Skip to main content

Privacy policy

Last Updated: September 8, 2026

IQBID Helios Limited ("Company," "we," "us," or "our"), a company incorporated and registered under the laws of the Republic of Seychelles,Seychelles with international business company registration number 252002 and having its registered office at ..... Republic of Seychelles, operates as the definitive Data Controller under Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation — "GDPR").

This GDPR Privacy Policy applies exclusively and restrictively to data subjects residing within the European Union (EU), the European Economic Area (EEA), and Switzerland (collectively, "EU Users") who accessaccess, register an account with, or utilize our artificial intelligence (AI) model aggregation platform, user interface, website, and associated cloud-routing infrastructure (collectively, the "Service").

In strict accordance with Article 6 of the GDPR,General weData processProtection Regulation ("GDPR"), the Company processes your personal data and technical interaction metrics only when weat haveleast aone valid legal basis:basis is firmly established:

    (a)

    Performance of a Contract (Art. 6(1)(b) GDPR): To activateactivate, maintain, and manage your user account, provide real-time operational access to our Artificialartificial intelligence computing aggregation interface, deliver your purchased structural feature tiers (each, a "Subscription Plan"), securely allocate query quotas, and securely manage your permanentnon-expiring subscriptionusage-based plancredits using(the a"IQBID Tokens"), and facilitate transaction processing via authorized third-party Payment Service.Processors.

    (b) Legitimate Interests (Art. 6(1)(f) GDPR): To actively detect, prevent,investigate, and mitigate infrastructure security threats, protect our integrated application programming interfaces (APIs), prevent automated financial fraud, enforce the restrictions set forth in our Acceptable Usage Policy, and maintain the absolute stability, latency control, and network security of our technicalsoftware network.

    platform. You retain the absolute statutory right to withdraw this consent at any time without detriment.

    2. Categories of personal data we collect

    WeThe collectCompany collects and processprocesses the followingspecific categories of datapersonal data, computational interaction logs, and structural telemetry metadata regarding EUEuropean Union (EU) and European Economic Area (EEA) Users:

      (a)

      Account Identifiers: First name, last name, corporate or personal email address, unique automated online identifier,identifier (UID), and encryptedencrypted/hashed password access credentials.

      (b) Technical Telemetry and Log Data: IPInternet Protocol (IP) address, device hardware fingerprints, operating system type, localized language settings, browser engine parameters, detailed timestamps of individual requests,interface actions, latency logs, and interfaceprogrammatic interaction metrics.

      (c) Financial Transactional and Balance Data: TheComprehensive logs of your billing history, selected currency conversion,configurations, transaction statuses, and unique payment identification numbers aresynchronized synchronizedsecurely with theour Payment Service.Processors. WeThis category explicitly includes records regarding your purchased Subscription Plans and active utilization or carry-over balance of IQBID Tokens. The Company strictly docomplies with PCI DSS frameworks and does not holdcollect, capture, view, or store raw payment card credentials.

      numbers, expiration dates, or security codes (CVV/CVC).

      (d) User Inputs and Material Files: The quantitative content of text queriesqueries, structured strings, and any integrated multi-format digital files (including images, PDF documents, tabular text sheets, audio material)recordings, or software code) that you actively upload to the interface ("User Content").

      to perform generative computational tasks.

      (e) AI-Generated Outputs: Synthetic text, media,media assets, code scripts, or datametadata structures generated automatically by third-partyintegrated downstream AIartificial intelligence architectures in fulfillment of your prompt demands.

      3. Recipients of personal data and sub-processors

      To performdeliver anthe AIcore artificial intelligence model aggregation function,functionalities weof the Service, the Company is contractually required to securely transfer anonymized or rawtransmit user text queriesqueries, prompt strings, and uploaded multi-format digital files via secureend-to-end APIencrypted Application Programming Interface (API) channels to independent third-party artificial intelligenceinfrastructure infrastructure developers actingand asdownstream ourprocessors independent(collectively, "Sub-processors").

      These core infrastructure suppliersSub-processors (Sub-processors), includinginclude, but are not limited to:to, the following entities:

      • OpenAI, LLC (headquartered in the United States);
      • Google LLC (headquartered in the United States); and
      • Anthropic, PBC (headquartered in the United States).

      Whenever personal datadata, isinternal prompt metadata, or associated account interaction metrics are transferred outside the EEAEuropean Economic Area (EEA) to third countries (such as the United States) that are not recognized by the European Commission as providing an adequate level of data protection,protection weunder ensurean adequacy decision, the Company ensures maximum compliance. We verify that legally binding appropriate safeguards, suchspecifically asthe Standard Contractual Clauses (SCCs) adopted by the European Commission,Commission pursuant to Decision (EU) 2021/914, are fully integrated into our supplierenterprise API enterpriseinfrastructure contracts.contracts with each downstream supplier. This framework ensures that your fundamental privacy rights under the GDPR travel with your data across international borders.

      4. Strict protocol for ai model training and machine learning

      The Company periodically optimizes and fine-tunes its proprietary operational software routing logic and underlying open-source machine learning matrices usingutilizing technical interaction telemetry data.

      If you have previously granted such explicit processing consent, you retain the absoluteabsolute, unconditional statutory right under the GDPR to revoke your consent at any time without any negative consequencesconsequences, reduction in core platform usability, or modifications to your underlying financial billing alterationsterms under your active Subscription Plan or associated IQBID Tokens balance. You may execute your withdrawal of consent immediately by toggling the data-use controller in your digital Account Settings panel or by emailingsubmitting a formal written request to our data protection team via electronic mail at: privacy@iqbid.ai.

      5. Data storage and localization

      WeIn storestrict accordance with the principles of data minimization, accountability, and processstorage limitation enshrined in the General Data Protection Regulation ("GDPR"), the Company securely stores, isolates, and processes all infrastructure data, user profiles,profile databases, account settings, authentication logs, billing telemetry, and operational session caches ofbelonging EUto European Union (EU) and European Economic Area (EEA) Users exclusively on secure enterprise-grade cloud servers and isolated database environments physically locateddeployed and hosted within the territoryterritorial borders of the European Union (EU/EEA).

      Temporary operational caching of encrypted raw data packets required strictly for real-time Application Programming Interface (API) routing to the designated downstream sub-processors listed in Section 3 is executed automatically using volatile system memory that undergoes prompt, permanent erasure upon the completion of the respective computational data generation cycle.

      6. Your mandatory gdpr privacy rights

      As an EU/EEAEuropean Union (EU) or European Economic Area (EEA) data subject, you possess extensiveextensive, protected statutory protectionsrights under Chapter III of the GDPR:General Data Protection Regulation ("GDPR").

      You may exercise any of the following fundamental privacy privileges at any time:

      • Right of Access (Art. 15 GDPR): The right to request comprehensive copies of your personal data held by us, alongside a comprehensivedetailed structural breakdown of our current automated data processing paths.
      • Right to Rectification (Art. 16 GDPR): The right to compel the immediate correction of inaccurate profile information or completion of incomplete personal data records.
      • Right to Erasure / "Right to be Forgotten" (Art. 17 GDPR): The right to request the complete, permanent scrubbing of your profile logs, historical chat contexts, and uploaded data assets, subject to specific regulatory transactionexceptions record(such retentionas mandates.the necessity to deliver your active Subscription Plan limits or comply with international financial record-keeping laws).
      • Right to Restriction of Processing (Art. 18 GDPR): The right to restrict data processing activities under specific civil dispute conditions.conditions or while data accuracy is being verified.
      • Right to Data Portability (Art. 20 GDPR): The right to demand that your stored historicalaccount materialsconfiguration data and text histories are exported to you in a structured, machine-readable, commonly used software format.
      • Right to Object (Art. 21 GDPR): The right to immediately halt any processing activities predicated on our corporate Legitimate Interests.Interests or direct marketing initiatives.

      To assert any of your statutory GDPR rights, please submit a verified communication to our global privacy enforcement officer at privacy@iqbid.ai from your registered email profile.

      7. Data storage and cache retention term

      We store account profile IDs and billing information for as long as your user account remains active, or to fulfill the financial accounting requirements provided by the Payment System.

      To manage operational cloud engineering overhead, User Content (prompts and uploaded documents) along with generated Outputs are cached in an encrypted state on our servers to enable your active workspace view. Cached session assets are automatically and permanently deleted from our records ninety (90) calendar days from generation, unless you manually delete your chat log panel earlier.

      8.7. Right to lodge a complaint with a supervisory authority

      IfUnder youArticle believe that our aggregation platform processes your files or personal data in a manner that infringes the mandates77 of the GDPR, youusers possesshave the absolute right to lodge a formal statutory complaint with a competent data protection supervisory authority within[🇪🇺]. You may contact privacy@iqbid.ai first for assistance.

      8. Changes to this Privacy Policy

      (a) Effective Version: Governed by the EUversion Memberactive Stateon ofthe yourtransaction habitualdate.
      (b) residence,Right placeto ofModify: work,The Company may update this policy unilaterally.
      (c) User Responsibility: Updates are indicated via the "Last Updated" timestamp; users should check periodically.

      9. Contact information and data protection officer

      For inquiries or place of the alleged infringement.

      9. GDPR complianceto contact

      our Data Protection Officer (DPO):
      • Email Communication:Email: privacy@iqbid.ai
      • Attn:Entity: DataIQBID ProtectionHelios Officer (DPO)Limited
      • CorporateCompany Controllernomber: Entity:252002
      Address:
      Back to top