Privacy Policy

1. Introduction

ACE ("we", "our", or "us") is dedicated to protecting the privacy and personal data of our users, compliance officers, and software engineers. This Privacy Policy details how we collect, process, and secure information when you interact with our marketing website, use our local-first Automated Compliance Engine CLI, or submit a request to contact our team.

We operate under a strict local-first data minimisation principle. All source code scanning, AST parsing, and AI-BOM compilation run entirely on your local machine, protecting your valuable intellectual property and source code assets from leaving your environment.

2. Data We Collect and How We Use It

We collect data through two primary pathways on this site:

• Contact & Inquiry Submissions: When you request information via our secure form, we collect your full name, email address, company name, project role, and your message description. This data is used solely to evaluate your AI Act compliance scope and get in touch with you.
• Technical Telemetry & Cookies: We collect essential preferences (such as cookie consent choices stored in your local browser storage) and basic anonymous analytics to understand site performance, provided you consent.

3. Data Processing and Storage

Any information submitted through our contact form is sanitized, validated, and stored in a secure local data repository on our backend system (`submissions.json`). To ensure developer compliance audit integrity while minimizing PII storage, IP addresses are cryptographically hashed using a one-way SHA-256 algorithm before logging.

We do not sell, rent, or lease your contact submissions to third parties. We do not distribute your personal details to advertising networks.

4. Cookie Policy

Cookies are small text files placed in your browser. We use cookies and browser local storage to:

• Essential Preferences: Store your GDPR consent configuration (using `localStorage`) so the consent banner does not interrupt your experience on subsequent visits.
• Performance Monitoring: Standard, privacy-respecting, anonymised metrics to analyze traffic spikes and page load speeds. These are only loaded if you explicitly accept them.

You can reset or change your preferences at any time by clicking the "Cookie Preferences" link in the footer of our site.

5. GDPR Compliance & Your Rights

Under the General Data Protection Regulation (GDPR), European Union residents possess strict rights regarding their personal data:

• Right to Access: You can request a copy of any contact form details linked to your email address.
• Right to Rectification: You can request that we correct inaccurate or outdated info.
• Right to Erasure ("Right to be Forgotten"): You can request that we delete your submissions from our database files.
• Right to Restrict or Object to Processing: You can revoke your cookie and tracking consent at any time.

To exercise these rights, please contact our data team through our main dashboard's submission form or email our support desk.

6. Data Security

We implement industry-standard administrative and technical security measures. All communications between your browser and our server are encrypted using HTTPS. Form submissions are protected by secure CSRF token validation and honeypot validation gates. Access to the raw database files is strictly restricted to authorized compliance developers.