Privacy Policy

Scope

This policy explains how HereAI collects, uses and shares personal information when you visit this website, contact us, or use our products and services. It applies to this site and to the Mira platform.

Where we handle information on behalf of a customer, that customer decides what we do with it and our agreement with them governs. That situation is covered in its own section below.

Information we collect

Information you give us. When you fill in a form, request a strategy session, subscribe to something, or email us, we collect what you send. That is typically your name, your work email address, your company, your role and whatever you write in the message field.

Information we collect automatically. When you load a page, our hosting provider records standard request data: IP address, browser and device type, referring page, the pages you viewed and the time of the request. We use this to keep the site up, to protect it from abuse and to understand what people read.

Information from our customers. If you interact with a business that uses Mira, that business may send us information about you so we can provide the service on their behalf. We process it under their instructions.

Information from other sources. We may receive business contact details from partners, events and public professional sources, and combine them with what we already hold.

We do not ask for special categories of personal information such as health or biometric data, and we ask that you do not send them to us.

How we use information

We use personal information to:

• provide, operate and improve this site and our products
• respond to your enquiries and set up conversations you have asked for
• send you service messages and, where you have agreed or where the law otherwise allows it, marketing about our products
• understand how the site is used so we can make it better
• keep our systems secure, investigate abuse and prevent fraud
• meet our legal, tax and regulatory obligations, and establish or defend legal claims

Artificial intelligence and model training

Our products use machine learning. We do not use customer data or the content of conversations we process on a customer's behalf to train foundation models for other customers, and we do not sell that data.

Where a customer asks us to tune a model for their own use, the result stays with that customer. Aggregated and de identified statistics that cannot reasonably be linked back to a person or a customer may be used to measure and improve how the service performs.

Legal bases for processing

If you are in the United Kingdom, the European Economic Area or Switzerland, we rely on the following legal bases. Our legitimate interests in running, securing and growing our business, where those interests are not overridden by your rights. Performance of a contract with you or steps taken at your request before entering one. Your consent, where we ask for it, which you may withdraw at any time. Compliance with a legal obligation.

How we share information

We do not sell personal information and we do not share it for cross context behavioural advertising. We disclose it only as follows:

• Service providers. Hosting, email delivery, analytics, customer support and infrastructure vendors who process information on our instructions and under written terms.
• Our customers. Where we process information on a customer's behalf, to that customer.
• Professional advisers. Lawyers, accountants, auditors and insurers, where they need it to advise us.
• Legal and safety. Where we are required by law or valid legal process, or where disclosure is necessary to protect the rights, property or safety of HereAI, our users or the public.
• Corporate transactions. In connection with a merger, acquisition, financing or sale of assets, in which case this policy continues to apply to the information transferred until the acquirer publishes its own.

Data we handle for our customers

When a business uses Mira, that business is the controller of the personal information in its account and we act as its processor. We handle that information under our agreement with them, we do not use it for our own purposes, and we return or delete it at the end of the engagement as that agreement provides.

If you want to access, correct or delete information a business holds about you in our platform, contact that business directly. If you contact us instead we will pass your request to them.

Cookies and analytics

This site uses only what it needs to work and to count visits. We do not run advertising cookies and we do not build advertising profiles.

You can block or delete cookies in your browser settings. Parts of the site may not behave as expected if you do. Where the law requires consent for non essential cookies, we ask for it before setting them.

Retention

We keep personal information for as long as we need it for the purpose we collected it for. In practice that means the life of your relationship with us plus the period we are required to keep records for tax, accounting and legal reasons. Enquiries that do not lead anywhere are cleared out on a routine schedule. Server logs are kept for a short period for security and troubleshooting.

Security

We use technical and organisational measures appropriate to the risk, including encryption in transit, access control on a need to know basis, logging, and vendor review. No system is perfectly secure, and we cannot guarantee the security of information you send us over the internet.

International transfers

We operate internationally, so your information may be processed in a country other than your own, including the United States. Where we transfer personal information out of the United Kingdom or the European Economic Area, we rely on an approved transfer mechanism such as the European Commission's standard contractual clauses, together with additional safeguards where they are needed.

Your rights

Depending on where you live, you may have the right to access the personal information we hold about you, to have it corrected or deleted, to object to or restrict how we use it, to receive it in a portable format, and to withdraw consent you previously gave.

If you are in California, you may also request the categories and specific pieces of personal information we have collected, the categories of sources, the purpose, and the categories of third parties we disclosed it to. You have the right to delete it, to correct it, and to limit the use of sensitive personal information. We do not sell personal information or share it for cross context behavioural advertising, so there is nothing for you to opt out of on that front. We will not discriminate against you for exercising any of these rights.

To make a request, write to privacy@hereai.com. We will verify your identity before we act, and we will respond within the time the law allows. You may use an authorised agent. If you are unhappy with our response you may complain to your local data protection authority.

Marketing choices

Every marketing email we send has an unsubscribe link, and it works. Unsubscribing stops the marketing, not the service messages you need to receive about something you are actually using.

Children

This site and our products are built for businesses. They are not directed at children under 16 and we do not knowingly collect information from them. If you believe a child has given us personal information, write to privacy@hereai.com and we will delete it.

Other sites

The site links to places we do not run. We are not responsible for their content or their privacy practices, and this policy does not cover them.

Changes to this policy

We update this policy when our practices change. The effective date at the top always tells you which version you are reading. If a change is significant we will give notice on the site or by email before it takes effect.

Contact us

For anything to do with privacy, write to privacy@hereai.com, or reach us through the contact page. Postal enquiries can be addressed to HereAI at our registered office.