure, so please use care when deciding what to send us.
Children
Our site and services are intended for organisations and professionals, not children. We do not knowingly collect personal data from children under 16 through the site. If you believe a child has provided data, contact us so we can investigate and delete it where appropriate.
Changes and contact
We may update this policy as our services or legal obligations change. We will publish the revised date here and give additional notice where a change is material.
For any privacy question or request, email connect@culturas.ai.