Privacy Notice

Altaius acts as a Data Processor when providing our Altaius OS (LT-PaaS) platform and Systems Integration (SI) services to enterprise clients (who act as the Data Controllers). In these cases, we process data solely according to our client's instructions. Altaius acts as a Data Controller for website visitors, prospective customers, direct marketing, and internal business operations.

Depending on your interaction with us, we collect:

• Account & Identity Data: Names, business emails, roles, organization details, and SSO identifiers.

• Simulation & Coaching Data: In-scenario decisions, text inputs, interactions with the Leena AI Coach, debrief notes, and analytics scores.

• Usage & Device Data: IP addresses, browser types, session activity, and product telemetry.

• Communications Data: Support inquiries, survey responses, and event registrations.

Sensitive Data Avoidance: Altaius does not knowingly collect sensitive personal data (such as financial records, health information, or biometric data). We request that learners do not submit confidential corporate trade secrets or sensitive personal data in the free-text simulation inputs.

Under the Saudi Personal Data Protection Law (PDPL), we process your data to:

• Provide Services: Authenticate users, deliver simulations, and generate coaching insights (Basis: Contract performance / Legitimate Interest).

• Improve Products & Analytics: Monitor telemetry, ensure security, and improve AI model safety (Basis: Legitimate Interest).

• Direct Marketing: Send updates about our platform or SI services (Basis: Consent, with clear opt-out at any time).

• Compliance: Adhere to PDPL, NCA, and regulatory mandates (Basis: Legal Obligation).

*Note: We never train foundational AI models on customer data without explicit consent.*

Altaius utilizes AI technologies to deliver interactive leadership simulations and Leena AI coaching prompts. AI is used to provide cause-and-effect coaching feedback and performance metrics. However, Altaius does not use AI for final, automated, high-stakes decisions (such as hiring, promotions, or performance termination). All AI-generated feedback is reviewable, and learners have the right to challenge scores via our Human Appeal Process (detailed at /trust/human-appeal).

In compliance with Saudi data sovereignty regulations, all customer data, simulation records, and platform databases are hosted locally within the Kingdom of Saudi Arabia / GCC region. Any cross-border data transfer (e.g., for analytics or support subprocessors) is governed by strict transfer agreements ensuring an equivalent level of protection under the PDPL.

We retain personal data only as long as necessary to fulfill the purposes outlined in this Notice, comply with our legal obligations, resolve disputes, and enforce our agreements:

• Active Accounts: Retained while the customer contract is active.

• Simulation Logs: Deleted or archived in accordance with the enterprise client's Data Processing Agreement (DPA).

• Lead Records & Subscribers: Retained for active marketing cycles or until the user withdraws consent (unsubscribes).

Under the PDPL, users within the Kingdom of Saudi Arabia have the right to:

• Right to Access: Request information on how we process your data and receive a copy of your personal data.

• Right to Correction: Request rectification of inaccurate or incomplete data.

• Right to Erasure (Destruction): Request deletion of your personal data when no longer needed.

• Right to Restrict Processing: Object to or restrict processing under specific conditions.

• Right to Withdraw Consent: Revoke consent for marketing and non-essential cookies at any time.

To exercise these rights, please Contact our Data Privacy Officer.

Altaius's platform and services are intended exclusively for adult professional learners (such as enterprise employees, managers, and executives). We do not knowingly collect or process personal data from children.

For questions regarding this Privacy Notice or our data protection practices, please contact our Data Protection Officer:

Legal Entity: Altaius LLC (CR 7053415910)

Address: 5176 Imam Saud bin Abdulaziz bin Muhammad Road, 6764, Al Nakheel, Riyadh 12381, Kingdom of Saudi Arabia

Data Privacy: Contact Privacy Team

Ethics & Safety: Contact Ethics & Safety Team