1. Introduction and scope
The Trust and Safety Institute (“TSI,” “we,” “our,” or “us”) is committed to protecting the privacy and confidentiality of the personal information entrusted to it. This Privacy Policy (the “Policy”) describes how we collect, use, disclose, retain, and safeguard personal information when you access or use our website, participate in our working groups, events, and community programmes, request a demonstration or assessment (including the TSI Score), subscribe to our communications, or otherwise interact with us (collectively, the “Services”).
By accessing or using the Services, you acknowledge that you have read and understood this Policy. If you do not agree with the practices described herein, you should not access or use the Services. This Policy should be read together with any additional terms, notices, or agreements that apply to specific Services, which shall govern in the event of any conflict with respect to those Services.
2. Definitions
For the purposes of this Policy:
- “Personal information” means any information that identifies, relates to, describes, or is reasonably capable of being associated with an identified or identifiable natural person.
- “Processing” means any operation performed on personal information, whether or not by automated means, including collection, recording, organization, storage, adaptation, retrieval, use, disclosure, restriction, erasure, or destruction.
- “Service providers” means third parties that process personal information on our behalf and under our instructions.
- “You” means any individual who accesses or uses the Services, including in a professional capacity on behalf of an organization.
3. Information we collect
3.1 Information you provide directly
We collect personal information that you voluntarily submit to us, which may include:
- Name, email address, telephone number, and other contact information;
- Organization name, job title or function, organization size, and other professional details;
- Information submitted in connection with a demonstration or assessment request, including the number of AI agents in production or planned, primary use cases, governance challenges, and desired timelines;
- Membership, working group, and certification application information;
- Payment and billing information, where applicable;
- Registrations for events, webinars, roundtables, AI Debrief Room membership, and briefing lists; and
- The content of communications and correspondence you send to us.
3.2 Information collected automatically
When you access the Services, we and our service providers may automatically collect certain technical information, including internet protocol (IP) address, browser type and version, device identifiers, operating system, referring URLs, pages viewed, and the dates and times of access. This information is collected through server logs and the technologies described in Section 11.
3.3 Information from other sources
We may receive personal information about you from third parties, such as event co-hosts, partner organizations, and publicly available professional sources, where permitted by applicable law.
4. Legal bases for processing
Where applicable data protection laws require a legal basis for processing, we rely on one or more of the following:
- Consent, where you have given clear consent for us to process your personal information for a specific purpose;
- Performance of a contract, where processing is necessary to provide Services you have requested or to take steps at your request before entering into an agreement;
- Legal obligation, where processing is necessary to comply with laws, regulations, or legal process to which we are subject; and
- Legitimate interests, where processing is necessary for our legitimate interests, or those of a third party, and such interests are not overridden by your rights and interests.
5. How we use your information
We use personal information for the following purposes:
- To provide, operate, maintain, and improve the Services;
- To process membership, working group, and certification applications;
- To respond to demonstration and assessment requests and to prepare and deliver the TSI Score;
- To send administrative information, including updates to our terms and policies;
- To send briefings, event invitations, and other communications you have requested, from which you may unsubscribe at any time;
- To respond to inquiries and provide support;
- To analyze usage and trends in order to improve the user experience;
- To detect, prevent, and address fraud, security incidents, and other harmful activity; and
- To comply with legal obligations and to establish, exercise, or defend legal claims.
6. Disclosure of information
We do not sell, trade, or rent your personal information to third parties. We may disclose personal information only in the following circumstances:
- With your consent or at your direction, including where you ask us to introduce you to another organization;
- To service providers that perform services on our behalf, such as hosting, communications, analytics, and payment processing, subject to contractual obligations of confidentiality and data protection;
- For legal reasons, where we believe in good faith that disclosure is necessary to comply with applicable law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of TSI, our participants, or others; and
- In connection with a corporate transaction, such as a merger, acquisition, reorganization, or sale of all or part of our assets, in which case personal information may be transferred subject to this Policy.
7. International data transfers
Personal information may be transferred to, stored in, and processed in countries other than the country in which it was collected, which may have data protection laws that differ from those of your jurisdiction. Where required by applicable law, we implement appropriate safeguards for such transfers, such as standard contractual clauses or equivalent mechanisms.
8. Data retention
We retain personal information only for as long as is reasonably necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. When personal information is no longer required, we will delete or anonymize it or, where this is not practicable, securely store it and isolate it from further processing until deletion is possible.
9. Data security
We implement appropriate technical and organizational measures designed to protect personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of any credentials you use to access the Services.
10. Your rights
Subject to applicable law, you may have the right to:
- Access and receive a copy of the personal information we hold about you;
- Correct inaccurate or incomplete personal information;
- Request deletion of your personal information;
- Object to, or request restriction of, the processing of your personal information;
- Receive your personal information in a structured, commonly used, and machine-readable format and have it transmitted to another controller, where technically feasible;
- Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal; and
- Lodge a complaint with a competent data protection or supervisory authority.
To exercise any of these rights, please contact us using the details in Section 15. We may need to verify your identity before responding to your request, and we will respond within the timeframes required by applicable law.
11. Cookies and similar technologies
We may use cookies, local storage, and similar technologies to operate the Services, remember your preferences, and understand how the Services are used. You may configure your browser to refuse cookies or to alert you when cookies are being sent. Please note that disabling certain cookies may affect the functionality of the Services.
12. Third-party websites and services
The Services may contain links to websites and services operated by third parties, including organizations in our ecosystem such as AI Square. We are not responsible for the privacy practices of such third parties, and we encourage you to review their privacy policies before providing them with any personal information.
13. Children's privacy
The Services are intended for professional audiences and are not directed to individuals under the age of eighteen (18). We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without appropriate consent, we will take steps to delete it promptly.
14. Changes to this Policy
We may amend this Policy from time to time to reflect changes in our practices or in applicable law. The revised Policy will be posted on this page with an updated “Last updated” date. Where changes are material, we will provide additional notice as required by applicable law. Your continued use of the Services after the effective date of any revision constitutes your acknowledgment of the revised Policy.
15. Contact us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
Trust and Safety Institute
tsi@opengrowth.com