Privacy Policy
Last updated: October 23, 2026
This Privacy Policy explains how Logitly AI ("we", "us", or "our") collects and processes personal data, why we do so, and the rights you have.
It is designed to meet the requirements of the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and the UK GDPR. The rights in Sections 10 and 11 apply to individuals in the EU/EEA and the UK. Individuals elsewhere may also contact us, and we will handle reasonable requests where we can.
For copyright matters, see our DMCA & Content Removal Policy.
1. About Us
Logitly AI provides AI data services. We build AI-driven agents that may visit publicly accessible web pages while performing tasks, and publish datasets and benchmarks.
We do not redistribute the content our agents read, and we do not reproduce, republish, or host original content from the websites we visit. The original content stays on its source website, which we do not operate or control.
2. Who Is Responsible for Your Data
The controller of your personal data is: Logitly AI Limited, Hong Kong SAR
3. What Data We Process
3.1 Website Visitors
Our website is a static site. It has no user accounts, logins, or forms.
- Server logs: When you visit our website, our hosting provider, Cloudflare, automatically records technical data, including your IP address, browser type, the pages you requested, the referring page, and the date and time of the request.
- Email: If you email us, we process your name, email address, and the contents of your message.
- Cookies and third-party services: We do not use cookies, analytics, tracking technologies, or third-party scripts or fonts.
3.2 People Whose Personal Data Appears in Public Web Content
Information being public does not exempt it from GDPR. When public content contains personal data, GDPR applies, and this Privacy Policy explains what we do with it and what rights you have.
This data may appear in:
- Web content read by our agents: publicly available content that our AI agents read while performing tasks.
- Datasets and benchmarks: data we create from the content our agents read, after filtering (see Section 6).
- Agent traces: Our agent traces are simulated: the "user" is a fictional persona, not a real person. However, when an agent visits real public web pages during a task, the trace may include content from those pages, which can occasionally contain personal data.
Our AI agents may visit publicly accessible web pages while performing tasks, and we use the results of this work to build, test, and improve datasets, benchmarks, and AI agents. The content of those pages may sometimes include personal data, such as the name of a person mentioned in an article, or the author of a research paper or source code.
We do not seek out personal data. We do not collect it for its own sake, and we do not use it to identify, profile, or contact individual people.
4. What We Do Not Do
- We do not buy, sell, rent, or broker personal data. Personal data is not our product.
- We do not run proxies, API routers, or relay services. We do not intercept, log, or resell anyone's conversations with AI services.
- Our agent traces are simulated. They are generated by our AI acting as fictional personas, not recorded from real people's activity.
- We do not build profiles of individual people.
- We do not make decisions about individuals based solely on automated processing, including profiling, that produce legal or similarly significant effects (Article 22 GDPR).
5. Why We Process Data and Our Legal Basis
| Data | Purpose | Legal Basis |
|---|---|---|
| Server logs | Operating, securing, and maintaining our website | Legitimate interests (Article 6(1)(f)) |
| Emails you send us | Responding to your message and handling requests | Legitimate interests (Article 6(1)(f)); where you request a service, steps prior to a contract (Article 6(1)(b)) |
| Personal data in public web content | Building, testing, and improving datasets, benchmarks, and AI agents | Legitimate interests (Article 6(1)(f)) |
| Any of the above, where required | Complying with legal obligations | Legal obligation (Article 6(1)(c)) |
Legitimate interests. Our legitimate interest is developing datasets, benchmarks, and AI agents for research and commercial purposes. We consider this interest balanced against your rights because:
- the data was already publicly available;
- we do not use it to identify, profile, or contact individuals;
- we filter personal data before release (Section 6); and
- you can object at any time (Section 10).
Special categories of data. We do not intend to process special categories of personal data (Article 9 GDPR), such as health information, religious beliefs, or political opinions. We work to exclude such data, and we delete or rewrite it when we identify it.
6. How We Reduce Privacy Risk
Personal data. Before we release or deliver a dataset, benchmark, or agent trace, we run filtering tools we built ourselves that detect personal data and either remove it or rewrite it. We also work to exclude sensitive data, such as health information, religious beliefs, or political opinions.
Authorship information. Open content often carries authorship: a research paper names its authors, and source code identifies its authors in package metadata and commit history. We keep this information as it appears and do not rewrite names or email addresses. Removing attribution would introduce bias into AI, which would lose the ability to recognize and credit the people behind research and software.
No filtering is perfect. A dataset may still occasionally contain personal data that appeared in the original public content. If you find your personal data in one of our datasets, email us at the address in Section 14 and we will remove it from future releases (see Section 11). This applies to authorship information as well: we keep it by default, and we will remove it on request.
7. Who We Share Data With
- Service providers: our hosting provider, Cloudflare, and our cloud storage provider, Akamai. They process data only on our instructions.
- Business customers: organizations that receive our datasets or benchmarks after filtering. When we provide datasets to business customers, our contracts require them to use the data only for AI research and development, not to identify or contact individuals, and to delete data when we ask them to.
- The public: datasets and benchmarks we release publicly, after filtering (see our About page for where we publish).
- Authorities and advisers: courts, regulators, law enforcement, or professional advisers, where required by law or needed to establish, exercise, or defend legal claims.
8. International Transfers
We operate from Hong Kong SAR. Our data is stored with Akamai in Singapore, and our providers, Cloudflare and Akamai, may process personal data outside the EU/EEA and the UK. Where that happens, we rely on an adequacy decision or on Standard Contractual Clauses (with the UK Addendum where applicable). You can ask us for a copy of the relevant safeguards.
9. How Long We Keep Data
| Data | Retention Period |
|---|---|
| Server logs | 90 days |
| Emails and request records | 90 days |
| Unfiltered content read by agents | 7 days |
| Processed datasets and benchmarks | As long as the dataset is maintained |
When the retention period ends, we delete the data or rewrite it so it no longer identifies anyone. If you ask us to erase your data, we will do so sooner, as described in Section 11.
10. Your Rights
If you are in the EU/EEA or the UK, you have the right to:
- Access: obtain confirmation of whether we process your personal data, and a copy of it (Article 15).
- Rectification: have inaccurate personal data corrected (Article 16).
- Erasure: have your personal data deleted in certain circumstances (Article 17).
- Restriction: ask us to restrict processing in certain circumstances (Article 18).
- Portability: receive your data in a structured, machine-readable format, where processing is based on consent or contract (Article 20).
- Objection: object to processing based on legitimate interests (Article 21). If you object, we will stop processing your data unless we have compelling legitimate grounds that override your interests, rights, and freedoms, or the processing is needed for legal claims.
- Withdraw consent: where processing is based on consent, withdraw it at any time. This does not affect processing carried out before you withdrew it.
11. How to Make a Request
To exercise any of your rights, email us at the address in Section 14 and include:
- Your full name and contact email
- The right you want to exercise
- Where your personal data appears, such as the web page URL or the name of the dataset or benchmark
We may ask for more information to confirm your identity. We will respond within one month of receiving your request. For complex requests, we may take up to two more months, and we will tell you if we need the extra time. Requests are free of charge.
If we accept a request to erase your data or to stop using it, we will delete it from our data and remove it from future releases. We cannot recall copies of earlier public releases that others have already downloaded.
12. Complaints to a Supervisory Authority
You have the right to lodge a complaint with a supervisory authority. In particular, you can do so in the EU/EEA member state where you live, where you work, or where the alleged infringement took place.
- EU/EEA: a list of national authorities is available at https://www.edpb.europa.eu/about-edpb/about-edpb/members_en
- UK: Information Commissioner's Office, https://ico.org.uk
We encourage you to contact us first so we can try to resolve your concern.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top shows when it was last changed. We will highlight significant changes on this page.
14. Contact
For questions about this Privacy Policy, to exercise your rights, or to request removal of your personal data, email admin@logitly.ai.