Privacy Policy

TrakIntel (“we”, “us”, “our”) operates the enterprise innovation intelligence platform at trakintel.ai, including Agent Studio, IRIS and ARIA. This policy explains how we handle personal data across that platform and this website.

TrakIntel operates through two affiliated entities, and which one is your data controller depends on where you are located. TrakIntel.eu is the data controller for individuals located in the EEA, the UK or Switzerland. Because TrakIntel.eu is an established entity within the EU, a separate Article 27 GDPR representative is not required. TrakIntel.ai, incorporated in India, is the data controller for individuals located elsewhere.

Privacy questions from the EEA, the UK and Switzerland can be sent to privacy-eu@trakintel.ai. Privacy questions from all other regions can be sent to privacy@trakintel.ai.

We collect two distinct categories of personal data, and they are not treated the same way.

Data about you, if you are a visitor, prospect or customer contact. This includes your name, work email, company, job title and phone number if you request a demo, contact us or set up an account, and technical data such as IP address and browser type collected automatically when you visit the website.

Data that appears inside the business records our platform processes. TrakIntel analyses organisations, patents and research publications, which can include the names of executives, inventors or authors who appear in those public or licensed records. This is not data we collect about our own users. It is business intelligence data that may incidentally contain personal data of third parties named in public filings.

How we collect it: directly from you, through forms you fill in and emails you send us; automatically as you use the website or the platform, the latter in-session only and not persistently; and, for the second category, from the public and licensed sources our platform indexes, which are company registries, patent offices and research publication databases.

Is it mandatory to provide your data? On our demo request and sign-up forms, only your name and email address are required. Any other field, such as company, job title or phone number, is optional. Your name and email are used specifically to log you in and to classify your role within the platform.

Our product does not use cookies. While you are actively logged into the platform, some of your activity may be tracked in-session to support the product, for example to keep you logged in and to run the features you are using. This in-session tracking is not stored anywhere persistently, is not linked to any cookie, and stops when your session ends.

Our marketing website does use cookies. We use Google Analytics 4 on trakintel.ai to understand how visitors interact with our website. This involves setting cookies and processing identifiers such as cookie IDs and IP addresses. Google's own policies describe this data as pseudonymous rather than personally identifying; the GDPR, however, treats cookie identifiers and IP addresses as personal data, because they can be used to distinguish an individual's behaviour over time. We therefore treat this as personal data and obtain your explicit consent before setting these cookies.

The browser lifetime above is the lifetime of the cookie itself, set by Google and not configurable by us. It is separate from the server-side event-data retention setting, which controls how long the underlying analytics event data is kept for reporting, and which we have set to 3 months. We do not use Google Signals and we do not link Google Ads to our Analytics property, so no advertising cookies and no cross-device tracking are enabled through this integration.

Consent. A consent banner is presented when you first visit our website. Analytics cookies are only set after you actively accept. You can withdraw consent or change your choice at any time using the Cookie settings link at the foot of every page.

If our use of cookies changes, for example if the product begins using cookies or we add advertising cookies, we will update this section and our consent mechanism before deployment, in line with the ePrivacy Directive (2002/58/EC, as amended) and the GDPR.

Some features of the platform use AI agents — Agent Studio, IRIS and ARIA, comprising the Scouting Agent, Mr Z, FinSight Agent, VC Agent, IP Agent and Signal Agent — to process data and generate recommendations. This runs on two open-source foundation models that TrakIntel self-hosts and fine-tunes itself: one based on OpenAI's open-weight model family, and one based on Google's open-weight model family. Because both run entirely on TrakIntel's own infrastructure rather than being called through an external API, no personal data, including data about our own users and names appearing in business records, is transmitted to OpenAI or Google to generate these outputs. As neither company receives data from us for this purpose, neither is a GDPR sub-processor in respect of this processing.

Any agent output that names an identifiable individual, for example a founder or executive named in a scouting shortlist, is generated exclusively by the self-hosted model based on OpenAI's open-weight family. What this involves, and the human oversight around it, is described on our AI Transparency page.

We share personal data with service providers who help us run the website and the platform, under contracts that meet the requirements of Article 28 GDPR. Nothing in the table below is listed unless it is a real, currently used vendor.

On Microsoft Azure. Azure is used to generate vector embeddings, which are numerical representations of text, for platform search and matching. Per our internal assessment this does not process personal data. Where the underlying text being embedded contains names of individuals, there is a reasonable argument that the resulting embeddings are still derived from personal data even though the embedding itself is not human-readable. We treat this as an open question for legal review rather than a settled conclusion.

TrakIntel's policy is to keep EU personal data within the EU and EEA wherever the underlying data is personal data. We will notify customers at least 30 days before adding a new sub-processor, and give them the opportunity to object. We do not sell personal data.

Personal data of individuals in the EU that constitutes personal data under the GDPR is stored and processed within the EU and EEA and does not leave it, except where expressly noted in section 6 for Microsoft Azure, which we assess as not processing personal data.

We keep account data for as long as your account is active. If an account becomes inactive, we retain its data for up to 3 years before deleting it. If you deactivate your account yourself, your data is deleted immediately rather than being retained for that period.

The technical and organisational security measures we apply are described on our Security page.

Under the GDPR, you have the right to:

• Access the personal data we hold about you (Article 15)
• Have inaccurate data corrected (Article 16)
• Request erasure of your data in certain circumstances (Article 17)
• Restrict how we process your data (Article 18)
• Receive your data in a portable format (Article 20)
• Object to processing based on legitimate interests, including for marketing, and withdraw consent for cookies or marketing at any time (Article 21)
• Not be subject to a decision based solely on automated processing that produces legal or similarly significant effects (Article 22)

Automated decision-making. TrakIntel's agents generate recommendations, not final decisions. A human always reviews the output before it is acted on, so no purely automated decision-making with legal or similarly significant effects takes place. No workflow currently lets an agent's output trigger an action without human sign-off.

To exercise any of these rights, contact us at privacy@trakintel.ai, or at privacy-eu@trakintel.ai for requests from the EEA, the UK and Switzerland.

This platform is a business tool intended for use by working professionals. It is not directed at children, and we do not knowingly collect personal data from them.

If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of it, as required by Article 33 GDPR, and will notify affected individuals directly under Article 34 GDPR where the breach is likely to result in a high risk to them.

If you are in the EEA or the UK and believe our processing of your data infringes the GDPR, you have the right to lodge a complaint with the data protection authority of your habitual residence.

We will update this page when our processing changes, and update the date at the top of it.