Legal — Privacy, Terms & Security

Privacy Policy

Effective: 25 March 2026

DigitalZoo.ai (a trading name of AI Bizz Apps Ltd) respects your privacy. This policy explains what data we collect, why we collect it, and how we protect it.

1. Data we collect

Account information: Name, email address, organisation name, and billing details when you create an account or subscribe to our services.
Usage data: How you interact with our platforms, including features used, pages visited, and session duration. This helps us improve our products.
Platform data: Data you input into Corvus Security IQ or GRCxAI during normal use, such as vendor names, risk assessments, and compliance records.
Communications: Emails, support requests, and feedback you send us.

2. How we use your data

To provide, maintain, and improve our platforms and services.
To process payments and manage your subscription.
To communicate with you about your account, updates, and support requests.
To detect, prevent, and address technical issues and security threats.
To comply with legal obligations.

3. What we never do

We never sell your personal data to third parties.
We never use your platform data to train AI models for other customers.
We never share your data with advertisers.
We never access your platform data unless required for support you've requested, or to comply with law.

4. Data storage and security

Your data is stored on secure, encrypted infrastructure. We use industry-standard encryption in transit (TLS 1.3) and at rest (AES-256). Access to production data is restricted to authorised personnel only, with audit logging enabled.

5. Data retention

We retain your data for as long as your account is active. When you cancel your subscription, we delete your platform data within 90 days. Account information may be retained longer where required by law (e.g., financial records).

6. Your rights

Under UK GDPR and the Data Protection Act 2018, you have the right to:

Access the personal data we hold about you.
Request correction of inaccurate data.
Request deletion of your data (subject to legal obligations).
Object to or restrict processing of your data.
Request data portability.

To exercise any of these rights, contact us at [email protected].

7. Cookies

We use essential cookies to keep you signed in and maintain session state. We do not use tracking cookies or third-party advertising cookies.

8. Changes to this policy

We may update this policy from time to time. Material changes will be communicated via email or in-platform notification at least 30 days before they take effect.

Terms of Service

Effective: 25 March 2026

These terms govern your use of DigitalZoo.ai platforms and services, operated by AI Bizz Apps Ltd.

1. Acceptance

By creating an account or using our platforms, you agree to these terms. If you're using our services on behalf of an organisation, you represent that you have authority to bind that organisation to these terms.

2. Services

DigitalZoo.ai provides AI-powered security intelligence and governance platforms, including Corvus Security IQ and GRCxAI. Services are provided on a subscription basis as described on our pricing page.

3. Your responsibilities

Maintain the security of your account credentials.
Use the platforms in compliance with applicable laws and regulations.
Not attempt to reverse-engineer, decompile, or extract source code from our platforms.
Not use the platforms to conduct any illegal activity or to harm others.
Not exceed the usage limits of your subscription plan.

4. Intellectual property

DigitalZoo.ai retains all intellectual property rights in our platforms, methodologies, and AI systems. Your data remains yours — we claim no ownership over data you input into our platforms.

5. AI-generated intelligence

Our platforms use AI to generate intelligence reports, risk assessments, and analytical outputs. While we strive for accuracy and rigour, AI-generated content should be used as one input to your decision-making process, not as a sole basis for critical decisions. We recommend human review for high-stakes actions.

6. Availability

We target 99.9% uptime for our platforms. Scheduled maintenance will be communicated in advance. We are not liable for downtime caused by factors outside our control, including third-party service outages.

7. Payment and billing

Subscriptions are billed monthly or annually as selected at signup.
Prices are as listed on our pricing page at the time of subscription.
We will provide at least 30 days notice of price changes.
You may cancel your subscription at any time. Cancellation takes effect at the end of the current billing period.

8. Limitation of liability

To the maximum extent permitted by law, DigitalZoo.ai's total liability to you for any claims arising from your use of our services shall not exceed the total fees paid by you in the 12 months preceding the claim.

9. Termination

Either party may terminate this agreement with 30 days written notice. We may suspend or terminate your account immediately if you breach these terms. Upon termination, your access will be revoked and data handled per our privacy policy.

10. Governing law

These terms are governed by the laws of England and Wales. Disputes shall be subject to the exclusive jurisdiction of the courts of England and Wales.

11. Changes to terms

We may update these terms from time to time. Material changes will be communicated at least 30 days before they take effect. Continued use after changes constitutes acceptance.

Security

Last updated: 25 March 2026

Security isn't just what we sell — it's how we operate. Here's how we protect your data and our platforms.

Infrastructure

Encryption in transit: All data is transmitted over TLS 1.3. We enforce HTTPS across all endpoints with HSTS enabled.
Encryption at rest: All stored data is encrypted using AES-256.
Hosting: Our infrastructure runs on enterprise-grade cloud providers with SOC 2 and ISO 27001 certifications.
Network security: DDoS protection, Web Application Firewall (WAF), and rate limiting are enabled across all public-facing services.

Application security

Authentication: Multi-factor authentication (MFA) available for all accounts. Password policies enforce minimum complexity requirements.
Authorisation: Role-based access control (RBAC) ensures users can only access data and features appropriate to their role.
Session management: Sessions are time-limited with automatic expiry. Tokens are rotated regularly.
Input validation: All user inputs are validated and sanitised to prevent injection attacks.

Data isolation

Tenant isolation: Customer data is logically isolated. No customer can access another customer's data.
AI isolation: Your platform data is never used to train models for other customers. Each organisation's intelligence is generated independently.

Operational security

Access controls: Production access is restricted to authorised personnel with just-in-time access provisioning.
Audit logging: All access to production systems and customer data is logged and monitored.
Incident response: We maintain a documented incident response plan with defined escalation procedures.
Backups: Automated daily backups with tested recovery procedures.

Vulnerability management

Dependencies are regularly scanned for known vulnerabilities.
Security patches are applied within 24 hours for critical vulnerabilities.
We welcome responsible security disclosures at [email protected].

Compliance

DigitalZoo.ai operates in compliance with:

UK GDPR and the Data Protection Act 2018
The Privacy and Electronic Communications Regulations (PECR)

We are working towards ISO 27001 and Cyber Essentials Plus certification.

Transparent. Clear. Fair.