Privacy Policy.

We only collect the information necessary to provide and improve our platform and the Services.

What we collect

• Account Information: Your name and email address.
• Login Data: The credentials used to access our platform.
• Course Usage & Performance Data: For our AI-Generated Courses, we may collect your purchase history and subscription status.
• Feedback: Any comments, reviews, or suggestions you share with us.
• Device Information: When you log in, we record a device identifier to manage your active sessions and prevent unauthorized sharing of your account.
• Email Preferences: Whether you have consented to receive communications from us, and the date of that consent.
• Invoice/Receipt: For billing and invoicing purposes, we and our payment processors collect your billing name, address, and email address.

What we do NOT collect

• We do not intend to collect or store any sensitive personal information or medical data.
• We do not collect full credit card numbers; all payments are processed securely through our payment processors.
• Client Documents: We do not save the documents, code, or business plans you provide for AI compliance review.

Please do not submit sensitive personal information (such as health records, government-issued identification numbers, or financial account credentials) to our platform. If such information is inadvertently submitted, we will delete it upon becoming aware of it.

Under privacy laws like the GDPR, we must have a "legal basis" for using your data:

• Account and billing information is processed to perform our contract with you.
• Course usage data and service improvement are based on our legitimate business interests in operating and improving the platform.
• Marketing communications, if any, are based on your consent, which you may withdraw at any time.

Cloud Hosting: We host our platform on cloud infrastructure operated by trusted third-party providers. We select providers and storage regions to support strong privacy protections for your data. Our cloud infrastructure providers, payment processors, and email service providers are contractually bound to protect your personal information and process it only on our behalf.

User Local Storage: All output documents (such as generated AI Impact Assessments or corrected policies) are saved exclusively by you to your local computer or your own cloud space.

We aim to store and process your account data in jurisdictions recognized as providing an adequate level of data protection, such as Canada (which is recognized by the European Commission as providing adequate protection). Where your data is processed in or transferred to other jurisdictions by our service providers, we rely on appropriate safeguards, such as Standard Contractual Clauses, certification under the EU-US Data Privacy Framework, or other lawful transfer mechanisms permitted under applicable law.

Our platform is intended for adult users only. You must be an adult under the laws of your jurisdiction to register or use our Services. To protect minors, (a) we do not knowingly collect personal information from minors; (b) you must not submit personal information of minors through our Services; and (c) if we become aware that any such information has been collected or submitted, we will delete it.

Some of our services are free, while others are paid through our payment processors.

• Courses: $20 is due upon order, refundable within 30 calendar days of payment. The balance is automatically charged on day 31. Times are calculated in UTC, in accordance with the timestamps recorded by our payment service provider.
• Other Services: All other paid services (such as AI compliance reviews and expert services) are non-refundable.

We do not sell your personal information. We only share your data in limited situations:

• Service Providers: We share necessary data with trusted third parties that help run our business, such as cloud infrastructure providers (including for hosting and backup), payment processors, email service providers, and AI model providers. These providers are contractually bound to protect your data and may only use it to provide services on our behalf.
• Human Experts: If you request human compliance expert review services, relevant information will be shared with them to facilitate the service.
• Legal Requirements: We may disclose information if required by law or legal processes in Canada or other relevant jurisdictions.

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal information we hold about you.
• Correction: Ask us to correct inaccurate or incomplete personal information.
• Deletion: Request permanent deletion of your personal information.
• Restriction: Ask us to limit how we process your personal data in certain circumstances.
• Portability: Receive your data in a structured, machine-readable format.
• Objection: Object to our processing of your personal data based on legitimate interests.
• Withdraw Consent: Opt out of consent-based processing at any time.
• Complaint: Lodge a complaint with your local data protection authority, such as the Office of the Privacy Commissioner of Canada (priv.gc.ca) or the relevant EU supervisory authority.
• Other rights as provided under applicable laws.

You can update your account details directly in our platform settings. For all other requests, please contact us via email at info@layrix.ai. We will use reasonable efforts to respond to and process all valid privacy rights requests as soon as possible, but no later than 15 working days.

We retain your personal information only for as long as your account is active or as necessary to provide our Services, comply with our legal obligations, resolve disputes, and enforce our agreements. Once no longer needed, your data is securely deleted or anonymized.

We protect your personal information through encryption in transit (TLS) and at rest, access controls limiting access to authorized personnel, and data processing agreements with all service providers.

We do not use HTTP cookies for tracking or advertising. To provide our Services, we may use:

• functional browser storage (such as localStorage) to maintain your login session and support platform features; and
• short-lived cookies that are strictly necessary for security, such as protection against cross-site request forgery during sign-in.

These data are stored locally on your device and are not used for tracking. You can clear them at any time through your browser settings.

Our Products and Services use AI to generate compliance review summaries, course content, and similar reference compliance materials. These outputs are intended as informational references for you and do not constitute automated decisions about individual data subjects.

We may update this Privacy Policy from time to time to reflect changes in our platform, the Services, or legal requirements. If we make significant changes, we will notify you by email or by placing a notice on our platform. Your continued use of our platform after such updates constitutes your acceptance of the updated Privacy Policy. If you do not agree to any changes, please discontinue use of our platform and the Services.

If you have any questions or requests regarding your personal information, please contact our Privacy Officer:

Privacy Officer: Joanna C.
Email: info@layrix.ai

EU/UK Representative: We are in the process of appointing a representative in the European Union and United Kingdom as required under applicable data protection law.