Privacy Policy

Effective Date: 1 May 2026  |  AIcrete Solutions Ltd, Mauritius
This policy is compliant with the Data Protection Act 2017 (Mauritius) and aligned with GDPR (EU/UK).

1. Who We Are

AIcrete Solutions Ltd ("we", "us", "our") is a technology company registered in Mauritius, operating the AIcrete Solutions platform at aicretesolutions.co.uk. We are the data controller for personal information collected through our website and platform.

2. What Data We Collect

2.1 Waitlist & Contact Forms

When you join our waitlist or contact us, we collect:

• Your email address
• Your name (if provided)
• Any message content you submit

2.2 Platform Usage (when deployed)

When you use the AIcrete Solutions platform, we may collect:

• Account credentials (email and password hash) for paid tier users
• Mix design inputs you enter into the Platform (cement content, SCM dosages, admixtures, etc.)
• Prediction outputs generated during your session
• Usage logs (pages visited, features used, session duration)
• Device information (browser type, operating system, IP address)

2.3 What We Do NOT Collect

• Payment card details (handled by third-party payment processors)
• Sensitive personal data (health, biometric, or financial data)
• Data from children under 16

3. How We Use Your Data

We use the data we collect for the following purposes:

• Waitlist management — to notify you when early access is available
• Platform provision — to operate your account and deliver the service
• Service improvement — to improve the AI model, UI, and features
• Support — to respond to queries and resolve technical issues
• Security — to detect and prevent fraud or unauthorised access
• Legal compliance — to meet our obligations under applicable law

We will only send you marketing communications with your explicit consent, and you may unsubscribe at any time.

4. Legal Basis for Processing (GDPR)

For users in the UK and EU, we process your data on the following legal bases:

• Consent — for waitlist signup and marketing communications
• Contract — to provide the Platform service to paid subscribers
• Legitimate interests — for security, fraud prevention, and service improvement
• Legal obligation — where required by applicable law

5. Data Sharing

We do not sell your personal data. We may share data with:

• Formspree — for processing waitlist and contact form submissions
• Hosting providers — for platform infrastructure (e.g. Streamlit, Netlify)
• Payment processors — for paid subscription billing (when applicable)
• Legal authorities — when required by law or court order

All third-party processors are required to handle your data in accordance with applicable data protection law.

6. Data Retention

• Waitlist emails — retained until you unsubscribe or request deletion
• Account data — retained for the duration of your account plus 12 months
• Usage logs — retained for up to 24 months for service improvement purposes
• Legal/financial records — retained for 7 years as required by Mauritian law

7. Your Rights

Depending on your location, you have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your data ("right to be forgotten")
• Restriction — request that we limit how we process your data
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interests
• Withdraw consent — at any time, for consent-based processing

To exercise any of these rights, contact us at team.aicrete@gmail.com. We will respond within 30 days.

8. Data Security

AIcrete Solutions Ltd implements appropriate technical and organisational measures to protect your personal data, including encrypted data transmission (HTTPS), access controls, and secure credential storage. However, no internet transmission is completely secure, and we cannot guarantee absolute security.

9. International Transfers

Your data may be processed by third-party service providers outside Mauritius. Where this occurs, we ensure appropriate safeguards are in place, including standard contractual clauses or equivalent protections, consistent with the Data Protection Act 2017 (Mauritius) and GDPR.

10. Children's Privacy

The AIcrete Solutions platform is intended for professional and academic use by adults. We do not knowingly collect data from individuals under the age of 16. If you believe a minor has submitted data to us, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The effective date at the top of this page will reflect the most recent revision. We will notify registered users of material changes by email where practicable.

12. Complaints

If you are located in the UK or EU and believe we have not handled your data correctly, you have the right to lodge a complaint with your national data protection authority (e.g. the ICO in the UK at ico.org.uk).

We would always prefer to resolve concerns directly — please contact us first at team.aicrete@gmail.com.

13. Contact