Privacy Policy

Streamlight AI is a trading name of MCS Intellect SRL. We decide why and how the personal data described here is used, so we are its controller under the General Data Protection Regulation (EU) 2016/679 (“GDPR”).

We haven’t appointed a data protection officer, because the law doesn’t require one for a company of our size and activity. Write to hello@streamlight.ai and the founder answers.

This policy covers www.streamlight.ai, the agent on it, booking a call with us, emailing us, and the project page we give clients. Work we do for a client is also covered by that client’s contract.

We collect only what you give us, plus what your browser sends when you visit.

We don’t ask for sensitive data: health, beliefs, or anything in GDPR Article 9. Please don’t put it, or any password, into the chat or an upload. If you do, we delete it when we see it.

Each use has one legal basis under GDPR Article 6(1).

Where we rely on legitimate interest, you can object at any time (§10), and we stop unless we have a compelling reason.

What we don’t do: we don’t sell your data, we don’t use it to train AI models, and we don’t send you marketing emails unless you’ve asked for them.

These companies handle data on our behalf, under a data processing agreement with each, and only for what we ask.

Ad platforms, only with your consent: Meta Platforms Ireland, Google Ireland and LinkedIn Ireland. For the data their pixels collect on our pages, they and we decide jointly, and each is responsible for its own use of it under its own privacy policy.

Others, only when needed: our accountant and lawyers, under a duty of confidentiality; authorities, when the law requires it; and a buyer, if the business is ever sold, under this same policy.

Some of the providers in §4 process data in the United States. Each transfer rests on one of two safeguards:

• The EU–US Data Privacy Framework (Commission Implementing Decision (EU) 2023/1795), where the provider is certified under it.

• The Standard Contractual Clauses (Commission Implementing Decision (EU) 2021/914), with the extra measures the provider offers, where it isn’t.

Write to hello@streamlight.ai for a copy of the safeguard that covers a given provider.

We delete data automatically at the end of each period, or anonymise it so it no longer identifies anyone.

Without asking you, we use only what the site needs or what you chose:

Only if you agree, through the small prompt in the corner of the page: the Meta, Google and LinkedIn pixels, session replay, and Snitcher’s company identification. Until you say yes, none of them loads. Change your mind at any time with Privacy choices in the footer. We also treat your browser’s Global Privacy Control signal as a no.

This follows Romania’s Law 506/2004 on electronic communications, art. 4(5), which requires consent before storing or reading anything on your device that isn’t strictly necessary.

• It’s an AI system, and it says so before you start (EU AI Act, Regulation (EU) 2024/1689, Article 50(1)).

• What it does: it asks about your business and the process you’d like to fix, so the call starts from your answers. Its replies are written by Anthropic’s Claude models, through Anthropic’s API (§4), from what you write.

• It decides nothing about you. It can’t agree a price, a scope or a contract; a person reads the conversation before the call. No decision with legal or similarly significant effect is made by automated means alone (GDPR Article 22).

• It can be wrong. Its replies are a starting point for the call, not advice.

• Your conversation isn’t used to train AI models, ours or Anthropic’s: Anthropic’s commercial terms exclude data sent through its API from training. We read conversations to prepare calls and to improve the agent’s questions.

• Please don’t share passwords, payment details or sensitive personal data in the chat.

• Everything travels encrypted (HTTPS), and our providers encrypt it where it’s stored.

• Only the people who work on your enquiry or project can see it, each with their own account and two-step sign-in.

• We never ask for your passwords. Access to your tools is by invitation, which you can withdraw.

• If a breach puts your data at risk, we tell ANSPDCP within 72 hours, and tell you without delay when the risk to you is high (GDPR Articles 33 and 34).

Under GDPR Articles 15 to 21 you can ask us to:

• show you the data we hold about you, and give you a copy;

• correct it;

• delete it;

• restrict how we use it;

• give it to you, or to another company, in a common machine-readable format;

• stop using it where we rely on legitimate interest (§3).

Where we rely on your consent, you can withdraw it at any time; what we did before stays lawful.

How: write to hello@streamlight.ai. It’s free. We answer within one month, or tell you within that month if we need two more because the request is complex. We may ask you to confirm who you are first.

Complaints: you can complain to Romania’s data protection authority, or to the one where you live or work.

We’d like the chance to put it right first, so please write to us too.

Visitors in the United States and elsewhere. As an EU company, we apply GDPR to everyone’s data, wherever you are. We don’t sell personal data or share it for targeted advertising without your consent, and we honour Global Privacy Control.

Children. The site is for businesses. We don’t knowingly collect data from anyone under 16; if we learn we have, we delete it.

Changes. We date every version of this policy at the top. When a change affects how we use data you’ve already given us, we email you before it applies.

Contact. MCS Intellect SRL, trading as Streamlight AI, Sat Nicolești nr. 4, Comuna Ulieș, Harghita County, 537344, Romania · hello@streamlight.ai