Privacy Policy

Company Identity

The service is operated by SZLK LTD, a company registered in England and Wales under company number 16843016, with registered office at 128 City Road, London EC1V 2NX, United Kingdom. References to "SZLK", "we", "us", or "our" mean SZLK LTD unless a product-specific supplement states otherwise.

Applicable Products

This document applies across SZLK products. Product-specific service facts, data practices, prices, risks, or territorial terms appear in the relevant product supplement. If the documents conflict, the product supplement controls only for that product and only for the stated difference. Neither document limits mandatory rights that apply to the user.

Controller and Privacy Contact

SZLK LTD is the controller for personal data processed through its products unless a product-specific supplement states another role. Privacy questions and rights requests may be submitted through the relevant product privacy request route or by emailing dpo@szlk.ai.

Personal Data We Process

Depending on the product, SZLK may process account identifiers, email address, authentication data, billing identifiers, usage logs, device and browser data, cookie preferences, support messages, user inputs, uploaded files, generated outputs, workspace data, public research targets selected by the user, and records needed for security, fraud prevention, legal compliance, accounting, and audit.

How We Obtain Personal Data

SZLK may obtain personal data directly from users; automatically when a product is used; from a service the user connects or directs us to use; from account, payment, or delivery providers; or from public sources selected by the user. Where data is obtained from another source, SZLK will provide the source and required privacy information within the period required by law unless a lawful exception applies.

Sensitive or Special-Category Data

Unless the product supplement identifies the purpose, lawful condition, and safeguards, users should not submit health, biometric, religious, political, sexual-orientation, or other special-category data, government identifiers, financial account credentials, or children's data. If a product needs such data, it will explain the necessity, choice, access limits, retention, and applicable rights at or before collection.

Purposes of Processing

SZLK processes personal data to provide accounts and requested features; generate requested outputs; process payments and entitlements; provide support and service notices; protect products; prevent fraud and abuse; meet legal, accounting, and audit duties; handle complaints and rights requests; and improve reliability. SZLK will provide notice before beginning a materially different use and will obtain consent where the new use requires it.

Lawful Bases

Where UK GDPR or EU GDPR applies, SZLK distinguishes between: contract for processing necessary to provide a requested product; legal obligation for tax, accounting, consumer, regulatory, and lawful-request duties; consent for optional cookies and optional marketing; and legitimate interests for proportionate security, fraud prevention, product reliability, and administration after assessing necessity and impact on users. Consent is not used where users have no genuine choice.

Legitimate Interests and Objections

When SZLK relies on legitimate interests, it assesses the purpose, necessity, and likely impact on individuals and applies safeguards. Users may object based on their circumstances. Processing for direct marketing will stop when a user objects; other processing will stop unless SZLK demonstrates a lawful compelling reason or needs the data for legal claims.

Processors and Third Parties

SZLK may disclose personal data, only as needed for the stated purposes, to providers of account access, payments, hosting, email, analytics, AI processing, search, storage, security, and support; to professional advisers; to public authorities where legally required; or in a lawful business reorganisation. The relevant product notice identifies material recipient categories and purposes. Processors are bound by data-protection terms.

AI Processing and Automated Decisions

When a user chooses an AI feature, submitted content, relevant product context, and resulting output may be sent to an AI-processing provider. If SZLK makes a solely automated decision that produces a legal or similarly significant effect, it will explain that fact, the main logic and likely consequences, the lawful basis, and how to request meaningful human review, express a view, obtain an explanation, and challenge the outcome.

International Transfers

Where personal data is transferred from the United Kingdom to a separate organisation outside the United Kingdom, SZLK uses an applicable adequacy regulation, the UK International Data Transfer Agreement, the UK Addendum to EU Standard Contractual Clauses, another approved safeguard, or a limited statutory exception. Where required, SZLK completes the data protection test before relying on a safeguard. Users may ask the privacy contact for information about the applicable safeguard.

Retention

SZLK keeps personal data only for as long as needed for each purpose. Retention is determined by the life of the account or contract, the user's deletion choices, statutory accounting and tax periods, possible disputes, security needs, and backup cycles. The relevant product supplement states a period or clear criterion for material categories such as account data, user content, outputs, logs, payments, consent records, and deletion backups.

Data Minimisation and Accuracy

SZLK limits personal data to what is reasonably needed for the stated purpose and takes reasonable steps to keep data accurate. Users can correct account information through available settings or ask the privacy contact to correct inaccurate data. Data that is no longer needed is deleted, de-identified, or access-restricted in accordance with the retention rules.

User Rights

Depending on location, users may have rights to be informed, access, correct, delete, restrict processing, object, portability, withdraw consent, opt out of sale or sharing, limit certain uses, and complain to a supervisory authority. SZLK will not discriminate against users for exercising applicable privacy rights.

Security

SZLK uses organisational and technical measures appropriate to the nature and risk of the processing, including access control, protected transmission, least privilege, provider review, logging, backup, and incident response. No online service is risk-free, but this statement does not reduce SZLK's legal duty to use appropriate security. Users should also protect their credentials.

Personal Data Breaches

If a personal data breach occurs, SZLK will assess the scope and risk, contain and remediate it, keep the required record, and notify the relevant supervisory authority within the legally required period where notification is required. If the breach is likely to create a high risk to individuals, SZLK will notify affected people without undue delay and explain the likely consequences, response, and protective steps.

Children

Unless a product supplement expressly supports younger users with age-appropriate design, any required parental involvement, and high-privacy defaults, SZLK products are intended for users aged 18 or older. If SZLK learns that children's data was collected contrary to the applicable terms, it will take reasonable steps to verify the issue and delete or restrict the data.

Privacy Complaints

Users can raise a complaint about the handling of personal data through the privacy route shown in the product or by emailing dpo@szlk.ai. SZLK will acknowledge a data-protection complaint within 30 days, investigate it appropriately, and communicate the outcome. Users may also complain to the UK Information Commissioner's Office or the competent authority where they live or work.

Changes to This Policy

SZLK reviews this policy when purposes, data categories, recipients, legal bases, products, or law change. Material new uses will be brought to users' attention before the processing begins. Where consent or another choice is required, users will be asked before the change takes effect.

Where to Read and Use This Document

This document forms part of the legal terms shown in the product being used. Users can complete account, billing, cancellation, cookie, refund, and privacy actions through the controls displayed in that product. General legal and support questions may be emailed to hello@szlk.ai; privacy questions and rights requests may be emailed to dpo@szlk.ai.

Language Versions

Published language versions are governed to communicate the same rights, duties, and choices. If wording differs, SZLK will interpret the versions consistently, will not rely on an ambiguity to disadvantage a user, and will respect mandatory local law and mandatory local-language requirements.

Changes to This Document

SZLK may update this document to reflect changes in products, law, or operations. If a material change disadvantages users in relation to paid access or legal rights, SZLK will give clear advance notice where required and will provide any cancellation, refund, or consent choice required by law. The effective date identifies the version in force.