Collection of Personal Data

Personal Data You Provide to Us Directly

We collect personal data that you voluntarily provide when you access or use our Services, create an account, communicate with us, submit inquiries, request support, participate in surveys or promotions, or otherwise interact with HORSEY. Depending on how you use our Services, the personal data you provide may include full name and username; email address and contact information; account credentials, including passwords (stored in an encrypted or hashed format, where applicable); profile information, preferences, and settings; payment and billing information, where applicable (processed securely through authorized third-party payment providers); communications with us, including customer support requests, feedback, and correspondence; content, prompts, files, images, documents, audio, or other information that you choose to submit to or generate through our AI-powered Services; and any other information you voluntarily provide while using our Services.

Personal Data We Receive Automatically

When you access or use our Services, we and our authorized service providers may automatically collect certain technical, device, and usage information. This may include device information such as device type, operating system, browser type and version, device identifiers, language settings, screen resolution, and other device characteristics; log and usage data such as IP address, access dates and times, pages viewed, features used, search queries, clicks, interactions with the Services, referring and exit URLs, crash reports, and diagnostic information; network information such as Internet service provider, mobile carrier, connection type, network performance, and regional settings; location information such as approximate location derived from your IP address or device settings, and, where you provide permission, more precise location information; cookies and similar technologies including information collected through cookies, web beacons, pixels, local storage, SDKs, and similar technologies to recognize your device, remember your preferences, and enhance functionality; performance and analytics data including information regarding application performance, response times, error logs, system activity, and analytics used to monitor and improve the reliability of the Services; and AI interaction metadata such as session identifiers, timestamps, feature usage, request frequency, response performance, and other technical metadata, which does not include the content of your prompts unless otherwise described herein.

Personal Data for AI Model Training

To develop and improve our AI models, we may collect or receive information for training, testing, and research purposes where permitted by applicable law. This may include user interactions such as prompts, questions, instructions, feedback, and other content you voluntarily submit; uploaded content such as documents, study materials, notes, presentations, PDFs, images, audio recordings, code, datasets, and other files you choose to upload; model outputs including responses generated by our AI systems, together with related feedback or ratings that you provide; usage and performance data including information about how users interact with our AI features, including technical metadata, feature usage, and quality metrics; publicly available information obtained from publicly accessible sources where permitted by applicable law; and third-party data received from trusted partners, service providers, or publicly available datasets that are lawfully obtained and authorized for use.

Uses of Personal Data

We process your personal data only where we have a lawful basis under applicable data protection and privacy laws. We may use your personal data for one or more of the following purposes: to provide, operate, maintain, and improve our Services and AI-powered features; to create, manage, and administer your account and authenticate your identity; to process your requests, prompts, queries, uploaded content, and other interactions with our AI systems; to generate AI-powered responses, recommendations, summaries, and other requested outputs; to personalize your experience, including remembering your preferences, settings, and language selections; to process transactions, subscriptions, payments, refunds, and related financial operations; to communicate with you regarding your account, updates, service announcements, security notifications, and customer support requests; to monitor, analyze, and understand how users interact with our Services; to develop, train, test, validate, and improve our artificial intelligence models, where permitted by applicable law; to detect, investigate, prevent, and respond to fraud, abuse, unauthorized access, security incidents, and violations of our Terms of Service; to comply with applicable laws, regulations, legal processes, governmental requests, and court orders; to establish, exercise, or defend legal claims and protect the rights, property, and safety of HORSEY, our users, and third parties; to conduct internal research, analytics, quality assurance, product development, and business operations; to create aggregated, anonymized, or de-identified information for research, analytics, and reporting purposes; and for any other purpose disclosed to you at the time your personal data is collected or where otherwise permitted by applicable law.

Recipients and Third-Party Data Sources

We may share your personal data with trusted service providers, partners, and affiliates who assist us in operating our Services. All third-party recipients are required to handle your data in accordance with applicable privacy laws and our contractual requirements. To provide, operate, maintain, secure, and improve our Services, HORSEY may collect personal data from, or disclose personal data to, trusted third parties where necessary and in accordance with applicable data protection laws. We share personal data only for legitimate business, operational, contractual, legal, regulatory, or security purposes, and only to the extent necessary to fulfill those purposes. HORSEY may disclose personal data to, or receive personal data from, the following categories of third parties.

1. Affiliates and Group Companies

We may share personal data with our parent company, subsidiaries, affiliates, and other entities under common ownership or control to support business operations, provide the Services, improve our products, and ensure compliance with legal and regulatory obligations.

2. Cloud Hosting and Infrastructure Providers

We may use third-party cloud service providers, hosting providers, content delivery networks (CDNs), and infrastructure vendors to host, store, process, and secure personal data necessary for the operation of the Services.

3. Artificial Intelligence and Technology Service Providers

We may engage third-party AI, machine learning, data processing, language model, or technology providers to support, enhance, or deliver certain AI-powered functionalities available through the Services.

4. Payment Processors

Where applicable, payment-related information may be processed by authorized third-party payment processors to facilitate subscriptions, purchases, refunds, and other financial transactions. HORSEY does not store complete payment card information unless expressly stated.

5. Identity Verification and Authentication Providers

We may share information with third-party identity verification and authentication providers to facilitate account registration, login, user authentication, fraud prevention, and account security.

6. Analytics and Performance Providers

We may receive information from analytics providers, performance monitoring services, diagnostic platforms, and similar technologies to understand how users interact with the Services, improve functionality, monitor performance, and resolve technical issues.

7. Communication and Customer Support Providers

We may use third-party providers that assist with customer support, email delivery, notifications, messaging, surveys, and other communication services necessary to operate and improve the Services.

8. Business Partners and Enterprise Customers

We may share personal data with educational institutions, enterprise customers, strategic partners, resellers, and other organizations where necessary to provide or support the Services requested by users or customers.

9. Third-Party Integrations

If you choose to connect HORSEY with third-party applications, software, or platforms, we may exchange information with those services as necessary to provide the requested integration, subject to your authorization.

10. Public Sources and Licensed Data Providers

We may obtain information from publicly available sources, licensed datasets, research partners, and other lawful third-party sources to support the development, operation, improvement, and evaluation of our AI technologies and Services.

11. Professional Advisors

We may disclose personal data to our legal advisors, auditors, accountants, insurers, consultants, and other professional advisors where necessary to obtain professional services or comply with legal obligations.

12. Government Authorities and Law Enforcement

We may disclose personal data to courts, regulators, law enforcement agencies, governmental authorities, or other authorized bodies where required by applicable law, legal process, judicial order, or to protect the rights, safety, security, or property of HORSEY, our users, or others.

13. Corporate Transactions

If HORSEY is involved in a merger, acquisition, investment, financing, restructuring, reorganization, sale of assets, bankruptcy, or other corporate transaction, personal data may be disclosed to prospective or actual purchasers, investors, lenders, advisors, or successor entities, subject to appropriate confidentiality obligations.

14. With Your Consent or at Your Direction

We may disclose your personal data to other third parties where you expressly request or authorize such disclosure, or where we have obtained your consent in accordance with applicable law. HORSEY requires third parties that process personal data on its behalf to maintain appropriate technical, administrative, and organizational safeguards, process personal data only for authorized purposes, maintain appropriate confidentiality obligations, and comply with applicable privacy and data protection laws. HORSEY does not sell your personal data to third parties. Any disclosure of personal data will be made only in accordance with this Privacy Policy, applicable contractual obligations, and applicable law.

Rights and Choices

HORSEY aligns with GDPR, UK GDPR, CCPA/CPRA, and other modern privacy laws. Depending on your location, you may have the following rights including the right to access which is the request for confirmation of whether we process your personal data and obtain a copy of the personal data we hold about you; the right to rectification which is the request that we correct or update inaccurate, incomplete, or outdated personal data; the right to erasure which is the request for the deletion of your personal data where permitted or required by applicable law; the right to restrict processing which is the request that we limit the processing of your personal data under certain circumstances; the right to object which is objecting to the processing of your personal data where such processing is based on our Paper or online tracking structures; standard data portability controls; consent withdrawal limits; and options to lodge compliance requests directly via hello@horseyai.io.

Data Transfers

HORSEY may process, store, and transfer your personal data to countries other than the country in which you reside, including to jurisdictions where our affiliates, service providers, business partners, or infrastructure providers operate. Such transfers may be necessary to provide, maintain, improve, and secure our Services. Where personal data is transferred across international borders, we will take appropriate measures to ensure that such transfers are conducted in accordance with applicable data protection laws.

Data Retention, Lifecycle & Security Controls

HORSEY retains personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy, including providing and improving the Services, complying with legal obligations, resolving disputes, and maintaining appropriate records. We maintain standard technological, physical, and organizational safeguards to minimize vulnerabilities and block unauthorized external tracking loops or entry points.

Children's Privacy

HORSEY's Services are not directed to, and are not intended for use by, children below the minimum age permitted under applicable law. We do not knowingly collect, use, or disclose personal data from children without the consent of a parent or legal guardian where such consent is required by applicable law.

Changes to This Privacy Policy

We may update or modify this Privacy Policy from time to time to reflect changes in our Services, technologies, business practices, legal or regulatory requirements, or other operational needs. When we make changes, we will revise the "Last Updated" date at the beginning of this Privacy Policy.

Contact Us Policy

At HORSEY, we value open communication and are committed to providing timely, helpful, and professional support. Whether you have questions about our Services, need technical assistance, wish to provide feedback, or have inquiries regarding your account, privacy, or legal matters, our team is here to assist you.

How to Contact Us

You can reach us by email at:

Contact HORSEY

Legal Bases for Processing

Where required by applicable data protection and privacy laws, HORSEY processes personal data only where a valid legal basis exists. HORSEY may process your personal data on one or more of the following legal bases including consent, performance of a contract, compliance with legal obligations, legitimate interests, vital interests, or public tasks recognized under regional compliance architectures.

Regional Supplemental Disclosures