AnzenOT is the data controller responsible for your personal data. Our contact details are:
| Category | Data Types | Purpose |
|---|---|---|
| Account Data | Name, email address, password (hashed), organization name | Account creation and authentication |
| Profile Data | Job title, phone number, preferences | Service personalization |
| Billing Data | Payment method, billing address, transaction history | Payment processing (via Stripe) |
| Customer Content | Facility information, risk assessments, scenarios | Providing the Service |
| Communications | Support tickets, feedback, correspondence | Customer support |
| Category | Data Types | Purpose |
|---|---|---|
| Usage Data | Pages visited, features used, actions taken | Service improvement and analytics |
| Device Data | IP address, browser type, operating system | Security and troubleshooting |
| Log Data | Access times, error logs, referral URLs | Security monitoring |
| Cookie Data | Session identifiers, preferences | Site functionality (see Cookie Policy) |
Under the GDPR, we process your personal data based on the following legal grounds:
| Legal Basis | When We Use It |
|---|---|
| Contract Performance (Article 6(1)(b)) |
Processing necessary to provide the Service you subscribed to, including account management, service delivery, and customer support. |
| Legitimate Interests (Article 6(1)(f)) |
Improving our Service, security monitoring, fraud prevention, and business analytics. We balance these interests against your rights. |
| Legal Obligation (Article 6(1)(c)) |
Complying with tax laws, responding to legal requests, and maintaining required records. |
| Consent (Article 6(1)(a)) |
Marketing communications, non-essential cookies, and any processing where we explicitly request your consent. |
We use your personal data to:
We share data with trusted third parties who help us operate our Service:
| Provider Category | Purpose | Data Shared |
|---|---|---|
| Cloud Infrastructure (AWS) | Hosting and data storage | All service data |
| Payment Processor (Stripe) | Subscription billing | Billing data only |
| AI Services (OpenAI) | Risk analysis generation | Anonymized facility data |
| Email Services | Transactional emails | Email address, name |
Your data may be transferred to and processed in countries outside the European Economic Area (EEA). When this occurs, we ensure appropriate safeguards:
We may disclose your data if required by law, court order, or to protect our rights and safety.
We retain your personal data only as long as necessary:
| Data Type | Retention Period |
|---|---|
| Account Data | Duration of account + 30 days after deletion request |
| Customer Content | Duration of subscription + 90 days for export |
| Billing Records | 7 years (legal requirement) |
| Usage Logs | 12 months |
| Support Communications | 3 years |
Under the GDPR and other data protection laws, you have the following rights:
Request a copy of your personal data we hold.
Correct inaccurate or incomplete data.
Request deletion of your data ("right to be forgotten").
Limit how we process your data.
Receive your data in a structured, machine-readable format.
Object to processing based on legitimate interests.
Withdraw consent at any time where we rely on it.
Lodge a complaint with a supervisory authority.
To exercise your rights, contact us at privacy@anzenot.ai. We will respond within 30 days.
We use cookies and similar technologies to operate our Service. For detailed information about the cookies we use and how to manage your preferences, please see our Cookie Policy.
Key points:
We implement robust security measures to protect your data:
In the event of a data breach affecting your personal data, we will notify you and the relevant supervisory authority within 72 hours as required by GDPR.
Our Service is not intended for individuals under 16 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately.
We may update this Privacy Policy from time to time. We will notify you of material changes by:
The "Last updated" date at the top indicates when the policy was last revised.
For privacy-related inquiries or to exercise your rights:
Document Version: 2.0
Effective Date: January 22, 2026
Previous Version: View archived versions