AURUM SPACE: PRIVACY POLICY (GDPR)

Effective Date: January 8, 2026 Data Controller: AURUM SPACE EOOD, Sofia, Bulgaria

1. DATA COLLECTION & PROCESSING

To provide the Advanced AI Agent service, we collect and process the following data:

Identity & Contact Data: Name, email address, and phone number of the Customer.

Billing Data: Processed securely via Stripe. We do not store full credit card details on our local servers.

AI Conversation Transcripts: We record and store the text and audio of all interactions between the AI Agent and the Customer’s leads/patients. This is a technical necessity for Weekly Logic Audits and system optimization.

2. LEGAL BASIS FOR PROCESSING (GDPR)

Contractual Necessity: Processing is required to deliver the "Digital Employee" service you have purchased.

Legitimate Interest: We store conversation transcripts to monitor AI accuracy, prevent fraud, and ensure the safety and reliability of the automated responses.

3. THIRD-PARTY DATA PROCESSORS

We utilize high-security, GDPR-compliant third-party providers to execute our AI infrastructure:

AI Logic & Processing: OpenAI / Anthropic (Secure API instances).

Telephony & Voice Routing: Twilio / Vapi.

Payment Processing: Stripe.

CRM Integration: As specified by the Customer (e.g., HubSpot, GoHighLevel).

4. DATA RETENTION

We retain conversation transcripts for the duration of the active subscription to assist in the "Cognitive Maturity" of the AI. Upon termination of service, data is archived or deleted in accordance with legal requirements unless otherwise requested by the Customer.

5. YOUR RIGHTS UNDER GDPR

As a data subject within the EU, you have the right to access your data, request rectification, or request the "Right to be Forgotten" (erasure). Please direct all privacy-related inquiries to: [email protected]

6. SECURITY MEASURES

AURUM SPACE employs industry-standard encryption for all data in transit and at rest. We implement strict access controls to ensure that only authorized engineering personnel can review call transcripts for logic auditing purposes.