Legal

Privacy Policy

This policy explains how personal data is processed when you use this website and contact us. It complements the technical detail on our Security page.

Controller

The controller responsible for data processing on this website is: Globalsoftware AI SIA Lastadijas iela 18-1A Riga, Latvia Email: hello@compylot.ai

What data we process

When you submit the demo-request or contact form, we process the details you provide: first and last name, work email, company, job title, company size, and your message. We also process technical data (such as your IP address) that your browser transmits when accessing the site, as is standard for hosted websites.

Purpose and legal basis

We process contact-form data to respond to your request and to prepare or carry out a possible business relationship (Art. 6(1)(b) GDPR) and on the basis of our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR). Technical access data is processed on the basis of our legitimate interest in operating a secure and stable website (Art. 6(1)(f) GDPR).

Hosting and data residency

The website and application are hosted on Microsoft Azure within the EU, primarily in the Germany West Central region. Customer data does not leave the EU.

Recipients and processors

We use the following processors, each engaged under a data processing agreement: • Microsoft Azure — hosting (EU) • Resend — delivery of contact-form messages • OpenRouter — access to the AI models used for content review Non-public customer content is not used to train AI models.

International transfers

Processing takes place within the EU. Where a processor could involve a transfer outside the EU, we rely on appropriate safeguards such as the EU Standard Contractual Clauses.

Retention

We keep contact-request data only as long as necessary to handle your enquiry and any resulting business relationship, and in line with statutory retention obligations. Audit records within the product are retained in line with applicable requirements, including the ten-year retention required by BaFin.

Your rights

Under the GDPR you have the right to access, rectification, erasure, restriction of processing, data portability, and to object to processing. Where processing is based on consent, you may withdraw it at any time with effect for the future. To exercise these rights, contact hello@compylot.ai.

Right to complain

You have the right to lodge a complaint with a data protection supervisory authority. For our establishment this is the Data State Inspectorate of Latvia (Datu valsts inspekcija); you may also contact the supervisory authority in your country of residence.

Contact

For any privacy-related question or to exercise your rights, email hello@compylot.ai.

Last updated: July 2026.