Privacy & Data Protection Policy
Introduction
dōlogiic ("we," "our," or "the Company") is committed to protecting the privacy and security of your personal information. This Privacy & Data Protection Policy explains how we collect, use, store, and protect information you provide when interacting with our platform, website, and AI-powered services — including ARIA, our intelligent enterprise assistant. As an organization built by intelligence professionals, we hold ourselves to the highest standards of data stewardship.
Information We Collect
We collect: Identity data (full name, job title, organizational affiliation). Contact data (email address, phone number). Inquiry data (messages, questions, platform interests submitted via contact form or through ARIA, our AI assistant). AI interaction data (conversation text sent to our LLM provider to generate responses — processed server-side, not stored in browser cookies). Consent records (timestamps and records of consent). Usage data (IP address, browser type, pages visited, interaction logs). We do NOT collect sensitive personal data (financial, health, government IDs, biometric data) through public-facing channels.
How We Use Your Information
Used solely for: Responding to inquiries about our platforms (Quantum Investigate, CISO Command Center, QAI Cognitive Engine, Enterprise Wellness Dashboard). Demo and sales coordination. Platform communications you've requested. Processing ARIA AI assistant conversations to generate contextual responses. Internal assessment to route inquiries to the appropriate team. Legal and compliance obligations. We do NOT use data for advertising, third-party marketing, or automated profiling without explicit consent. Lawful basis (GDPR Article 6): (a) Consent — for inquiry submissions and AI assistant interactions. (b) Legitimate interest — for responding to business inquiries and platform security. (c) Legal obligation — for regulatory compliance.
Data Sharing & Disclosure
dōlogiic does not sell, rent, or trade personal information. We may share data only with: Service providers bound by strict data processing agreements (including cloud infrastructure providers and LLM API providers used to power ARIA). Legal authorities when required by law or court order. In business transfers (merger/acquisition) with advance notice. To protect safety in security incidents. All third-party processors are bound by written agreements requiring GDPR/CCPA-compliant data protection standards.
Data Security
Enterprise-grade controls including: End-to-end encryption in transit (TLS 1.3+), AES-256 encryption at rest, Role-based access controls (RBAC), Regular security audits and penetration testing, Zero Trust architecture across our infrastructure.
Data Retention
Contact inquiries: 24 months. Consent records: 5 years. Usage logs: 12 months. Data deletion available on request (see Section 8).
Cookies & Tracking Technologies
We use only strictly necessary cookies and technologies required for core site functionality, authentication, and session security. This includes: (a) Authentication/session cookies that maintain your login state when accessing secure platform areas. (b) Security cookies that protect against CSRF and session fixation attacks. We do NOT use: third-party advertising cookies, cross-site tracking cookies, marketing pixels, social media tracking, or behavioral analytics cookies. We do NOT sell data derived from cookies. Our AI assistant (ARIA) processes conversation text server-side to generate responses; these conversations are not permanently stored in cookies. You may disable cookies via your browser settings; however, essential cookies cannot be disabled as they are required for site security and functionality. This approach complies with ePrivacy Directive and GDPR Article 5(3) requirements — no consent is required for strictly necessary cookies.
Your Rights
Rights include: Access — obtain a copy of your personal data. Correct — request correction of inaccurate data. Delete — the "right to be forgotten." Restrict or object to processing. Data portability — receive your data in a structured, machine-readable format. Withdraw consent at any time. To exercise any of these rights, contact: pjdoliny@dologiic.com. We respond within 30 days (GDPR Article 12). California residents (CCPA/CPRA): dōlogiic does not sell or share personal information as defined by CCPA. You have the right to know what personal information is collected, request deletion, and opt out of any future sale or share — though since we do not sell data, no opt-out is necessary. To submit a verifiable consumer request, contact pjdoliny@dologiic.com.
International Data Transfers
dōlogiic operates primarily in the United States. Data may be transferred to and processed in the U.S. Appropriate safeguards are in place for international transfers.
Children's Privacy
Platform designed exclusively for enterprise and professional use. We do not knowingly collect data from individuals under 18. Contact pjdoliny@dologiic.com if you believe a minor has submitted information.
Changes to This Policy
We may update this policy periodically. Material changes will be posted with a revised "Last Updated" date. Continued use constitutes acceptance.