SigmaQu respects your privacy and is committed to protecting your personal data. This privacy policy will inform you as to how we look after your personal data when you use our Platform and tell you about your privacy rights and how the law protects you.

Purpose of this Privacy Policy
This privacy policy aims to give you information on how SigmaQu collects and processes your personal data through your use of our mobile applications and website (collectively, the "Platform"), including any data you may provide when you create an account, purchase a subscription, or interact with our AI-powered features.

This Platform is not intended for children, and we do not knowingly collect data relating to children. It is important that you read this privacy policy so that you are fully aware of how and why we are using your data.

Controller
SigmaQu, a limited company registered in Scotland, is the controller and responsible for your personal data (collectively referred to as "SigmaQu", "we", "us" or "our" in this privacy policy).

Contact Details
If you have any questions about this privacy policy or our privacy practices, please contact us using the details below. The person responsible for data protection can be reached here:

• Email address: hello@sigmaqu.com
• Postal address: Eh20 Business Centre Room 212, 6 Dryden Road, Loanhead, Midlothian, Scotland, EH20 9LZ
• Company Number: SC826093

You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.

Changes to the Privacy Policy
We keep our privacy policy under regular review. It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.

Third-Party Links
This Platform may include links to third-party websites and services. Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements.

Personal data means any information about an individual from which that person can be identified. We may collect, use, store, and transfer different kinds of personal data about you:

• Identity Data: includes first name and last name.
• Contact Data: includes email address and telephone numbers.
• Technical Data: includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, operating system and platform.
• Profile Data: includes your username and password, subscription details, feedback, and survey responses.
• Usage Data: includes information about how you use our Platform, products, and services, including your interaction with our AI features.
• Marketing and Communications Data: includes your preferences in receiving marketing from us.
• Content Data: includes text prompts, queries, images, documents, and other inputs you provide to our AI tools (e.g., chat, business plan generation, logo generation) and the outputs generated by these tools based on your inputs (e.g., generated business plans, brand plans, chat responses, logos).

We also collect and use Aggregated Data such as statistical or demographic data. Aggregated Data is not considered personal data in law as it does not directly or indirectly reveal your identity.

We do not collect any Special Categories of Personal Data about you (e.g., race, ethnicity, religious beliefs, health data).

We use different methods to collect data from and about you:

• Direct Interactions: You may give us your data by creating an account, filling in forms, or by corresponding with us.
• Automated Technologies: As you interact with our Platform, we automatically collect Technical and Usage Data.
• User Inputs and Interactions with AI: When you use our AI-powered features, we collect the Content Data you provide as prompts and the resulting outputs.

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data:

• To perform the contract we have with you.
• Where it is necessary for our legitimate interests (and your interests do not override ours).
• To comply with a legal obligation.

Purpose/Activity	Type of Data	Lawful Basis for Processing (including legitimate interest)
To register you as a new user	(a) Identity, (b) Contact	Performance of a contract with you
To process and deliver your subscription	(a) Identity, (b) Contact, (c) Profile	Performance of a contract with you
To manage our relationship with you	(a) Identity, (b) Contact, (c) Profile, (d) Marketing	Performance of a contract; Necessary for our legitimate interests (to keep our records updated and study customer usage)
To provide the Platform's services and AI features to you, including generating plans, logos, and chat responses	(a) Identity, (b) Contact, (c) Profile, (d) Content	Performance of a contract with you
To improve our Platform, AI models, services, and user experience	(a) Technical, (b) Usage, (c) Content (anonymised)	Necessary for our legitimate interests (to develop our products/services, grow our business, and improve AI model accuracy)
To manage and protect our business and this Platform	(a) Identity, (b) Contact, (c) Technical	Necessary for our legitimate interests (for running our business, provision of IT services, network security)
To deliver relevant content and marketing to you	(a) Identity, (b) Contact, (c) Profile, (d) Usage, (e) Marketing	Consent (for third-party marketing); Legitimate interests (to develop our products and inform our marketing strategy)

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way. We limit access to your personal data to those employees and third parties who have a business need to know.

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements. By law, we have to keep basic information about our customers (including Contact, Identity, and Transaction Data) for six years after they cease being customers for tax purposes.

We may share your personal data with third-party service providers (such as our AI service provider, Google) who are based outside the UK. Whenever we transfer your personal data out of the UK, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

• We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data.
• We use specific contracts approved for use in the UK which give personal data the same protection it has in the UK (such as Standard Contractual Clauses).

Under UK data protection laws, you have rights in relation to your personal data:

• Request access to your personal data.
• Request correction of your personal data.
• Request erasure of your personal data.
• Object to processing of your personal data.
• Request restriction of processing your personal data.
• Request transfer of your personal data.
• Right to withdraw consent.

If you wish to exercise any of the rights set out above, please contact us at hello@sigmaqu.com.

---

Deleting Your Account
You are in full control of your data. If you choose to delete your account from within the app, all of your personal data, including your profile information and any content you have created, will be instantly and permanently erased from our production databases. This action cannot be undone.