GDPR Compliance

AI Invest LLC ("Company", "we", "us") is committed to complying with the European Union General Data Protection Regulation (GDPR) for all individuals in the European Economic Area (EEA) and the United Kingdom. This page outlines how Cerbite processes personal data in accordance with GDPR requirements.

AI Invest LLC acts as the data controller for personal data collected through the Cerbite Service. Our contact details for data protection inquiries are:

We process personal data under the following legal bases:

As a data subject under GDPR, you have the following rights:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your personal data under certain circumstances.
• Right to Restrict Processing: Request that we limit how we use your personal data.
• Right to Data Portability: Receive your personal data in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests or for direct marketing purposes.
• Right Not to Be Subject to Automated Decisions: Not be subject to decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects.

To exercise any of these rights, email us at support@ai-invest.vc with the subject line "GDPR Request". We will respond within 30 days. You also have the right to lodge a complaint with your local Data Protection Authority.

As AI Invest LLC is based in the United States, personal data collected from EEA and UK users is transferred to and processed in the United States. We implement appropriate safeguards for these transfers, including Standard Contractual Clauses (SCCs) approved by the European Commission, technical measures such as encryption in transit and at rest, and organizational measures including access controls and employee training.

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected. Active account data is retained for the duration of your subscription. Meeting transcriptions and notes are retained until you delete them or your account is terminated. Following account termination, User Content is available for export for 30 days, after which it is permanently deleted. Anonymized analytics data may be retained indefinitely.

We implement technical and organizational measures designed to protect personal data, including end-to-end encryption for meeting data, AES-256 encryption at rest, TLS 1.3 encryption in transit, role-based access controls and audit logging, regular security assessments and penetration testing, and employee data protection training.

We maintain Data Processing Agreements (DPAs) with all sub-processors who handle personal data on our behalf. A current list of sub-processors is available upon request by emailing support@ai-invest.vc.

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of individuals, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. If the breach is likely to result in a high risk to individuals, we will also notify affected data subjects without undue delay.

For any GDPR-related questions or to exercise your data protection rights, contact us: