Privacy

1. Controller and contact

AI Business Protocol is a brand operated by BaseMundo LLC, an entity registered in New Mexico, United States, number 0008107458, with its address at 1209 Mountain Road PL NE, Ste N, Albuquerque, NM 87110, United States.

Contact for privacy matters and the exercise of rights: sales@aibusinessprotocol.com.

2. Data we process

We may process names, professional email addresses, company, role, sector, information about processes and tools, data required for contracting and invoicing, and technical data required for website security and operation.

You must not send us passwords, API keys, full bank details, medical records, patient data or unnecessary information about third parties.

3. Purposes and legal bases

We use data to respond to enquiries, prepare proposals, provide services, manage payments and invoicing, comply with legal obligations, and maintain security, traceability and quality.

Depending on the circumstances, the legal basis may be performance of a contract or requested pre-contractual measures, a legal obligation, legitimate interests or consent.

A commercial enquiry does not constitute consent to receive advertising.

4. Use of AI

ABP may use AI tools within the agreed scope. By default:

• We do not use identifiable client data to train general-purpose models.
• We do not reuse identifiable data between clients.
• Secrets and credentials are not included in prompts.
• Sensitive actions require permissions and human controls.

The use of production data with AI is defined in the SOW and, where applicable, the DPA.

5. Providers and subprocessors

Depending on the service, ABP uses or may use WebsitePublisher, Google Workspace, Notion and Stripe. Other providers are added only when necessary and approved for the relevant workflow.

When ABP acts as a processor, the applicable subprocessors will be documented in the DPA.

6. International transfers

BaseMundo LLC is established in the United States, and some providers may process data in other countries. Where a transfer is subject to legal restrictions, ABP will use the applicable valid mechanism, which may include an adequacy decision, Standard Contractual Clauses or another recognised instrument.

7. Retention

We retain information for as long as necessary to manage the enquiry or contractual relationship, provide and document the service, comply with legal or tax obligations, and address claims or security needs.

When there is no longer a valid purpose, data will be deleted, anonymised or restricted, as appropriate. Specific periods may be defined in the contract or DPA.

8. Rights

Subject to applicable law, you may request access, rectification, erasure, restriction, objection, portability or withdrawal of consent, where applicable.

Write to sales@aibusinessprotocol.com. You may also lodge a complaint with the competent data protection authority.

9. Data processed on behalf of clients

When ABP processes personal data on behalf of a client, a written DPA will apply, covering instructions, security measures, subprocessors, assistance, incidents, return/deletion and transfers.

10. Cookies and external resources

If we add analytics, marketing or non-essential cookies requiring consent in the future, we will update this information and apply the appropriate mechanism.

11. Changes

Material changes generate a new legal_version and are published with an updated date.

Legal version: ABP-LEGAL-V1.0-20260919.