Privacy & Security

Privacy Policy & Sub-Processor Disclosure

Last Updated: August 3, 2026

Zero Unrelated Third-Party Data Sharing Commitment

AI Disclosure Register processes data strictly to provide operational compliance evaluation and decision records. We never sell, monetize, or share client campaign data with third-party advertisers or AI model training networks.

1. Data Controller Identity

AI Disclosure Register (ai-disclosureregister.com) acts as the Data Controller for account authentication credentials and as a Data Processor for agency campaign records submitted into the assessment engine.

Official Contact: privacy@ai-disclosureregister.com

2. Authorized Technical Sub-Processors

To deliver cloud hosting, database authentication, payment processing, and email notifications, we engage trusted infrastructure sub-processors under strict GDPR data processing agreements:

Vercel Inc.

Cloud Web Hosting & Serverless Edge Execution (USA / EU)

Supabase Inc.

Encrypted Database Storage & User Authentication (EU)

Stripe Payments Europe

Subscription & Billing Portal Processing (Ireland / EU)

Resend Labs Inc.

Transactional Email & Receipt Delivery (EU West)

3. Data Retention & Account Deletion

Evaluation decision records are retained for as long as your agency account remains active to maintain your audit history. You may request full technical deletion of your account and all associated campaign records at any time by emailing privacy@ai-disclosureregister.com.

4. User Rights Under GDPR

EU and UK users possess the right to access, rectify, export (data portability), or restrict the processing of their personal data, or lodge a complaint with an applicable Supervisory Authority.