In short: we collect the data we need to run our website, sell and deliver our AI infrastructure, and support the businesses that subscribe to it. When our AI agents handle your customers' calls, messages and records, we are doing that on behalf of our client — they decide what happens to that data, and we act on their instructions. We do not sell personal data, and we do not use client data to train foundation models for anyone else.
01Who we are
Artificial Ignorance is a trading name of Artificial Ignorance Ltd, a company registered in England and Wales under company number 16414035, with its registered office at c/o Growth Accountants Ltd, Merlin House, Brunel Road, Reading RG7 4AB, United Kingdom.
We build and operate AI infrastructure for businesses: a knowledge layer we call the Brain, AI voice agents, CRM and workflow automation, and a team of AI agents — Carl, Mike, Penny, Sherlock, Rosa and Eva.
We are the controller of the personal data described in this policy, except where clause 2 says we act as a processor. We are not required to appoint a Data Protection Officer, and have not appointed one. For any data protection question, request or complaint, contact supportdesk@artificialignorance.io.
02Controller or processor?
This distinction determines which parts of this policy apply to you. There are two situations.
| Situation | Our role | What it means |
|---|---|---|
| Our own dataWebsite visitors, prospects, client contacts, billing, recruitment, our own marketing. | Controller | We decide why and how the data is used. This policy governs it in full. |
| Client dataPersonal data inside a client's Brain, CRM, call recordings, transcripts, leads and conversations. | Processor | Our client is the controller. We only act on their documented instructions. Their own privacy notice governs that data — see clause 20. |
Where we act as processor, we do so under our Data Processing Terms, which form part of our Terms & Conditions and are available on request.
03Scope of this policy
This policy applies to our website at artificialignorance.io and any subdomain, to our booking and enquiry forms, to our sales and marketing activity, and to the accounts of businesses that subscribe to our platform. It does not replace the privacy notice of any client who uses our platform to serve their own customers.
04Personal data we collect
As controller
- Identity and contact data — name, job title, company name, business email, business telephone number, postal address.
- Enquiry and booking data — the content of forms you submit, demo bookings, calendar availability, notes from discovery calls, and what you tell us about your business needs.
- Account data — login identifiers, authentication data, account settings, roles and permissions.
- Billing data — billing contact, billing address, VAT number, invoices, payment history and subscription status. Card details are handled by our payment processor; we do not store full card numbers.
- Usage and technical data — IP address, approximate location derived from it, device and browser type, operating system, referring URL, pages viewed, time on page, and actions taken in our platform.
- Communications data — emails, chat messages, support tickets, and recordings or notes of calls with us, where we have told you they are recorded.
- Marketing data — your preferences, consents, and engagement with our emails and campaigns.
As processor, on behalf of clients
When we operate the platform for a client, personal data belonging to that client's own contacts may pass through our systems. Depending on the client's configuration, that can include names and contact details, call audio and transcripts, message and chat histories, appointment and CRM records, enquiry details, and any documents the client loads into their Brain. The client decides what is collected. We process it only to run the service for them.
We do not seek special category data — health, biometric, racial or ethnic origin, political opinions, religious beliefs, trade union membership, sex life or sexual orientation — or criminal offence data, and our platform is not designed for it. Clients must not load such data into the platform unless we have agreed it in writing and put appropriate safeguards in place.
05How we collect it
- Directly from you — when you fill in a form, book a demo, email or call us, sign up, or use the platform.
- Automatically — through cookies and similar technologies, and through server logs, when you visit our website or use our platform. See clause 17.
- From your organisation — when a colleague adds you as a user, or gives us your details as a contact.
- From third parties — business directories, public professional networks, event and referral partners, and our integration partners where you have connected an account.
- From our clients — where we act as processor, our client provides or directs the data.
06Why we use it & lawful bases
We only process personal data where we have a lawful basis under UK GDPR Article 6, and, where relevant, EU GDPR.
| Purpose | Data used | Lawful basis |
|---|---|---|
| Responding to your enquiry and arranging a demo | Identity, contact, enquiry | Legitimate interests — responding to a business approach; or steps prior to a contract |
| Providing, configuring and supporting the platform | Account, usage, communications | Performance of a contract |
| Billing, collections and accounting | Billing, identity, contact | Performance of a contract; legal obligation |
| Securing the platform, preventing fraud and abuse | Usage, technical, account | Legitimate interests — protecting our systems, our clients and their end users |
| Improving and developing the Service | Aggregated usage and technical data | Legitimate interests — running a viable, improving product |
| Marketing to businesses and prospects | Identity, contact, marketing | Consent, or legitimate interests where the soft opt-in applies |
| Analytics and understanding website performance | Usage, technical, cookie data | Consent, where required by cookie rules |
| Meeting legal, tax and regulatory obligations | Billing, identity, records | Legal obligation |
| Establishing, exercising or defending legal claims | Any relevant data | Legitimate interests; legal obligation |
| Operating the platform on behalf of a client | Client's end-user data | The client's lawful basis — we act as processor on their instructions |
Where we rely on legitimate interests, we have balanced those interests against your rights and freedoms, and we will provide details of that assessment on request. Where we rely on consent, you may withdraw it at any time without affecting processing carried out before you withdrew it.
07AI processing & the Brain
Our platform uses large language models, retrieval-augmented generation, speech recognition and speech synthesis. In practice that means:
- Documents and records loaded into a client's Brain are converted into a searchable index so agents can retrieve relevant context when responding.
- Conversation content may be sent to AI model providers acting as our sub-processors, so a response can be generated.
- Each client's Brain is logically separated. One client's data is not used to answer another client's queries.
We do not use client data, call recordings, transcripts or Brain content to train foundation models for the benefit of other customers, and we contract with our AI providers on terms intended to prevent them doing so. We may use aggregated and de-identified statistics about platform usage — from which no individual, client or conversation can be identified — to monitor, secure and improve the Service.
AI output can be inaccurate. Where output about you appears to be wrong, tell us or the relevant client and we will correct the underlying record.
08Calls, recordings & transcripts
Our voice agents can answer and place calls on behalf of clients. Where the client has enabled it, calls may be recorded, transcribed and analysed to deliver the service, produce summaries, update CRM records and improve quality.
Where we act as processor, the client is responsible for giving callers the required notice, obtaining consent where consent is required, and honouring objections. Under our Terms, clients must not disable a disclosure that the caller is speaking to an automated system where that disclosure is legally required.
Where we record a call with you as a controller — for example a sales or support call with our own team — we will tell you at the start of the call, and we rely on legitimate interests in maintaining an accurate record, or your consent where required.
09Automated decision-making
As controller, we do not make decisions producing legal or similarly significant effects about you based solely on automated processing.
Our platform can be configured by clients to score, route, prioritise or qualify contacts automatically. Where a client does that, the client is responsible for ensuring a lawful basis and appropriate safeguards, including the right to obtain human intervention, to express a point of view and to contest the decision. Our Terms require clients to keep a human in the loop for significant decisions.
10Who we share data with
We do not sell personal data. We share it only as set out here:
- Service providers and sub-processors — the categories listed in clause 11, all bound by contract to process data only on our instructions.
- Our clients — where you interacted with an AI agent operated for a client, that data belongs to the client.
- Professional advisers — lawyers, accountants, auditors and insurers, where necessary and bound by confidentiality.
- Authorities — regulators, law enforcement and courts, where we are legally required to disclose, or where disclosure is necessary to establish, exercise or defend legal claims.
- Corporate transactions — a buyer or prospective buyer in connection with a merger, acquisition, restructuring or sale of assets, subject to confidentiality; the data continues to be protected by this policy or an equivalent one.
11Sub-processors
We use third parties to deliver the Service. We select them for their security and compliance posture, bind them by written contract, and remain responsible for their processing. The categories are:
| Category | What they do for us |
|---|---|
| Cloud hosting and infrastructure | Host the platform, databases, indexes and backups |
| AI model and inference providers | Generate agent responses, embeddings and summaries |
| Speech recognition and synthesis providers | Convert speech to text and text to speech for voice agents |
| Telephony and messaging carriers | Carry calls, SMS and messaging traffic; supply telephone numbers |
| CRM, automation and scheduling platforms | Store client pipelines, bookings, forms and communications |
| Email delivery and marketing platforms | Send transactional and marketing email |
| Payment processing | Take subscription and usage payments |
| Analytics, logging and error monitoring | Measure performance, detect faults and abuse |
| Support and productivity tooling | Handle tickets, internal collaboration and documentation |
A current list naming our sub-processors is available on request from supportdesk@artificialignorance.io. Clients receive reasonable notice of any intended new sub-processor and may object on reasonable data protection grounds.
12International transfers
Some of our providers are located outside the UK and the European Economic Area, including in the United States. Where personal data is transferred outside the UK or EEA, we ensure an appropriate safeguard is in place, which will be one of:
- an adequacy decision or adequacy regulations covering the destination country;
- the UK International Data Transfer Agreement, or the EU Standard Contractual Clauses together with the UK Addendum;
- certification under the UK Extension to the EU–US Data Privacy Framework, where the recipient participates; or
- another lawful transfer mechanism, supported by a transfer risk assessment and any supplementary technical measures we consider necessary.
Copies of the relevant safeguards are available on request from supportdesk@artificialignorance.io.
13How long we keep data
We keep personal data only as long as we need it for the purpose we collected it for, plus any period we are required to retain it by law.
| Data | Retention |
|---|---|
| Website enquiry and unconverted prospect data | 24 months from last meaningful contact |
| Client account and configuration data | For the life of the subscription, then as below |
| Client data after termination | Available for export for 30 days, then deleted or anonymised within a further 60 days |
| Call recordings and transcripts | As configured by the client; our platform default is 12 months unless the client sets a shorter or longer period |
| Invoices, billing and tax records | 7 years, to meet UK tax and accounting requirements |
| Marketing preferences and suppression lists | Retained indefinitely, so we can honour your opt-out |
| Security, audit and system logs | Up to 12 months |
| Backups | Overwritten on their normal cycle, typically within 90 days |
Where we act as processor, the client sets the retention period and we follow it, subject to our own legal retention obligations.
14How we protect data
We apply technical and organisational measures appropriate to the risk, including:
- encryption of data in transit using TLS, and encryption of data at rest;
- logical separation of each client's environment and knowledge base;
- role-based access control, least-privilege access and multi-factor authentication for administrative accounts;
- access logging, monitoring and alerting;
- vetting and confidentiality obligations for staff and contractors, with data protection training;
- due diligence and written contracts with sub-processors;
- backup, restore and business continuity procedures; and
- a documented incident response process.
No system is perfectly secure. If a personal data breach occurs that is likely to result in a risk to individuals' rights and freedoms, we will notify the ICO within 72 hours of becoming aware where required, notify affected clients without undue delay so they can meet their own obligations, and notify individuals directly where the law requires it.
15Your rights
Subject to conditions and exemptions in the law, you have the right to:
- Be informed about how we use your personal data — this policy.
- Access a copy of the personal data we hold about you.
- Rectification of inaccurate or incomplete data.
- Erasure of your data, where we no longer have a valid reason to keep it.
- Restrict processing in certain circumstances, for example while accuracy is being checked.
- Data portability — receive data you provided, in a structured, commonly used, machine-readable format, where processing is based on consent or contract and is automated.
- Object to processing based on legitimate interests, and to object to direct marketing at any time, which we always honour.
- Not be subject to a decision based solely on automated processing that produces legal or similarly significant effects.
- Withdraw consent at any time, where we rely on consent.
How to exercise them
Email supportdesk@artificialignorance.io. We respond within one month, and may extend by two further months for complex or multiple requests, telling you if we do. We may ask you to verify your identity. Exercising your rights is free, unless a request is manifestly unfounded or excessive, in which case we may charge a reasonable fee or refuse it, explaining why.
If your request concerns data we hold as processor for a client, we will refer you to that client, who is the controller — see clause 20.
16Marketing communications
We send business-to-business marketing about our services where you have consented, or where the soft opt-in applies because you previously enquired about or bought from us and we are marketing similar services.
Every marketing email contains an unsubscribe link. You can also opt out at any time by emailing supportdesk@artificialignorance.io. Opting out of marketing does not stop service and transactional messages about your subscription, billing, security or the platform itself.
17Cookies & tracking
Our website uses cookies and similar technologies. Cookies are small files stored on your device.
| Type | Purpose | Consent |
|---|---|---|
| Strictly necessary | Security, load balancing, session management, remembering your language choice, making forms work | Not required |
| Functional | Remembering preferences and improving how the site behaves for you | Required |
| Analytics and performance | Understanding how visitors find and use the site so we can improve it | Required |
| Marketing and advertising | Measuring campaigns and showing relevant advertising on other platforms | Required |
Some pages embed third-party content, such as our booking and enquiry forms, which may set their own cookies under their own privacy notices.
You can control cookies through your browser settings, including blocking or deleting them. Blocking strictly necessary cookies will break parts of the site. Where consent is required, we obtain it before setting non-essential cookies, and you can change your choice at any time.
18Children
Our website and platform are intended for business use by adults. We do not knowingly collect personal data from anyone under 18. If you believe a child's data has reached us, contact supportdesk@artificialignorance.io and we will delete it.
19Third-party sites
Our website links to third-party sites, including booking pages and partner platforms. We are not responsible for their privacy practices. Read their privacy notices before providing personal data.
20If you are an End User
If you spoke to an AI agent, received a message from one, or filled in a form operated through our platform, the business you were dealing with is the controller of that data, not us. Their privacy notice explains why they hold it, how long for, and how to exercise your rights.
Direct requests to that business first. If you cannot identify it or reach it, contact supportdesk@artificialignorance.io with as much detail as you can — the telephone number you called or were called from, and roughly when — and we will help route your request to the right controller. We cannot act on that data ourselves without the controller's instruction.
21Changes to this policy
We may update this policy as our services, our providers or the law change. The current version is always on this page with its effective date. Where a change materially affects how we use your personal data, we will notify you directly by email or in-platform notice. We recommend reviewing this page periodically.
22Contact & complaints
For any privacy question, request or concern:
- Email — supportdesk@artificialignorance.io
- Telephone — +44 2046 343169
- Post — Data Protection, Artificial Ignorance Ltd, c/o Growth Accountants Ltd, Merlin House, Brunel Road, Reading RG7 4AB, United Kingdom
We would like the chance to resolve any concern first. You also have the right to complain to the UK supervisory authority:
Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline 0303 123 1113 · ico.org.uk/make-a-complaint
If you are in the EEA, you may instead complain to the supervisory authority in your country of residence, place of work or the place of the alleged infringement.
Artificial Ignorance is a trading name of Artificial Ignorance Ltd, registered in England and Wales, company number 16414035. See also our Terms & Conditions.