Privacy Policy

HumanWox Ltd. (“HumanWox”, “we”, “us”) is the data controller for personal data collected through humanwox.com and the data processor for personal data you submit to the HumanWox platform under a customer agreement.

We collect three categories of data:

• Account data — name, work email, organisation, role.
• Operational data — AI system records, risks, evidence, and review actions you enter into the platform.
• Telemetry — product usage events, IP, device, and approximate location used to operate and secure the service.

We use personal data to deliver the service, enforce security, satisfy legal and regulatory obligations, communicate operational notices, and improve the platform. We do not sell personal data and we do not use customer operational data to train third-party AI models.

We rely on contract performance for service delivery, legitimate interests for security and product improvement, legal obligation for record-keeping and audit, and consent for optional marketing communications.

We share data with vetted sub-processors that provide infrastructure, identity, email, observability, and analytics. A current list and a notification mechanism for changes is available on request from privacy@humanwox.com.

Where data leaves the UK or EEA, we rely on UK IDTA / EU Standard Contractual Clauses and apply supplementary measures including encryption in transit and at rest.

We retain account data for the duration of the contract plus the period required for legal, tax, and audit purposes. Operational data is retained according to your workspace retention policy.

You may request access, rectification, erasure, restriction, portability, or objection in respect of your personal data. Contact privacy@humanwox.com. You may also lodge a complaint with your local supervisory authority.

Data Protection contact: privacy@humanwox.com. Postal: HumanWox Ltd., Legal, London, United Kingdom.