Privacy Notice
Welcome. We are Gigatokens, a Behavox company ("Gigatokens", "we", "us" or "our"). This Privacy Notice explains how Gigatokens and its affiliates collect, use, disclose and otherwise process personal data (as defined below) in connection with our website https://gigatokens.ai (the "Site") and the related content, services, products and other functionality offered on or through our services (collectively, the "Services"). This Privacy Notice is not a contract and does not create any legal obligations.
1. Key privacy commitments
- No AI training on your data. We do not use your prompts, training data or API inputs to train or improve our AI models without your explicit opt-in.
- You control your data. You may access, download or delete your data at any time through the Services or by contacting us.
- Zero data retention by default. We do not log or store prompt or generation data for any model without explicit user opt-in.
- UK sovereign processing. Prompts and completions submitted to our inference Services are processed in the United Kingdom.
In certain situations Gigatokens may act as a service provider (processor) for other businesses. This Privacy Notice does not apply to such processing; we recommend that you read the privacy notice of the respective customer if their processing concerns your personal data.
2. Changes to this Privacy Notice
We may modify this Privacy Notice from time to time, in which case we will update the "Last updated" date at the top of this Privacy Notice. If we make material changes to the way in which we use or disclose information we collect, we will use reasonable efforts to notify you (such as by emailing you at the last email address you provided us, by posting notice of such changes on the Services, or by other means consistent with applicable law) and will take additional steps as required by applicable law. If you do not agree to any updates to this Privacy Notice, please do not continue using or accessing the Services.
3. What is personal data?
When we use the term "personal data" in this Privacy Notice, we mean any data or information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular natural person or household.
4. Collection and use of your information
When you use or access the Services, we collect certain categories of information about you from a variety of sources.
4.1 Information you provide to us
Some features of the Services may require you to directly provide us with certain information about yourself. You may elect not to provide this information, but doing so may prevent you from using or accessing these features. Information that you directly submit through our Services includes:
- Contact information. Basic contact details, such as name, company, phone number and email address — for example when you submit our contact-sales form. We use this information where necessary to perform our contract with you to provide the Services, to respond to your enquiry, and to communicate with you (including, with your consent where required, to tell you about products or services that may be of interest to you).
- Account information. Account information, such as name, username, email address and password. We use this information where necessary to perform our contract with you to provide the Services and to maintain and secure your account with us. If you choose to register an account, you are responsible for keeping your account credentials safe. If you believe your account has been compromised, please contact us immediately at the address in the Contact us section below.
- Payment information. Payment information, such as credit or debit card information and billing address, which we collect using a third-party payment processor. We use this information where necessary to perform our contract with you to process your payment and provide the Services.
- Applicant information. Applicant details, such as information included in your CV, references and job history. We use applicant details in our legitimate interests to process your application for employment and to evaluate your candidacy.
- User content. Your input and output, prompts and other content that you input, upload or submit to the Services, and the output that you create. Consistent with our zero-retention commitment, we do not store prompt or generation data unless you explicitly opt in (for example by enabling logging). Where you do opt in, we use the User Content to provide you with the Service.
- Other information you provide. Any other information you choose to include in communications with us, for example when sending a message through the Services.
4.2 Information collected from other sources
We may obtain information about you from outside sources, including:
- Authentication services you connect to our Service. Some parts of our Services may allow you to log in through a third-party authentication service (for example, an enterprise single sign-on provider). These services will authenticate your identity and provide you the option to share certain personal data with us, such as your name and email address. We use this information to operate, maintain and provide to you the features and functionality of the Service.
- Your employer or company. If you interact with our Services through your employer or company, we may receive your information from your employer or company, including another representative of your employer or company.
- Service providers. Our service providers that perform services solely on our behalf, such as payment processors and communication providers, collect personal data and may share some or all of this information with us.
- Behavox group companies. As a Behavox company, we may receive information from other companies in the Behavox group, particularly when we collaborate in providing the Services.
- Other sources. We may also collect personal data from publicly available sources, or through transactions such as mergers and acquisitions.
4.3 Information collected automatically
When you access the Site we and our service providers automatically collect certain technical information, such as your IP address, browser type, device identifiers, the pages you visit and the time of your visit, through server logs and similar technologies. We use this information in our legitimate interests to operate, secure and improve the Site — including to detect and prevent abuse, and to enforce rate limits on our API and contact form.
Through the provision of our Services we may also process de-identified information that cannot reasonably be used to infer information about, or otherwise be linked to, a particular individual or household. We will maintain and use such information in de-identified form and will not attempt to re-identify it, except where necessary to determine whether our de-identification process satisfies applicable law.
5. Cookies and other tracking technologies
Our Site uses only the cookies and similar technologies described in our Cookie notice. Most browsers accept cookies automatically, but you may be able to control the way in which your devices permit the use of tracking technologies. If you so choose, you may block or delete our cookies from your browser; however, blocking or deleting cookies may cause some of the Services to work incorrectly. Your browser settings may allow you to transmit a "do not track" signal; like many websites, our Site is not designed to respond to such signals.
6. Disclosure of your information
We may share, transmit, disclose, grant access to, make available and provide personal data with and to third parties as follows:
- Behavox group companies. We may share personal data with our parent company, Behavox, and other companies owned by or under common ownership with Behavox, particularly when we collaborate in providing the Services.
- Your employer or company. If you interact with our Services through your employer or company, we may disclose your information to your employer or company.
- Customer service and communication providers. We share personal data with third parties who assist us in providing our customer services and facilitating our communications with individuals who submit enquiries.
- Other service providers. We engage other third-party service providers that perform business or operational services for us or on our behalf, such as website hosting, cloud and GPU infrastructure provisioning, IT services, payment processing and administrative services.
- Business transaction or reorganisation. We may take part in or be involved with a corporate business transaction, such as a merger, acquisition, joint venture, or financing or sale of company assets. We may disclose personal data to a third party during negotiation of, in connection with, or as an asset in such a transaction. Personal data may also be disclosed in the event of insolvency, bankruptcy or receivership.
- Legal obligations and rights. We may disclose personal data to third parties, such as legal advisers and law enforcement: in connection with the establishment, exercise or defence of legal claims; to comply with laws or to respond to lawful requests and legal process; to protect our rights and property and the rights and property of others, including to enforce our agreements and policies; to detect, suppress or prevent fraud; to protect the health and safety of us and others; or as otherwise required by applicable law.
- With your consent. We may disclose personal data about an individual to certain other third parties or publicly with their consent or direction.
We do not sell your personal data, and we do not share it with advertising networks for interest-based advertising.
7. Control over your information
- Email communication preferences. From time to time we may send you emails regarding updates to our Service, notices about our organisation, or information about products or services that we think may be of interest to you. If you wish to unsubscribe from such emails, click the "unsubscribe" link provided at the bottom of the email. Note that you cannot unsubscribe from certain service-related communications (e.g. account verification, confirmations of transactions, technical or legal notices).
- Modifying or deleting your information. If you have any questions about reviewing, modifying or deleting your information, you can contact us directly using the information provided in the Contact us section below. We will review your request and may require you to provide additional information to identify yourself.
8. Children's personal data
Our Services are not directed to, and we do not intend to, or knowingly, collect or solicit personal data from children under the age of 16. If an individual is under the age of 16, they should not use our Services or otherwise provide us with any personal data. If we learn that any personal data we have collected has been provided by a child under the age of 16, we will promptly delete that personal data.
9. Data security and retention
We implement appropriate technical and organisational measures to protect your information, including encryption in transit and at rest. Despite our reasonable efforts, no security measures are impenetrable, and we cannot guarantee "perfect security". Any information you send to us electronically may not be secure while in transit; we recommend that you do not use unsecure channels to send us sensitive or confidential information.
We retain your information for as long as is reasonably necessary for the purposes specified in this Privacy Notice. When determining the length of time to retain your information, we consider various criteria, including whether we need the information to continue to provide you the Services, resolve a dispute, enforce our contractual agreements, prevent harm, promote safety, security and integrity, or protect ourselves, including our rights, property or products. Prompt and generation data is not retained by default (see Section 1).
10. Links to third-party websites and services
Our Services may include links to third-party websites, plug-ins and applications that we do not own or operate. We are not responsible for the practices employed by any websites or services linked to or from the Services, including the information or content contained within them. Our Privacy Notice does not apply to your browsing or other interactions on any other website or service. If you are using a third-party website or service, you do so at your own risk.
11. Data transfers
Inference processing for our Services takes place in the United Kingdom. Other personal data that we collect (for example contact and account information) may be transferred to, stored at, processed in or accessed from countries outside the jurisdiction in which you are based, including countries in which Behavox group companies or our service providers are located, such as the United States and Canada.
Where we transfer personal data originating in the United Kingdom or the European Economic Area to a country that has not been determined to provide an adequate level of protection, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or Addendum, or the European Commission's Standard Contractual Clauses. Please contact us at the address below should you wish to enquire further about such transfer mechanisms.
12. Your rights and choices
Depending on where you live, you may have some or all of the rights listed below in relation to personal data that we have collected about you. These rights are not absolute, and in certain cases we may decline your request as permitted by law.
- Right to access / know. You may have a right to request access to personal data that we hold about you, or to request information about our collection, use and disclosure of your personal data.
- Right to delete. You may have a right to request that we delete personal data we maintain about you.
- Right to correct. You may have a right to request that we correct inaccurate personal data we maintain about you.
- Right of portability. You may have the right to receive a copy of the personal data we hold about you and to request that we transfer it to a third party.
- Restriction of processing. You may have the right to ask us to stop, suspend or restrict our processing of personal data.
- Objection. You may have the right to object to our processing of personal data.
- Withdrawal of consent. Where we rely on consent to process your personal data, you may have the right to withdraw this consent at any time by contacting us. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal, and where you withdraw your consent we may not be able to deliver the expected service to you.
You may exercise any of these rights by contacting us using the information provided below. We will not discriminate against you for exercising any of these rights. We may need to collect information from you to verify your identity before providing a substantive response to the request. You may designate, in writing or through a power of attorney document, an authorised agent to make requests on your behalf. If we deny your request, you may appeal our decision by contacting us using the information provided below.
13. Complaints
If you have complaints about how we process your personal data, please contact us at the address below and we will respond to your request as soon as possible. If you think we have infringed data protection laws, you can lodge a complaint with the UK Information Commissioner's Office (ico.org.uk), with the data protection supervisory authority in the country in which you live or work, or with any other relevant data protection authority.
14. Contact us
Should you have any questions about our privacy practices or this Privacy Notice, please email us at gigatokens@behavox.com, or write to us at Gigatokens, a Behavox company, London, United Kingdom.