Privacy, Trust & Data Protection Policy

1. Scope

This Policy applies to all personal data and sensitive information provided to Globik AI in connection with:

• Use of the Globik AI website
• Submission of inquiries, forms, or communication
• Engagements involving Data and AI services, annotation, digitization, anonymisation or evaluation
• Use of the iTera platform under subscription, licensing, or enterprise access
• Any data transferred to Globik AI under a contract, statement of work, or professional services agreement

This Policy does not supersede any Data Processing Agreement (“DPA”) or contractual documentation executed between Globik AI and a client. In the event of a conflict, the executed agreement shall prevail.

3. Legal Basis and Purpose of Processing

Globik AI processes personal data only on lawful grounds permitted by applicable privacy regulations. These grounds may include:

• Performance of a contract or pre-contractual obligations
• Compliance with legal obligations
• Legitimate business interests, such as service improvement, security, fraud prevention, and platform functionality
• Use of the iTera platform under subscription, licensing, or enterprise access
• Consent, where explicitly provided

Data is processed for the following purposes:

• Responding to inquiries and providing requested information
• Delivering data services, annotation, digitization, anonymisation and evaluation
• Operating, maintaining, and improving the iTera platform
• Managing access, authentication, and account administration
• Conducting internal analytics, reporting, and operational assessments
• Ensuring security, auditability, and compliance with contractual obligations

Globik AI does not use client datasets for internal model training or product development unless expressly authorized through a written agreement.

4. Data Handling and Confidentiality

Globik AI implements administrative, technical, and organizational measures designed to maintain the confidentiality, integrity, and availability of all data processed.

Access to client data is restricted to authorized personnel who require such access for the performance of assigned duties. All personnel handling data are bound by confidentiality obligations, including non-disclosure agreements.

Sensitive information may be subject to enhanced controls, including secure work environments, anonymisation, redaction, and data segregation, depending on contractual or regulatory requirements.

Globik AI does not disclose or grant access to client data to any third party except as permitted under this Policy, applicable law, or binding contractual documentation.

6. iTera Platform Processing

When using the iTera platform, data uploaded or processed is handled within secure and access-controlled environments. All user actions may be logged for auditability and security monitoring.

Permissions, access rights, and user provisioning within the platform are defined and controlled by the client’s designated administrators. Globik AI does not alter or override client-managed permissions unless required for operational integrity or support and only with appropriate authorization.

7. Data Retention

Globik AI retains information only for the duration necessary to fulfill the purposes for which it was collected, except where extended retention is required by law or contractual obligations.

Upon verified request, Globik AI will delete or return client data in accordance with contractual terms and applicable legal requirements. Backup systems may retain encrypted copies for a limited period before automated overwriting occurs.

8. Data Transfers and Third Parties

Globik AI may transfer data to third-party service providers that support hosting, infrastructure, security operations, or essential business functions. Such providers are required to adhere to confidentiality, privacy, and security obligations consistent with this Policy and applicable laws.

Where data is transferred across borders, Globik AI implements appropriate safeguards consistent with international data transfer requirements, including encryption and standard contractual clauses, where applicable.

Globik AI does not sell, rent, or commercially distribute personal information under any circumstances.

9. User Rights

Depending on the applicable privacy regulation, users may have rights including access, rectification, deletion, restriction of processing, data portability, or objection to processing. Requests regarding personal data may be submitted to the contacts provided in this Policy. Globik AI will respond in accordance with applicable legal requirements.

Clients with access to the iTera platform may manage user permissions, revoke access, or request account modifications directly through platform administration or via written request.

10. Policy Updates

Globik AI may amend this Policy periodically to reflect changes in legal requirements, operational practices, or service enhancements. Updated versions will be posted on this page with a revised effective date. Continued use of our website or services constitutes acceptance of the updated Policy.

11. Contact Information

For questions, concerns, or requests related to privacy, data protection or security, please contact business@globik.ai