GDPR statement for European and UK customers
This statement is for customers and prospective customers in the European Economic Area and the United Kingdom. It describes how Tassient LLC ("Tassient"), the company behind Aipex, processes personal data when you visit our website, request access, or use the Aipex platform. It supplements our Privacy Policy and does not replace any customer agreement.
1. Who we are
Tassient LLC is the provider of Aipex. For privacy questions, data-subject requests, and requests from European customers or supervisory authorities, contact info@tassient.com. The contact details of the EU/UK representative are available on request from this email address.
2. Our role
When a customer organization uses Aipex, that organization decides why its users' account and activity data is processed. For that customer data, the organization is the controller and Tassient processes the data to provide, secure, and support the service.
Tassient is the controller for its own website, sales, support, security, and account-administration records, where Tassient decides the purposes of processing. A data processing agreement is available on request for customers who need Tassient to act as a processor.
3. Personal data we process
Aipex is a business service. The personal data we process is limited to what is needed to provide that service:
- Corporate user ID and user name.
- Contact details such as name, email address, company name, and job title.
- Account and authentication details used to sign in and manage access.
- Usage information such as pages visited, feature activity, device details, and session data.
- Support and communications data when you contact us for help, demos, or onboarding.
- Operational and diagnostic data needed to provide, secure, and improve the service.
Some of this data is provided by you. Some, including a corporate user ID, user name, email address, company, and job title, may be provided by your organization. Usage, device, and diagnostic data is generated when the service is used.
We do not ask for special-category data, such as health, biometric, or trade-union information. We do not sell personal data, and we do not use it for third-party advertising. We do not use this personal data to make solely automated decisions that produce legal or similarly significant effects about an individual.
4. Why we process it, and the legal basis
We process personal data for the following purposes:
- Provide and operate Aipex, including accounts and organization access. Basis: performance of a contract, or the customer's instructions where the customer is the controller.
- Respond to inquiries, provide support, and send service-related communications. Basis: contract and legitimate interests in operating the service.
- Monitor performance, maintain security, detect abuse, and troubleshoot issues. Basis: legitimate interests in keeping the service secure and reliable.
- Improve functionality, reliability, and user experience. Basis: legitimate interests. This does not include selling personal data.
- Meet legal, regulatory, and contractual obligations. Basis: legal obligation, or legitimate interests where no legal obligation applies.
- Remember preferences or measure traffic with optional cookies, where consent is required. Basis: consent, which you can withdraw.
Account and contact details are required to provide access. If they are not provided, we cannot create or maintain the account.
5. Who we share it with
We share personal data only as needed, with:
- Service providers that host, secure, analyze, and support the platform, acting on our instructions.
- The customer organization's administrators, for that organization's account and activity data.
- Professional advisers and auditors where necessary.
- Authorities or other parties when required by law, or to protect rights, safety, and security.
- A successor entity in connection with a merger, acquisition, financing, or sale of assets.
A current list of subprocessors is available on request from info@tassient.com.
6. International transfers
Aipex is hosted in the United States. Personal data of European users may therefore be transferred to and processed in the United States. Where required, we use appropriate safeguards for those transfers. A customer can ask us for the current hosting location and transfer safeguards, and can ask for that organization's service and data to be hosted elsewhere.
7. How long we keep it
We keep personal data only as long as reasonably necessary for the purposes above. Account and contact data is kept for the life of the customer account, and then for a limited period needed to close the account, resolve disputes, enforce agreements, and meet legal requirements. Usage and diagnostic data is kept only as long as needed to operate, secure, and support the service. Support communications are kept long enough to handle the request and keep a record of it.
When a customer agreement ends, we delete or return customer personal data in line with that agreement, unless the law requires us to keep it.
8. Security
We use administrative, technical, and organizational safeguards designed to protect personal data, and we limit access to people who need it to provide the service. No method of transmission or storage is completely secure.
9. Your rights
If the GDPR or UK GDPR applies to you, you may have the right to:
- Access the personal data we hold about you, and receive a copy.
- Correct inaccurate data.
- Delete personal data, or restrict processing, in the circumstances the law provides.
- Object to processing based on legitimate interests.
- Receive personal data you provided, in a portable format, where the right applies.
- Withdraw consent where processing is based on consent. Withdrawal does not affect processing that already took place.
- Lodge a complaint with a supervisory authority. In the UK, that is the Information Commissioner's Office.
Send requests to info@tassient.com. We may need to verify your identity before responding. If your organization is the controller of the account, we may need to refer the request to that organization, or ask its administrator to confirm it.
10. Cookies
We may use cookies and similar technologies to remember preferences, maintain sessions, measure traffic, and improve site performance. You can control cookies in your browser. Some features may not work if cookies are disabled. Where consent is required for a non-essential cookie, we will ask for it.
11. Children
Aipex is intended for business and professional use and is not directed to children. We do not knowingly collect personal data from children.
12. Changes
We may update this statement from time to time. When we do, we will revise the date on this page. The current version is published here.
13. Contact
Tassient LLC
Email: info@tassient.com
Product: Aipex