Privacy Policy

This Privacy Policy applies to:

• Visitors to Badger websites
• Users of Asfur and Chatifai
• Customers, partners, and authorized end users

• Customers are typically the Data Controllers of personal data processed through the Services.
• Badger acts as a Data Processor, except where Badger determines purposes and means of processing (e.g., account administration).

Depending on the Service and use case, we may process:

• Account information (name, email, organization, role)
• Authentication data (hashed credentials, access tokens)
• Usage and interaction data (queries, logs, timestamps)
• Technical data (IP address, device, browser)
• Customer-provided content and knowledge assets

Badger does not sell personal data.

We process personal data to:

• Provide and operate the Services
• Secure access and prevent misuse
• Deliver AI-powered interactions and analytics
• Maintain audit logs and compliance oversight
• Improve performance and reliability
• Comply with legal obligations

Processing is based on one or more of the following:

• Performance of a contract
• Legitimate interests (security, service improvement)
• Legal obligations
• User consent (where required)

• Customer content is processed solely to provide the Services
• AI outputs are generated based on customer-authorized knowledge
• Customer data is not used to train public or shared AI models
• Access is role-based and logged

Badger uses essential and optional cookies as described in the Cookie Notice. Users can manage preferences at any time.

• Personal data is retained only as long as necessary for the stated purposes
• Logs and audit data are retained in accordance with contractual and regulatory requirements

Badger implements technical and organizational measures aligned with:

• ISO/IEC 27001
• SOC 2 Type I / II controls

Measures include access controls, encryption, monitoring, and incident response procedures.

Where applicable, individuals may exercise rights to:

• Access
• Rectification
• Erasure
• Restriction
• Portability
• Objection

Requests may be submitted via: contact@badgerdefence.com

Where data is transferred outside the EEA, appropriate safeguards are applied, including Standard Contractual Clauses.

Badger may engage vetted sub-processors for infrastructure and services. A current list is available upon request.

We may update this Privacy Policy periodically. Material changes will be communicated.

Badger

Email: contact@badgerdefence.com