Skip to main content

Privacy policy

IQBID Helios Limited ("Company," "we," "us," or "our"), a company incorporated and registered under the laws of the Republic of Seychelles with international business company registration number 252002 and having its registered office at Suite 9, Ansuya Estate, Royal Street, Victoria, Mahe, Seychelles, operates as the definitive Data Controller under Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation — "GDPR").

This GDPR Privacy Policy applies exclusively and restrictively to data subjects residing within the European Union (EU), the European Economic Area (EEA), and Switzerland (collectively, "EU Users") who access, register an account with, or utilize our artificial intelligence (AI) model aggregation platform, user interface, website, and associated cloud-routing infrastructure (collectively, the "Service").

In strict accordance with Article 6 of the General Data Protection Regulation ("GDPR"), the Company processes your personal data and technical interaction metrics only when at least one valid legal basis is firmly established:

(a) Performance of a Contract (Art. 6(1)(b) GDPR): To activate, maintain, and manage your user account, provide real-time operational access to our artificial intelligence computing aggregation interface, deliver your purchased structural feature tiers (each, a "Subscription Plan"), securely allocate and manage your non-expiring usage-based credits (the "IQBID Tokens"), and facilitate transaction processing via authorized third-party Payment Processors.

(b) Legitimate Interests (Art. 6(1)(f) GDPR): To actively detect, investigate, and mitigate infrastructure security threats, protect our integrated application programming interfaces (APIs), prevent automated financial fraud, enforce the restrictions set forth in our Acceptable Usage Policy, and maintain the absolute stability, latency control, and network security of our software platform.

2. Categories of personal data we collect

The Company collects and processes specific categories of personal data, computational interaction logs, and structural telemetry metadata regarding European Union (EU) and European Economic Area (EEA) Users:

(a) Account Identifiers: First name, last name, corporate or personal email address, unique automated online identifier (UID), and encrypted/hashed password access credentials.

(b) Technical Telemetry and Log Data: Internet Protocol (IP) address, device hardware fingerprints, operating system type, localized language settings, browser engine parameters, detailed timestamps of individual interface actions, latency logs, and programmatic interaction metrics.

(c) Financial Transactional and Balance Data (Non-Crypto Assets Standing): Comprehensive logs of your billing history, transaction statuses, and payment IDs. This includes records of Subscription Plans and IQBID Tokens. Per EU MiCA (Regulation (EU) 2023/1114), IQBID Tokens are strictly internal technical software metrics for calculating data throughput and API costs, possessing zero cash value and non-transferability. PCI DSS Disclaimer: The Company complies with PCI DSS standards and does not collect or store raw payment card numbers, expiration dates, or CVV/CVC codes, which are handled exclusively by secure third-party processors.

(d) User Inputs and Material Files: The quantitative content of text queries, structured strings, and any integrated multi-format digital files (including images, PDF documents, tabular text sheets, audio recordings, or software code) that you actively upload to the interface ("User Content") to perform generative computational tasks.

(e) AI-Generated Outputs: Synthetic text, media assets, code scripts, or metadata structures generated automatically by integrated downstream artificial intelligence architectures in fulfillment of your prompt demands.

3. Recipients of personal data and sub-processors

To deliver the core artificial intelligence model aggregation functionalities of the Service, the Company is contractually required to securely transmit user text queries, prompt strings, and uploaded multi-format digital files via end-to-end encrypted Application Programming Interface (API) channels to independent third-party infrastructure infrastructure developers and downstream processors (collectively, "Sub-processors").

These core infrastructure Sub-processors include, but are not limited to, the following entities:

  • OpenAI, LLC (headquartered in the United States);
  • Google LLC (headquartered in the United States); and
  • Anthropic, PBC (headquartered in the United States).

Whenever personal data, internal prompt metadata, or associated account interaction metrics are transferred outside the European Economic Area (EEA) to third countries (such as the United States) that are not recognized by the European Commission as providing an adequate level of data protection under an adequacy decision, the Company ensures maximum compliance. We verify that legally binding appropriate safeguards, specifically the Standard Contractual Clauses (SCCs) adopted by the European Commission pursuant to Decision (EU) 2021/914, are fully integrated into our enterprise API infrastructure contracts with each downstream supplier. This framework ensures that your fundamental privacy rights under the GDPR travel with your data across international borders.

4. Strict protocol for ai model training and machine learning

The Company periodically optimizes and fine-tunes its proprietary operational software routing logic and underlying open-source machine learning matrices utilizing technical interaction telemetry data.

If you have previously granted such explicit processing consent, you retain the absolute, unconditional statutory right under the GDPR to revoke your consent at any time without any negative consequences, reduction in core platform usability, or modifications to your underlying financial billing terms under your active Subscription Plan or associated IQBID Tokens balance. You may execute your withdrawal of consent immediately by toggling the data-use controller in your digital Account Settings panel or by submitting a formal written request to our data protection team via electronic mail at: privacy@iqbid.ai.

5. Data storage and localization

In strict accordance with the principles of data minimization, accountability, and storage limitation enshrined in the General Data Protection Regulation ("GDPR"), the Company securely stores, isolates, and processes all infrastructure data, user profile databases, account settings, authentication logs, billing telemetry, and operational session caches belonging to European Union (EU) and European Economic Area (EEA) Users exclusively on secure enterprise-grade cloud servers and isolated database environments physically deployed and hosted within the territorial borders of the European Union (EU/EEA).

Temporary operational caching of encrypted raw data packets required strictly for real-time Application Programming Interface (API) routing to the designated downstream sub-processors listed in Section 3 is executed automatically using volatile system memory that undergoes prompt, permanent erasure upon the completion of the respective computational data generation cycle.

6. Your mandatory gdpr privacy rights

As an European Union (EU) or European Economic Area (EEA) data subject, you possess extensive, protected statutory rights under Chapter III of the General Data Protection Regulation ("GDPR").

You may exercise any of the following fundamental privacy privileges at any time:

  • Right of Access (Art. 15 GDPR): The right to request comprehensive copies of your personal data held by us, alongside a detailed structural breakdown of our current automated data processing paths.
  • Right to Rectification (Art. 16 GDPR): The right to compel the immediate correction of inaccurate profile information or completion of incomplete personal data records.
  • Right to Erasure / "Right to be Forgotten" (Art. 17 GDPR): The right to request the complete, permanent scrubbing of your profile logs, historical chat contexts, and uploaded data assets, subject to specific regulatory exceptions (such as the necessity to deliver your active Subscription Plan limits or comply with international financial record-keeping laws).
  • Right to Restriction of Processing (Art. 18 GDPR): The right to restrict data processing activities under specific civil dispute conditions or while data accuracy is being verified.
  • Right to Data Portability (Art. 20 GDPR): The right to demand that your stored account configuration data and text histories are exported to you in a structured, machine-readable, commonly used software format.
  • Right to Object (Art. 21 GDPR): The right to immediately halt any processing activities predicated on our corporate Legitimate Interests or direct marketing initiatives.

To assert any of your statutory GDPR rights, please submit a verified communication to our global privacy enforcement officer at privacy@iqbid.ai from your registered email profile.

7. Right to lodge a complaint with a supervisory authority

Under Article 77 of the GDPR, users have the right to lodge a complaint with a data protection supervisory authority [🇪🇺]. You may contact privacy@iqbid.ai first for assistance.

8. Changes to this Privacy Policy

(a) Effective Version: Governed by the version active on the transaction date.
(b) Right to Modify: The Company may update this policy unilaterally.
(c) User Responsibility: Updates are indicated via the "Last Updated" timestamp; users should check periodically.

9. Contact information and data protection officer

For inquiries or to contact our Data Protection Officer (DPO):

  • Email: privacy@iqbid.ai
  • Entity: IQBID Helios Limited
  • Сompany number: 252002
  • Registered Address: Suite 9, Ansuya Estate, Royal Street, Victoria, Mahe, Seychelles
Back to top