Privacy Policy

1. Who We Are

Stoneset is operated by Prospy Limited, a company registered in England and Wales. For the purposes of UK GDPR and the Data Protection Act 2018, Prospy Limited is the data controller.

Contact: contact@stoneset.ai

2. What We Collect

• Account information (email address, name) when you sign up
• Classification data you provide about your AI systems
• Usage data (pages visited, features used) via privacy-respecting analytics
• Technical data (IP address, browser type) from server logs

3. How We Use It

• To provide and improve the Stoneset service
• To generate your AI Act classification and compliance reports
• To send service updates and, with your consent, marketing communications
• To comply with legal obligations

4. Legal Basis

We process your data under legitimate interest (service delivery), contract performance (providing the service you signed up for), and consent (marketing communications). You can withdraw consent at any time.

5. Data Sharing

We do not sell your data. We share data only with service providers necessary to operate Stoneset (hosting, email delivery) under appropriate data processing agreements. All data is processed within the EU/UK.

6. Your Rights

Under UK GDPR, you have the right to access, rectify, erase, restrict processing, port your data, and object to processing. To exercise these rights, email contact@stoneset.ai. We will respond within 30 days.

7. Data Retention

We retain your data for as long as your account is active or as needed to provide the service. Classification data is retained for the duration of your subscription. You can request deletion at any time.

8. Cookies

We use essential cookies for authentication and session management. We do not use third-party tracking cookies. Analytics, where used, are privacy-respecting and do not track individuals across sites.

9. Changes

We may update this policy from time to time. Material changes will be communicated via email or in-app notice.