Privacy policy
How the Society for AI Security collects and uses personal data.
This policy describes what the Society for AI Security collects when you use this website, why, and the rights you have. The data controller is the Society for AI Security, Hyderabad, Telangana, India. Contact: contact@societyforaisecurity.com.
What we collect
- Membership details you give us on the signup form: name, organisation, email address, role, interests and a password, which is stored only as a salted hash.
- An email address if you subscribe from the footer.
- Correction and removal requests: the details you enter on the Report a correction form, including your email address so that we can reply.
- Server logs kept by our hosting provider, Google Cloud (region asia-south1, Mumbai): IP address, page requested, time and browser type, used for security and to keep the site running.
- Cookies: a session cookie when you sign in, and one cookie that records your choice on the cookie notice. There is no advertising, no analytics and no tracking of what you read.
What we do not collect
We do not track the pages you view, we do not build profiles, we do not sell or share personal data with advertisers, and we do not use your data to train AI models.
Why we process it
To run your membership and let you sign in, to send you updates you asked for, to answer your requests, and to keep the site secure. The legal bases, where the GDPR or UK GDPR applies, are consent (subscriptions and the cookie choice), performance of our agreement with you (membership), and our legitimate interest in running a secure service.
Personal data in the public record
The registers describe real incidents, laws, standards and tools, and some records name individuals and organisations. That information comes from published sources, which are linked on each record, and is processed in the public interest as a matter of public record. Each record shows its evidence status. If a record about you is inaccurate or you believe it should not be published, use the Report a correction form at /report; we review every request and act where the law or our editorial standards require it.
Your rights
You may ask for access to, correction of, export of, or deletion of the personal data we hold about you, and you may withdraw consent at any time, by writing to contact@societyforaisecurity.com. Under the Digital Personal Data Protection Act, 2023 you may also raise a grievance with our grievance officer at the same address. If you are in the EU or UK you may complain to your supervisory authority.
Retention
Membership and subscription data are kept while your membership or subscription is active and deleted within 30 days of a deletion request. Correction requests are kept for two years so that we can show how a record was handled. Hosting logs are kept by Google Cloud for 30 days.
Security
Data is encrypted in transit and at rest on Google Cloud infrastructure in India. Passwords are hashed. Access to member data is limited to administrators who need it.
Changes
We will post any change to this policy on this page with the date it took effect.