Last updated: 29 July 2026
This policy explains how humanicOS handles personal data — both on this website and inside the humanicOS platform used in pilots. We aim to describe what actually happens, including where servers physically are, rather than what sounds best.
For this website humanicOS acts as the data controller. The operating legal entity and its registration details are provided on request and are set out in the pilot agreement before any customer data is processed.
For the platform, when a customer runs a pilot, that customer is the controller of their employees' data and humanicOS acts as a processor on their documented instructions. A Data Processing Agreement is signed as part of the pilot.
Privacy contact: the contact form on this site (reaches us directly), or [email protected].
The marketing site does not write form submissions to disk on the public server — they are forwarded to the recipients listed below.
To answer your enquiry and take steps before entering a contract (GDPR Art. 6(1)(b)); our legitimate interest in running and protecting the site (Art. 6(1)(f)); and, for platform data, the instructions of the customer acting as controller (Art. 28).
| Recipient | Purpose |
|---|---|
| Email provider | delivering your enquiry to our inbox |
| Telegram Messenger | an internal notification with the content of your enquiry, so we answer quickly |
| Hosting provider | serving this site and the platform |
| Cloudflare | DNS, TLS and abuse protection for the platform domains |
| Anthropic, OpenAI | AI features inside the platform (course generation, assistant). Used only for pilot content, under their business terms with no training on submitted data |
We share the minimum needed for each purpose. A list of sub-processors for a specific deployment is provided with the DPA.
Being straight about this: our current servers are in North America — this website is hosted in Canada and the platform used for demos and early pilots runs in the United States. Personal data submitted today is therefore transferred outside the EEA.
Such transfers rely on the appropriate safeguards under GDPR Chapter V, including Standard Contractual Clauses with our providers. For customers who require it, an EU-hosted deployment is available and is agreed as part of the pilot — in that case the data stays in the location we agree in writing.
Enquiries are kept only as long as needed to handle your request and any resulting business relationship, then deleted. Platform data is kept for the term of the pilot or subscription and deleted or returned afterwards, per the agreement. You can ask us to delete your enquiry sooner at any time.
Under the GDPR you may request access, rectification, erasure, restriction, portability, and object to processing. Write to us and we will respond within the statutory period. You also have the right to lodge a complaint with your local data protection supervisory authority. If your data sits inside a customer's platform, we will refer your request to that customer as the controller and assist them in answering it.
This marketing site sets no cookies and loads no third-party scripts, fonts or trackers — all assets are served from our own domain, so your visit is not shared with analytics or font providers. The platform (after sign-in) uses strictly necessary cookies and local storage for your session and language preference; there is no advertising or cross-site tracking anywhere.
Everything is served over HTTPS. Platform accounts support two-factor authentication, and administrator roles require a hardware security key (FIDO2/WebAuthn); the model and certification level of the key are verified against the FIDO Metadata Service. Security-relevant events — sign-in factors, key enrolment, policy changes and administrative resets — are recorded in an audit log with IP and device. Secrets are stored encrypted. No system is perfect; if you believe you have found a vulnerability, please tell us through the contact form and we will respond.
We may update this policy as the product and infrastructure change. The date at the top will change with it. Material changes affecting pilot customers are communicated directly.