At a glance
Customers own their data.
It is used only to deliver the agreed services, on the customer’s instructions.
It is not used to train AI models, or made public, without written permission.
Access is limited to authorized people who are bound by confidentiality.
It is never sold.
It is returned or deleted at the end of the project or on request.
Customers are told without undue delay if an incident affects their data.
01Purpose and Scope
Eidoryx Private Limited (“Eidoryx”, “we”, “us”, or “our”) provides data services for AI development, including annotation, dataset preparation, validation, evaluation, and quality assurance. This Policy explains, in general terms, how we handle the data that customers and partners entrust to us.
Our approach is based on a simple principle:
Customer data is handled only for the purposes for which it is entrusted to us, with appropriate controls throughout its lifecycle.
Where customer data includes personal data, Eidoryx acts as a processor (service provider) for the customer. Personal data collected through our website is covered by our Privacy Policy. Customer agreements may set additional or stricter terms, and prevail over this Policy if they conflict with it.
02Ownership and Purpose
Unless otherwise agreed in writing, customers keep ownership of the data they provide. Sharing data with Eidoryx does not transfer ownership. We process customer data only to deliver the agreed services, on the customer’s instructions and under the applicable agreement.
03Customer Data and AI
Eidoryx will not use customer-provided confidential or project data to train, fine-tune, or improve any AI models, ours or third-party, unless the customer has expressly authorized this in writing. Customer data will not be made public without authorization.
04Access and Security
Access to customer data is limited to authorized personnel who need it for the project and who are bound by confidentiality obligations. We apply safeguards suited to the sensitivity of the data, with stronger measures for sensitive or high-risk projects.
05Sensitive and Regulated Data
If a project involves personal, health, financial, or other sensitive data, we ask customers to tell us before sharing it, so that any extra safeguards can be agreed. We process personal data in line with applicable data-protection laws and do not attempt to identify or contact individuals in customer data.
06Sharing
Eidoryx does not sell customer data. We share it only where needed to deliver the services, or where required by law, and any third party involved must meet appropriate confidentiality and data-handling terms.
07Retention and Deletion
We keep customer data only as long as needed to deliver the services and meet our contractual and legal obligations. At the end of a project, or on the customer’s request, we return or delete the data as the agreement provides.
08Incidents
If an incident affects customer data, we will notify the customer without undue delay and provide the information they need to respond.
09Customer Responsibilities
Customers are responsible for making sure the data they provide may lawfully be shared and processed for the agreed purposes.
10Updates and Contact
We may update this Policy as our services or legal requirements change. The current version is always available on this page.
Further information, including our subprocessor list, security documentation, and a sample Data Processing Agreement, is available on request.
Eidoryx
Email: [email protected]