{"id":1453,"date":"2026-05-14T12:22:24","date_gmt":"2026-05-14T06:52:24","guid":{"rendered":"https:\/\/staging.boutiqueq.com\/?page_id=1453"},"modified":"2026-08-17T17:29:00","modified_gmt":"2026-08-17T11:59:00","slug":"ai-ethics-responsible-use-policy","status":"publish","type":"page","link":"https:\/\/staging.boutiqueq.com\/?page_id=1453","title":{"rendered":"GDPR Compliance"},"content":{"rendered":"<p><b>PerplexAI.net<\/b><b><br \/>\n<\/b><b>Effective Date:<\/b><span style=\"font-weight: 400;\"> 14 August 2026<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>Last Updated:<\/b><span style=\"font-weight: 400;\"> 14 August 2026<\/span><\/p>\n<p><b>PerplexAI.net is an AI-services platform operated by Webnatics LTD.<\/b><span style=\"font-weight: 400;\"> PerplexAI operates from Cyprus and is committed to processing personal data in accordance with the General Data Protection Regulation (EU) 2016\/679 (\u201cGDPR\u201d) and applicable Cyprus data-protection requirements.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">This page summarises our GDPR approach. Our Privacy Policy provides more detailed information about the personal data we collect, use, retain, share and protect.<\/span><\/p>\n<h2><b>1. Who GDPR Protections Apply To<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">GDPR protections apply to eligible individuals whose personal data is processed by PerplexAI, including website visitors, account holders, customers, business contacts, voice owners and others whose information may be submitted through the Services. <\/span><span style=\"font-weight: 400;\">Personal data may include account details, contact information, IP and device information, scripts, prompts, uploaded audio, voice recordings, voice samples, generated audio, custom-voice data, usage information, diagnostic data, transaction records and support communications.<\/span><\/p>\n<h2><b>2. Our Role: Controller and Processor<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">PerplexAI acts as a <\/span><b>data controller<\/b><span style=\"font-weight: 400;\"> when we decide the purposes and means of processing personal data for our own operations, such as website administration, account management, billing, security, fraud prevention, support, analytics, legal compliance and communications.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Where applicable, PerplexAI may act as a <\/span><b>data processor<\/b><span style=\"font-weight: 400;\"> when a business customer asks us to process scripts, audio, voice data or other personal data on its behalf and under its documented instructions. Enterprise and business customers may require a separate Data Processing Agreement (DPA) that defines the parties\u2019 respective obligations.<\/span><\/p>\n<h2><b>3. GDPR Principles<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">We aim to process personal data in accordance with these GDPR principles:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Lawfulness, fairness and transparency:<\/b><span style=\"font-weight: 400;\"> we use data on a valid legal basis and explain our practices clearly.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Purpose limitation:<\/b><span style=\"font-weight: 400;\"> we use data for specified and legitimate purposes.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Data minimisation:<\/b><span style=\"font-weight: 400;\"> we collect and use only the data reasonably necessary for the relevant purpose.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Accuracy:<\/b><span style=\"font-weight: 400;\"> we take reasonable steps to keep data accurate and allow correction where appropriate.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Storage limitation:<\/b><span style=\"font-weight: 400;\"> we retain data only for as long as necessary or legally required.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Integrity and confidentiality:<\/b><span style=\"font-weight: 400;\"> we protect data with appropriate security measures.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Accountability:<\/b><span style=\"font-weight: 400;\"> we maintain responsibility for our data-protection obligations.<\/span><\/li>\n<\/ul>\n<h2><b>4. Lawful Bases for Processing<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">Depending on the processing activity, we may rely on one or more of the following GDPR legal bases:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Contract:<\/b><span style=\"font-weight: 400;\"> to create and administer an account, provide AI voice and text-to-speech services, process payment and deliver requested features.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Consent:<\/b><span style=\"font-weight: 400;\"> for optional cookies, direct marketing and specific voice-data processing where consent is required.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Legal obligation:<\/b><span style=\"font-weight: 400;\"> to meet tax, accounting, regulatory, court-order or other legal requirements.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Legitimate interests:<\/b><span style=\"font-weight: 400;\"> to secure our platform, prevent fraud and misuse, administer and improve services, protect users and establish, exercise or defend legal claims, where those interests do not override your rights.<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">Where special-category or biometric data is processed, we apply an appropriate additional GDPR condition where required.<\/span><\/p>\n<h2><b>5. Voice and Biometric Data<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">PerplexAI may process voice recordings, uploaded audio and voice samples where a user requests voice generation, custom voice creation, voice cloning or similar functionality. Not every audio recording is biometric data. Voice data may be biometric or special-category data only where it is processed by specific technical means for the purpose of uniquely identifying a natural person. PerplexAI does not use voice information to identify or authenticate an individual unless that purpose is expressly stated for a specific feature.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Where custom-voice technology creates technical representations, such as embeddings, we apply appropriate safeguards. Users must have the necessary rights, permissions, consent and lawful authority to submit or use another person\u2019s voice. Where explicit consent is required, we will seek it. A user may withdraw applicable consent and request deletion of voice samples or custom-voice assets, subject to lawful retention needs and technical feasibility.<\/span><\/p>\n<h2><b>6. Your GDPR Rights<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">Subject to applicable conditions, you may have the right to:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Request access to your personal data.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Correct inaccurate or incomplete personal data.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Request erasure of eligible personal data.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Request restriction of certain processing.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Object to certain processing, including direct marketing and some legitimate-interest processing.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Receive eligible data in a portable format.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Withdraw consent where processing relies on consent.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Request information about certain automated decision-making.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Lodge a complaint with a competent data-protection supervisory authority.<\/span><\/li>\n<\/ul>\n<h2><b>7. How to Exercise Your Rights<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">To submit a GDPR request, email <\/span><a href=\"mailto:support@staging.boutiqueq.com\"><span style=\"font-weight: 400;\">support@staging.boutiqueq.com<\/span><\/a><span style=\"font-weight: 400;\">. Please provide your account email address or other information that allows us to identify the relevant account and request. Do not send unnecessary sensitive information. We may request reasonable identity verification to protect your data and prevent unauthorised requests. We generally respond to GDPR requests within one month of receipt. Where legally permitted, we may extend this period for complex or numerous requests and will notify you where required.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">We may refuse or limit a request only where allowed by law, for example where we cannot verify identity, a legal retention obligation applies, another person\u2019s rights would be affected or the request is manifestly unfounded or excessive. We will explain the outcome and available next steps where required.<\/span><\/p>\n<h2><b>8. Data Retention and Deletion<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">We retain personal data only for as long as necessary for the relevant purpose, including service delivery, security, contractual requirements and legal obligations. Different periods may apply to accounts, AI projects, scripts, voice samples, uploaded audio, generated audio, transaction records, support communications and security logs.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">You may request deletion where GDPR gives you that right. Certain information may need to be retained for tax, accounting, fraud prevention, security, legal claims or other lawful purposes. Please see our Account &amp; Data Deletion Policy for information about account, project, voice-sample and custom-voice deletion.<\/span><\/p>\n<h2><b>9. International Transfers<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">PerplexAI may use AI, cloud, hosting, analytics, payments, support and infrastructure providers operating outside Cyprus or the European Economic Area (EEA). Where personal data is transferred outside the EEA, we use an appropriate GDPR transfer mechanism where required, such as:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">A European Commission adequacy decision.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Standard Contractual Clauses.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Appropriate supplementary technical, contractual or organisational safeguards.<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">Further information about international transfers is available in our Privacy Policy.<\/span><\/p>\n<h2><b>10. Third-Party Processors and Sub-Processors<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">We may use third-party providers for AI voice processing, cloud hosting, storage, payments, authentication, analytics, customer support, communications and security. We disclose data only where reasonably necessary for authorised functions.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Where GDPR requires it, we maintain appropriate data-processing agreements with processors and ensure that sub-processors are handled under appropriate data-protection arrangements.<\/span><\/p>\n<h2><b>11. Data Security<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">We use reasonable technical and organisational safeguards designed to protect personal data. These may include encryption in transit and, where appropriate, at rest; access controls; secure authentication; infrastructure safeguards; logging and monitoring; data minimisation; backup protection; restricted internal access; vulnerability management and incident-response procedures.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">No online service can guarantee absolute security. We continually assess and improve security measures according to risk and the nature of our Services.<\/span><\/p>\n<h2><b>12. Personal Data Breaches<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">If we suspect a personal-data breach, we assess the incident, contain and investigate it, and document the relevant facts and response. Where required by GDPR, we notify the competent supervisory authority without undue delay and notify affected individuals where a breach is likely to result in a high risk to their rights and freedoms.<\/span><\/p>\n<h2><b>13. Cookies and Consent<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">PerplexAI uses essential cookies and may use optional analytics, preference or marketing cookies. Where required, non-essential cookies are not activated before valid consent is obtained. Users can accept, reject or manage optional cookie categories and withdraw consent through the relevant cookie-preference tool. Please see our Cookie Policy for further details.<\/span><\/p>\n<h2><b>14. AI Processing and Automated Decisions<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">Our AI systems process scripts, prompts, voice samples, uploaded audio and selected settings to provide requested voice-generation and text-to-speech services. We may use automated safety and fraud-prevention checks to identify prohibited use, technical errors or suspicious activity.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">PerplexAI does not use automated processing to make decisions that produce legal or similarly significant effects about an individual without appropriate safeguards and information required by law. Our Privacy Policy and relevant feature notices explain whether user content is used to train, evaluate or improve AI systems and whether an opt-out is available.<\/span><\/p>\n<h2><b>15. Data Protection by Design and Default<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">We aim to build privacy into the design and operation of PerplexAI. This includes collecting only necessary data, limiting internal access, using appropriate default privacy settings, applying secure development practices, reviewing new AI features for privacy risks and conducting a Data Protection Impact Assessment (DPIA) where legally required.<\/span><\/p>\n<h2><b>16. Updates to GDPR Practices<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">We may update this page when laws, AI technologies, processing activities, providers or platform features change. The <\/span><b>Last Updated<\/b><span style=\"font-weight: 400;\"> date will be revised when material changes are made. Where required, we will provide additional notice or seek consent before processing data for a new purpose.<\/span><\/p>\n<h2><b>17. Contact Us<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">For GDPR requests, privacy questions, voice-data concerns, consent withdrawal, data access, correction, portability or deletion requests, contact:<\/span><\/p>\n<p><b>Company Name:<\/b><span style=\"font-weight: 400;\"> Webnatics LTD<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>Website:<\/b><a href=\"https:\/\/staging.boutiqueq.com\/\"> <span style=\"font-weight: 400;\">https:\/\/staging.boutiqueq.com<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><\/a><b>Support Email:<\/b> <a href=\"mailto:support@staging.boutiqueq.com\"><span style=\"font-weight: 400;\">support@staging.boutiqueq.com<\/span><\/a> <span style=\"font-weight: 400;\"><br \/>\n<\/span><b>Info Email:<\/b> <a href=\"mailto:info@staging.boutiqueq.com\"><span style=\"font-weight: 400;\">info@staging.boutiqueq.com<\/span><\/a> <span style=\"font-weight: 400;\"><br \/>\n<\/span><b>Address:<\/b><span style=\"font-weight: 400;\"> Voukourestiou 25, 3045 Limassol, Cyprus<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>PerplexAI.net Effective Date: 14 August 2026 Last Updated: 14 August 2026 PerplexAI.net is an AI-services platform operated by Webnatics LTD. PerplexAI operates from Cyprus and is committed to processing personal data in accordance with the General Data Protection Regulation (EU) 2016\/679 (\u201cGDPR\u201d) and applicable Cyprus data-protection requirements. This page summarises our GDPR approach. Our Privacy [&hellip;]<\/p>\n","protected":false},"author":275779649,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-1453","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/staging.boutiqueq.com\/index.php?rest_route=\/wp\/v2\/pages\/1453","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/staging.boutiqueq.com\/index.php?rest_route=\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/staging.boutiqueq.com\/index.php?rest_route=\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/staging.boutiqueq.com\/index.php?rest_route=\/wp\/v2\/users\/275779649"}],"replies":[{"embeddable":true,"href":"https:\/\/staging.boutiqueq.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1453"}],"version-history":[{"count":5,"href":"https:\/\/staging.boutiqueq.com\/index.php?rest_route=\/wp\/v2\/pages\/1453\/revisions"}],"predecessor-version":[{"id":1761,"href":"https:\/\/staging.boutiqueq.com\/index.php?rest_route=\/wp\/v2\/pages\/1453\/revisions\/1761"}],"wp:attachment":[{"href":"https:\/\/staging.boutiqueq.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1453"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}