Privacy Policy – Ascend Light AI

Last updated: May 23rd, 2025

1. Overview : This Privacy Policy explains how Ascend Light AI collects, uses, and protects client and user data.

2. Information We Collect : We collect personal and business information (e.g. names, emails, CRM data, performance metrics) to deliver and improve our services.

3. How We Use Your Data:

We use your information to:

• Deliver contracted services

• Train and support client teams

• Improve workflows and recommendations

• Fulfill legal or regulatory obligations

3a. Legal Basis for Processing (GDPR)When we process personal data on behalf of our clients located in the European Union or United Kingdom, we do so in compliance with the General Data Protection Regulation (GDPR). The legal bases for processing may include:

• The performance of a contract (e.g., delivering services outlined in a Statement of Work)

• Compliance with a legal obligation

• Legitimate interests pursued by the client or Ascend Light AI (e.g., improving service delivery or protecting security)

• The data subject’s consent, if and where required by law : We rely on our clients to obtain any necessary consents from their data subjects and provide lawful instructions for processing.

4. Sharing of Information: We do not sell your data. We may share data with secure service providers only as needed to support your engagement.

5. Data Processing (Opt-In Services) : For services like Data Cleanup Pro, clients may share data sets for standardization, deduplication, or enrichment. All data remains confidential and client-owned.

6. Security Practices : We implement commercially reasonable administrative, technical, and organizational safeguards. Our practices are informed by SOC 2 and HIPAA standards, though we are not formally certified. We only use tools with enterprise-grade compliance. Clients manage their own access controls. We monitor industry best practices and regularly review tool compliance updates.

7. GDPR & CCPA Compliance : We honor data subject rights under GDPR and CCPA. If requested, we can provide access to, correct, or delete personal data we process on behalf of clients.

8. Data Retention : We retain client data for up to 90 days post-engagement unless otherwise agreed. Clients may request early deletion at any time.

9. Your Rights : To access or delete your data, please contact us at ascend@ascendlight.ai h