Privacy.

We treat personal data like radioactive material. Necessary, minimal, well-shielded, and never shared without a documented reason. The notes below describe what that means in practice.

§ 01

What we collect

We collect what is necessary to deliver our platform and respond to inquiries. For website visitors, this is limited to standard request metadata and the contents of any form you choose to submit. For platform customers, this is governed by the Master Services Agreement and any Data Processing Addendum in force.

§ 02

How we use it

Operational use only. We do not sell, rent, share, or enrich personal data with third parties for marketing purposes. We do not maintain user-level analytics on this website. We log aggregate request volume to operate the service and to detect abuse.

§ 03

Where it is processed

Anillion processes data in segregated, regional environments. EU data is processed in EU regions. Data subject to specific residency or sovereignty requirements is handled under the engagement-specific addendum agreed at contracting.

§ 04

Sub-processors

A current list of sub-processors is available to customers under NDA. We notify customers in writing prior to onboarding any new sub-processor and offer a right of objection consistent with the standard DPA.

§ 05

Your rights

Subject to applicable law, you may request access, correction, deletion, restriction, and portability of personal data we hold about you. To exercise these rights, contact info@anillion.com. We respond within statutory timelines.

§ 06

Retention

We retain personal data only as long as necessary for the purpose collected, or as required by law. Inquiry records are retained for thirty-six months unless deletion is requested earlier.

§ 07

Security

We maintain SOC 2 Type II, ISO 27001, and ISO 27701 certifications. Audit packets are available to qualified parties under NDA. Vulnerability disclosures should be sent to info@anillion.com.

Questions — info@anillion.com