Compliance Notice

Our Commitment to Compliance

Sequel AI Ltd is committed to operating Promptax in compliance with applicable data protection laws and regulations. We take our legal obligations seriously and continuously work to ensure our practices meet or exceed regulatory requirements.

GDPR Compliance (EU)

For users in the European Union, we comply with the General Data Protection Regulation (GDPR). This includes:

• Lawful basis for processing personal data
• Data subject rights (access, rectification, erasure, portability)
• Data protection by design and default
• Appropriate technical and organizational security measures
• Data protection impact assessments where required
• Appointment of a Data Protection Officer

UK GDPR Compliance

As a UK-based company, we comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We are registered with the Information Commissioner's Office (ICO).

CCPA Compliance (California)

For California residents, we comply with the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). California residents have the right to:

• Know what personal information is collected
• Know if personal information is sold or disclosed
• Say no to the sale of personal information
• Access their personal information
• Request deletion of personal information
• Not be discriminated against for exercising these rights

Note: We do not sell personal information as defined by the CCPA.

International Data Transfers

When we transfer personal data outside the UK/EEA, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• International Data Transfer Agreement (IDTA) for UK transfers
• Data processing agreements with sub-processors

Security Certifications

We maintain the following security practices and certifications:

Sub-Processors

We use carefully selected sub-processors to help deliver our Service. A list of our current sub-processors is available upon request. We notify customers of any changes to our sub-processor list.

Data Protection Contact

For compliance-related inquiries, data protection requests, or to exercise your rights, please contact our Data Protection Officer:

Regulatory Authority

If you are unsatisfied with our response to a data protection request, you have the right to lodge a complaint with a supervisory authority. Our lead supervisory authority is: