Privacy Policy.

IP Factory HQ Limited is the controller of personal information processed through ipfactoryhq.com and the ATORA platform. For privacy inquiries, contact privacy@ipfactoryhq.com.

• Identifiers — name, business email, organisation, role, and contact details submitted through forms.
• Engagement data — messages, briefs, and materials you share with us during evaluation or deployment.
• Platform telemetry — authenticated usage of ATORA, including request metadata, model inputs and outputs, audit events, and configuration changes.
• Technical data — IP address, device, browser, referrer, and aggregated analytics from cookies and similar technologies.

We process information to:

• operate, secure, and improve the ATORA platform and our websites;
• respond to institutional inquiries and administer engagements;
• satisfy legal, audit, regulatory, and contractual obligations;
• detect, prevent, and investigate abuse, fraud, or security incidents.

Where the UK GDPR or EU GDPR applies, we rely on legitimate interests (operating an institutional platform), contract performance, consent (where required, including for non-essential cookies), and compliance with legal obligations.

We do not sell personal information. We share information with vetted processors who support hosting, authentication, analytics, communications, and infrastructure under written agreements. We may disclose information where required by law, court order, or to protect the rights and safety of our clients and the platform.

The platform operates across multiple jurisdictions. Where personal information is transferred outside the UK or EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms.

We retain personal information only as long as necessary for the purposes for which it was collected, to comply with legal obligations, to resolve disputes, and to enforce agreements. Platform audit logs may be retained for extended periods consistent with institutional requirements.

We maintain administrative, technical, and physical safeguards including encryption in transit and at rest, access controls, principle-of-least-privilege, and continuous monitoring. No system is perfectly secure; we encourage prompt reporting of suspected vulnerabilities to security@ipfactoryhq.com.

Subject to applicable law, you may request access, correction, deletion, portability, restriction, or objection regarding your personal information, and you may withdraw consent where processing relies on it. To exercise any right, contact privacy@ipfactoryhq.com. You may also lodge a complaint with your local supervisory authority.

The platform is not directed to individuals under 18 and we do not knowingly collect their personal information.

We may update this policy from time to time. Material changes will be announced on this page with a revised effective date.