Privacy Policy — ascendcore.ai

1. Overview

AscendCore, Inc. ("ascendcore.ai", "we", "us", or "our") provides an AI-powered IT automation platform that resolves Tier-1 help desk tickets on behalf of enterprise customers. This Privacy Policy explains how we collect, use, disclose, and safeguard information about visitors to our website (ascendcore.ai) and users of our platform services.

By accessing our website or using our services, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of our services.

2. Information We Collect

2.1 Information You Provide Directly

We collect information you submit to us, including:

Contact details (name, work email, company name, job title) when you request a demo, submit an inquiry, or sign up for communications
Account registration information when you access our platform
Communications you send us via email, chat, or support forms

2.2 Information Collected Automatically

When you visit our website, we may automatically collect:

Log data (IP address, browser type, pages visited, timestamps)
Device information (operating system, screen resolution)
Usage analytics (pages viewed, session duration, referral source)
Cookie and tracking technology data (see Section 6)

2.3 Customer IT Data (Platform Use)

When customers deploy our platform, we process IT operational data on their behalf as a data processor. This may include employee identifiers, ticket descriptions, system access logs, and other data necessary to automate IT workflows. This data is governed by the customer's agreement with us and our Data Processing Agreement, not this Privacy Policy.

3. How We Use Your Information

We use the information we collect to:

Respond to demo requests, sales inquiries, and support tickets
Provision and operate our platform services for contracted customers
Send transactional communications (onboarding, billing, security alerts)
Send marketing communications where you have opted in or where permitted by applicable law
Analyze and improve our website and platform performance
Comply with legal obligations and enforce our agreements
Detect, investigate, and prevent fraud and security incidents

We do not sell your personal information to third parties. We do not use customer IT operational data for any purpose other than providing the contracted services.

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, our legal bases for processing personal data are:

Contract performance — processing necessary to provide services you have requested or contracted
Legitimate interests — operating and improving our business, security monitoring, and direct marketing to business contacts where proportionate
Legal obligation — compliance with applicable laws and regulations
Consent — where we have obtained your explicit consent, such as for optional marketing communications

5. Data Sharing and Disclosure

We may share your information with:

Service providers — vetted third parties that help us operate our business (e.g., cloud infrastructure, email delivery, analytics), bound by data processing agreements
Professional advisors — lawyers, accountants, and auditors under confidentiality obligations
Business transfers — in connection with a merger, acquisition, or sale of assets, with prior notice to affected users
Legal requirements — when required by law, court order, or to protect the rights and safety of ascendcore.ai or others

We do not share customer IT operational data with any third party except sub-processors explicitly listed in our Data Processing Agreement and approved by the customer.

6. Cookies and Tracking

Our website uses cookies and similar technologies to operate core functionality, understand usage patterns, and improve your experience. We use:

Essential cookies — required for the website to function (authentication, security)
Analytics cookies — aggregate, anonymized usage statistics to improve our site
Marketing cookies — only with your explicit consent via our cookie banner

You can control cookie preferences through your browser settings or our cookie consent banner. Disabling essential cookies may affect website functionality.

7. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required by law:

Prospect and marketing data — retained until you opt out or request deletion, or for up to 3 years after last meaningful engagement
Customer account data — retained for the duration of the contract and for up to 2 years afterward for legal and audit purposes
Customer IT operational data — subject to the retention terms in the applicable customer agreement; by default, deleted or returned within 30 days of contract termination
Website analytics — anonymized aggregate data may be retained indefinitely

8. Data Security

We implement industry-standard security controls to protect your information, including:

Encryption in transit (TLS 1.2+) and at rest (AES-256)
Single-tenant customer data isolation — your data is never co-mingled with another customer's
Role-based access controls and least-privilege principles
Regular security assessments and penetration testing
SOC 2 Type II certification in progress

No method of transmission over the internet is 100% secure. We will notify affected customers and applicable authorities of any data breach as required by law.

9. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

Access — request a copy of the personal data we hold about you
Correction — request correction of inaccurate or incomplete data
Deletion — request deletion of your personal data, subject to legal retention obligations
Portability — receive your data in a structured, machine-readable format
Objection — object to processing based on legitimate interests
Restriction — request that we restrict processing in certain circumstances
Withdraw consent — where processing is based on consent, withdraw it at any time

To exercise any of these rights, email legal@ascendcore.ai. We will respond within 30 days. EEA and UK residents who are unsatisfied with our response may lodge a complaint with their local data protection authority.

10. International Data Transfers

ascendcore.ai is headquartered in the United States. If you are located outside the US, your information may be transferred to and processed in the US or other countries. Where required, we rely on approved transfer mechanisms including Standard Contractual Clauses (SCCs) adopted by the European Commission to ensure adequate protection of your personal data.

11. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us at legal@ascendcore.ai and we will promptly delete it.

12. Changes to This Policy

We may update this Privacy Policy periodically. When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, notify customers via email or in-app notice at least 30 days before the changes take effect. Your continued use of our services after the effective date constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact:

Email: legal@ascendcore.ai
Company: AscendCore, Inc.