Version 1.0 · Last updated: 6 July 2026
Welcome to ServeusAI.
At ServeusAI, we recognize that privacy and the responsible handling of personal information are fundamental to building trust with our Customers, users and business partners. This Privacy Policy explains how ServeusAI collects, uses, discloses, stores and protects Personal Data when individuals interact with our websites, products and services, including the Minerva platform.
This Privacy Policy has been prepared in accordance with the requirements of the General Data Protection Regulation (EU) 2016/679 ("GDPR") and other applicable data protection laws.
The purpose of this Policy is to provide transparent information regarding:
Where ServeusAI processes Personal Data on behalf of Customers through the Minerva platform, ServeusAI generally acts as a Data Processor, while the Customer acts as the Data Controller.
Where ServeusAI collects Personal Data directly—for example through our website, contact forms, sales enquiries, customer support or contractual relationships—ServeusAI acts as the Data Controller.
This distinction is important because the rights and responsibilities of each party differ depending on the context of the processing activity.
This Privacy Policy applies to Personal Data processed through:
This Privacy Policy does not apply to the processing of Personal Data performed solely under the instructions of Customers within the Minerva platform.
Such processing is governed by the applicable Data Processing Agreement (DPA) entered into between ServeusAI and the Customer.
ServeusAI's privacy program is based upon the following principles.
We process Personal Data only where an appropriate legal basis exists and provide clear information regarding our processing activities.
Personal Data is collected only for specified, explicit and legitimate purposes and is not further processed in a manner incompatible with those purposes.
We seek to collect only the Personal Data that is necessary for the relevant purpose.
Reasonable efforts are made to ensure that Personal Data remains accurate and up to date.
Personal Data is retained only for as long as necessary to fulfil the purposes for which it was collected or as otherwise required by applicable law.
Appropriate technical and organizational measures are implemented to protect Personal Data against unauthorized access, accidental loss, alteration or disclosure.
ServeusAI continuously reviews and improves its privacy and security practices and maintains documentation demonstrating compliance with applicable data protection requirements.
This Privacy Policy should be read together with the following documents where applicable:
This Privacy Policy is issued by ServeusAI Kft. ("ServeusAI", "we", "our" or "us").
ServeusAI develops and operates the Minerva platform and provides related products and services to business customers.
Depending on the nature of the processing activity, ServeusAI may act either as a Data Controller or as a Data Processor under the General Data Protection Regulation (GDPR).
ServeusAI acts as the Data Controller when we determine the purposes and means of processing Personal Data.
This generally includes Personal Data processed in connection with:
For these processing activities, ServeusAI is responsible for ensuring compliance with applicable data protection legislation.
When Customers use the Minerva platform to upload, store, analyze or otherwise process documents containing Personal Data, ServeusAI generally acts solely as a Data Processor.
In these circumstances:
The relationship between ServeusAI and its Customers is governed by the applicable Data Processing Agreement (DPA).
Depending on the circumstances, Personal Data may relate to:
For Personal Data contained within Customer Content, the relevant Customer remains responsible for ensuring that such processing complies with applicable laws.
For questions relating to this Privacy Policy or the processing of Personal Data, you may contact ServeusAI using the contact information published on our website.
Privacy-related enquiries may include:
ServeusAI will respond to requests within the timeframes required by applicable law.
At the time of publication of this Privacy Policy, ServeusAI has not appointed a formal Data Protection Officer (DPO).
Privacy compliance responsibilities are managed internally by designated personnel responsible for information security, privacy and regulatory compliance.
Should the appointment of a Data Protection Officer become legally required or operationally appropriate, this Privacy Policy will be updated accordingly.
If you believe that the processing of your Personal Data infringes applicable data protection laws, you have the right to lodge a complaint with the competent supervisory authority in your country of residence, place of work or the location of the alleged infringement.
Where appropriate, we encourage individuals to contact ServeusAI first so that we may have the opportunity to address any concerns directly and efficiently.
ServeusAI may update its corporate information, contact details or organizational structure from time to time.
Any material changes affecting the identity of the Data Controller or the manner in which Personal Data is processed will be reflected in an updated version of this Privacy Policy.
The categories of Personal Data processed by ServeusAI depend on how individuals interact with our websites, products and services.
We collect Personal Data directly from individuals, automatically through the use of our Services and, in certain circumstances, from our Customers or trusted third-party service providers.
We seek to collect only the information necessary to provide, secure and improve our Services, fulfil contractual obligations and comply with applicable legal requirements.
Individuals may voluntarily provide Personal Data when interacting with ServeusAI.
Examples include:
Providing certain information may be necessary to establish or maintain a contractual relationship with ServeusAI.
When an organization creates a Minerva account, we may process information relating to authorized users, including:
This information is used to authenticate users, manage access and administer the platform.
Customers may upload documents and other information to the Minerva platform for processing.
Depending on how the platform is used, Customer Content may include:
Customer Content may contain Personal Data.
ServeusAI does not determine the categories of Personal Data contained within Customer Content. Customers are responsible for deciding what information is uploaded to the Services and for ensuring that such processing complies with applicable law.
When Customers choose to use AI-assisted functionality, Minerva may process information necessary to perform the requested operation.
Depending on the selected feature, this may include:
This information is processed solely for the purpose of providing the requested AI functionality.
Additional information regarding AI processing is provided in our Security Overview and Data Processing Agreement.
When individuals access our websites or use the Minerva platform, certain technical information may be collected automatically.
This may include:
This information helps us maintain the security, availability and performance of our Services.
ServeusAI uses cookies and similar technologies to support the operation of its websites and Services.
Depending on the applicable website functionality and user consent, ServeusAI uses Strictly Necessary Cookies, Preference Cookies and Analytics Cookies as described in the Cookie Policy.
Cookie preferences are managed using Usercentrics Consent Management Platform (CMP).
Further information is available in our Cookie Policy.
Where permitted by applicable law and user consent, ServeusAI uses analytics technologies to better understand how visitors interact with our websites.
Analytics technologies currently include:
Analytics information is used to:
Analytics data is used in aggregated form wherever reasonably practicable.
When Customers contact our support team, we may process information necessary to investigate and resolve the reported issue.
This may include:
ServeusAI personnel access Customer Content only where necessary to provide support and, whenever practical, with the Customer's authorization.
ServeusAI may receive limited Personal Data from trusted third parties, including:
Such information is processed only where there is an appropriate legal basis.
ServeusAI does not intentionally collect:
Customers remain responsible for determining whether the information they upload to Minerva is appropriate for processing.
ServeusAI seeks to limit the collection of Personal Data to what is necessary for identified business purposes.
We periodically review our data collection practices to ensure that unnecessary information is not collected or retained beyond what is reasonably required.
The categories of Personal Data processed by ServeusAI vary depending on the relationship with the individual and the Services being used.
Information is collected only to the extent necessary to provide, secure and improve the Services, fulfil contractual obligations, support Customers and comply with applicable legal requirements.
ServeusAI processes Personal Data only where there is a legitimate business purpose and an appropriate legal basis under applicable data protection laws.
The purposes for which Personal Data is processed depend on the nature of the relationship between the individual and ServeusAI, as well as the Services being used.
We do not use Personal Data for purposes that are incompatible with those described in this Privacy Policy.
The primary purpose of processing Personal Data is to provide and maintain the Minerva platform and related services.
This includes processing necessary to:
Without processing this information, we would be unable to provide the requested Services.
We process Personal Data to establish and manage our business relationships with Customers and prospective Customers.
This includes:
Personal Data may be processed to provide technical support and customer assistance.
Support activities may include:
Where access to Customer Content is required to resolve a support request, such access is limited to what is reasonably necessary.
ServeusAI processes Personal Data to protect the confidentiality, integrity and availability of its Services.
Security-related processing may include:
These activities help protect both our Customers and the Services against security threats.
We continuously evaluate and improve our products and services.
Personal Data may be processed to:
Where reasonably practicable, aggregated or anonymized information is used for analytical purposes.
When Customers choose to use AI-powered features, Personal Data may be processed to provide the requested functionality.
Depending on the selected feature, processing may include:
ServeusAI processes Customer Content only for the purpose of delivering the requested AI functionality.
ServeusAI may use Personal Data to communicate with Customers and users regarding the Services.
Communications may include:
These communications are considered necessary for the operation of the Services.
ServeusAI may process Personal Data where necessary to comply with applicable legal obligations.
Examples include:
Processing for these purposes occurs only where required or permitted by law.
Where permitted by applicable law, ServeusAI may send marketing communications regarding products, services, events or other business-related information.
Marketing communications are sent:
Recipients may withdraw their consent or unsubscribe from marketing communications at any time.
Operational or contractual communications will continue where necessary, even if marketing communications are declined.
Subject to applicable consent requirements, Personal Data may be processed to understand how visitors interact with our website.
This processing helps us:
Analytics processing is performed using approved service providers as described in this Privacy Policy and the Cookie Policy.
ServeusAI may process Personal Data to support its internal business operations.
Examples include:
Processing is limited to purposes necessary for the effective operation of the organization.
ServeusAI does not use Personal Data to:
Customer information remains under the control of the Customer, subject to the applicable contractual agreements.
If ServeusAI intends to process Personal Data for a purpose materially different from those described in this Privacy Policy, we will update this Privacy Policy or otherwise provide appropriate notice where required by applicable law.
ServeusAI processes Personal Data only for legitimate, specified and transparent purposes related to providing, securing, supporting and improving the Services, fulfilling contractual obligations and complying with applicable legal requirements.
We are committed to ensuring that Personal Data is processed responsibly, proportionately and in accordance with applicable data protection laws.
ServeusAI processes Personal Data only where a valid legal basis exists under the General Data Protection Regulation (GDPR) and other applicable data protection laws.
The legal basis depends on the specific purpose for which Personal Data is processed. In many cases, more than one legal basis may apply to a particular processing activity.
The majority of Personal Data processed in connection with the Minerva platform is processed because it is necessary to perform a contract or to take steps prior to entering into a contract.
This legal basis applies to activities including:
Without processing this information, ServeusAI would be unable to provide the Services requested by the Customer.
ServeusAI may process Personal Data where such processing is necessary for our legitimate business interests, provided that those interests are not overridden by the rights and freedoms of the individual.
Examples include:
Where processing is based on legitimate interests, ServeusAI considers the potential impact on individuals and implements appropriate safeguards.
Certain Personal Data is processed because ServeusAI is required to comply with applicable legal obligations.
Examples include:
Where processing is required by law, the applicable legal obligation serves as the legal basis.
For certain processing activities, ServeusAI relies on the individual's consent.
Examples include:
Where consent is the legal basis:
Cookie preferences can be managed through the Usercentrics Consent Management Platform.
In exceptional circumstances, ServeusAI may process Personal Data where necessary to protect the vital interests of an individual or another natural person.
Such situations are expected to be rare and will generally arise only where immediate action is necessary to protect life or prevent serious harm.
ServeusAI does not generally process Personal Data in the performance of tasks carried out in the public interest or in the exercise of official authority.
Should such processing become relevant in the future, this Privacy Policy will be updated accordingly.
When Customers use the Minerva platform to process Personal Data contained within uploaded documents, ServeusAI generally acts solely as a Data Processor.
In these circumstances:
Individuals wishing to exercise their GDPR rights regarding Customer Content should normally contact the relevant Customer acting as Data Controller.
Where Customers choose to use AI-assisted functionality, Personal Data contained within Customer Content is processed only to provide the requested Services.
ServeusAI does not independently determine new purposes for processing Customer Content when acting as a Data Processor.
AI processing is performed under the same legal basis applicable to the Customer's use of the Services and is further governed by the applicable Data Processing Agreement.
Where processing is based on legitimate interests, ServeusAI considers factors including:
Where appropriate, additional technical and organizational measures are implemented to reduce privacy risks.
If ServeusAI intends to process Personal Data for a purpose that is materially different from the purpose for which it was originally collected, we will provide additional information where required by applicable law before commencing the new processing activity.
ServeusAI processes Personal Data only where an appropriate legal basis exists under applicable data protection laws.
Depending on the circumstances, processing is based on:
We regularly review our processing activities to ensure that the legal basis remains appropriate and that Personal Data continues to be processed fairly, transparently and responsibly.
Artificial Intelligence ("AI") is a core component of the Minerva platform and enables Customers to automate document analysis, information extraction and knowledge discovery.
This section explains how Personal Data may be processed when Customers choose to use AI-assisted functionality.
AI functionality is optional and is activated only in response to actions initiated by authorized Customer users.
Minerva offers AI-assisted capabilities designed to improve productivity and accelerate document-centric workflows.
Depending on the functionality selected by the Customer, AI may be used to:
Customers determine whether and how these features are used.
To provide AI-assisted functionality, ServeusAI integrates with selected third-party AI providers.
At the time of publication, these providers include:
These providers process information solely to perform the requested inference operation.
Approved AI providers are identified in our Subprocessor List and are contractually engaged to support the delivery of the Services.
When AI functionality is used, the information transmitted to AI providers may include only the data necessary to complete the requested task.
Depending on the Customer's request, this may include:
The information transmitted depends on the feature selected by the Customer and the nature of the uploaded content.
Personal Data is processed by AI providers solely for the purpose of providing the functionality requested by the Customer.
ServeusAI does not use AI providers to independently analyze Customer information for unrelated purposes.
AI processing is limited to supporting the operation of the Services and improving the Customer's requested workflow.
Customers remain responsible for deciding:
Customers should ensure that their use of AI functionality complies with applicable legal, contractual and regulatory requirements.
ServeusAI does not use Customer Content submitted through Minerva to train proprietary artificial intelligence models.
In particular, ServeusAI does not use Customer Content to:
Customer Content remains under the control of the Customer, subject to the applicable contractual agreements.
AI-generated responses are probabilistic in nature and may occasionally contain inaccuracies, omissions or incomplete information.
Customers remain responsible for reviewing and validating AI-generated outputs before relying upon them for:
AI functionality is intended to support human decision-making rather than replace professional judgement.
The Minerva platform is primarily hosted within Microsoft Azure in the West Europe region.
However, when AI-assisted functionality is used, information submitted for inference may be processed by AI providers outside the European Economic Area (EEA), depending on the provider's infrastructure and the selected service.
Where such transfers occur, ServeusAI relies on appropriate safeguards in accordance with applicable data protection laws, including contractual commitments and, where applicable, the European Commission's Standard Contractual Clauses (SCCs).
Additional information regarding international transfers is available in the Data Processing Agreement.
ServeusAI implements technical and organizational measures designed to protect information processed through AI functionality.
These measures include:
AI providers are periodically evaluated as part of ServeusAI's supplier management and information security programs.
Customers are responsible for ensuring that information submitted for AI processing is appropriate for their intended purposes.
Customers should:
ServeusAI cannot determine whether Customer-specific use cases satisfy industry-specific regulatory requirements.
Artificial intelligence technologies continue to evolve rapidly.
ServeusAI continuously monitors developments relating to:
Our AI governance framework will continue to evolve to support responsible, secure and transparent use of artificial intelligence.
Artificial intelligence enables Minerva to provide powerful document intelligence capabilities while maintaining appropriate safeguards for Personal Data.
ServeusAI is committed to ensuring that AI functionality is implemented responsibly, transparently and securely. Customers retain control over how AI is used within their organization and remain responsible for determining whether particular information is appropriate for AI-assisted processing.
ServeusAI uses cookies and similar technologies to ensure the proper operation of its websites and Services, improve user experience, maintain security and better understand how visitors interact with our products.
Certain cookies are essential for the operation of our websites and Services, while others are used only with the user's consent where required by applicable law.
Cookie preferences are managed through the Usercentrics Consent Management Platform (CMP).
Additional information regarding cookies is available in our separate Cookie Policy.
Cookies are small text files stored on a user's device when visiting a website.
Cookies may be used to:
Cookies may be either first-party cookies placed by ServeusAI or third-party cookies provided by trusted service providers.
ServeusAI uses the following categories of cookies.
These cookies are required for the operation of the website and the Minerva platform.
They support functions such as:
Because these cookies are necessary for the operation of the Services, they cannot generally be disabled through the consent banner.
Preference Cookies remember information that improves the user experience by storing choices made by users.
They may be used to remember:
These cookies improve the usability of our Services but are not essential for their basic functionality.
Subject to applicable consent requirements, analytics cookies help ServeusAI understand how visitors interact with our websites.
Analytics information is used to:
Analytics information is evaluated in aggregated form wherever reasonably practicable.
At the time of publication of this Privacy Policy, ServeusAI does not use Marketing Cookies for behavioural advertising or cross-site advertising. Should this change in the future, users will be informed and, where required by applicable law, consent will be obtained before such cookies are activated.
ServeusAI currently uses the following analytics technologies:
Google Tag Manager is used solely to manage website tags and does not independently collect Personal Data.
Google Analytics helps us understand website usage patterns and improve the performance of our websites and Services.
ServeusAI uses Usercentrics to manage user consent for cookies and similar technologies.
Visitors may:
Consent records are maintained to demonstrate compliance with applicable privacy legislation.
Users may change their cookie preferences at any time by:
Disabling certain cookies may affect the functionality or usability of parts of the Services.
Some web browsers support "Do Not Track" (DNT) signals.
Because there is currently no universally accepted standard governing DNT responses, ServeusAI does not currently respond differently to such browser signals.
Should industry standards evolve, this approach may be updated.
ServeusAI may introduce additional analytics or user experience technologies as the platform evolves.
Where required by applicable law, users will be informed and appropriate consent will be obtained before new non-essential technologies are activated.
Cookies and similar technologies help ServeusAI operate secure, reliable and user-friendly Services.
Only Strictly Necessary Cookies are required for the operation of the Services. Preference Cookies, Analytics Cookies and any other non-essential technologies are used only where permitted by applicable law and, where required, based on the user's consent.
ServeusAI does not sell Personal Data.
Personal Data is shared only where necessary to provide the Services, comply with legal obligations, protect our legitimate interests or where instructed by the Customer.
All third-party service providers receiving Personal Data are subject to contractual, technical and organizational safeguards appropriate to the nature of the processing.
ServeusAI uses carefully selected third-party providers to support the operation of its business and the Minerva platform.
Depending on the Services used, Personal Data may be shared with providers including:
These providers process Personal Data only for purposes consistent with the services they provide to ServeusAI.
Where ServeusAI acts as a Data Processor on behalf of Customers, approved Subprocessors may process Customer Personal Data as necessary to deliver the Services.
ServeusAI maintains and periodically reviews its list of approved Subprocessors.
Customers may obtain the current Subprocessor List through the Trust Center or as part of the applicable Data Processing Agreement.
When Customers use AI-assisted functionality, relevant Customer Content may be transmitted to approved AI providers solely for the purpose of generating the requested response.
ServeusAI does not authorize AI providers to process Customer Content for purposes unrelated to providing the requested AI functionality.
Additional information regarding AI processing is provided in the Data Processing Agreement and Security Overview.
Access to Personal Data within ServeusAI is limited to personnel who require access to perform their assigned responsibilities.
Examples include:
Access is granted according to the principles of least privilege and need-to-know.
ServeusAI may disclose Personal Data where required by applicable law or where disclosure is reasonably necessary to:
Where legally permitted, we will seek to limit the scope of any disclosure.
If ServeusAI becomes involved in a merger, acquisition, investment, reorganization or sale of assets, Personal Data may be transferred as part of that transaction.
Where appropriate, Personal Data will continue to be protected under obligations substantially consistent with this Privacy Policy.
Affected individuals will be informed where required by applicable law.
ServeusAI may disclose Personal Data to trusted professional advisors where necessary for legitimate business purposes.
These may include:
Such disclosures are limited to information reasonably necessary for the relevant purpose.
ServeusAI does not:
ServeusAI shares Personal Data only where necessary to provide the Services, comply with legal obligations or support legitimate business operations.
Third-party providers are carefully selected, contractually managed and periodically reviewed as part of our information security and supplier management programs.
ServeusAI primarily provides its Services from infrastructure located within the European Economic Area (EEA).
However, due to the global nature of cloud computing and artificial intelligence services, certain Personal Data may be transferred to or processed outside the EEA.
Where such transfers occur, ServeusAI implements appropriate safeguards in accordance with Chapter V of the GDPR.
The Minerva platform is primarily hosted within Microsoft Azure in the West Europe region.
Customer Content and production workloads are generally stored within Microsoft Azure infrastructure located in the European Economic Area.
When Customers use AI-assisted functionality, relevant Customer Content may be processed by approved AI providers.
Depending on the selected provider and available infrastructure, this processing may occur outside the European Economic Area.
Such transfers occur only to provide the AI functionality requested by the Customer.
Where Personal Data is transferred internationally, ServeusAI relies on one or more appropriate safeguards, which may include:
Before engaging third-party providers that may process Personal Data internationally, ServeusAI considers factors including:
Supplier assessments form part of ServeusAI's ongoing vendor management program.
Where ServeusAI acts as a Data Processor, international transfers of Customer Content occur only as necessary to provide the Services and in accordance with the applicable Data Processing Agreement.
Customers remain responsible for determining whether such transfers are appropriate for their own regulatory obligations.
ServeusAI continuously monitors developments relating to international data transfers, including changes to applicable legislation, regulatory guidance and court decisions.
Where necessary, our contractual arrangements and operational practices will be updated to maintain compliance with applicable data protection laws.
ServeusAI is committed to ensuring that international transfers of Personal Data are conducted lawfully and securely.
Where Personal Data is transferred outside the European Economic Area, appropriate contractual and organizational safeguards are implemented to protect the rights and freedoms of individuals in accordance with the GDPR.
ServeusAI retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, to provide the Services, comply with legal obligations, resolve disputes and enforce contractual rights.
Retention periods vary depending on the category of information, the applicable contractual relationship and relevant legal or regulatory requirements.
Where Personal Data is no longer required, it is securely deleted or anonymized where appropriate.
Customer Content uploaded to the Minerva platform is retained for the duration of the Customer's subscription or other applicable contractual relationship.
Upon termination or expiration of the Agreement:
Information relating to user accounts is retained for as long as the account remains active.
Following account closure, certain account information may be retained where necessary to:
Information no longer required for these purposes is securely deleted or anonymized.
Operational, security and application logs are retained for a limited period to support:
Unless a longer retention period is required for security, legal or regulatory purposes, operational logs are generally retained for approximately ninety (90) days.
Customer support records, including support tickets and related communications, may be retained to:
Support records are retained only for as long as reasonably necessary for these purposes.
ServeusAI retains accounting, invoicing and financial records for the periods required by applicable tax, accounting and commercial legislation.
These retention periods are determined by applicable legal requirements and may extend beyond the duration of the contractual relationship.
Where Personal Data is processed for marketing purposes based on consent, the information will be retained until:
Withdrawal of consent does not affect processing that occurred prior to the withdrawal.
Backups are maintained to support business continuity and disaster recovery.
Backup copies are:
Backup data is not maintained indefinitely.
ServeusAI may retain Personal Data beyond normal retention periods where necessary to:
Where a legal hold applies, deletion may be delayed until the relevant obligation has been satisfied.
When Personal Data reaches the end of its retention period, ServeusAI applies appropriate deletion procedures.
Depending on the nature of the information, deletion may include:
Deletion procedures are designed to reduce the risk of unauthorized recovery.
Retention periods are periodically reviewed to ensure they remain:
Where appropriate, retention schedules are updated as part of ServeusAI's information governance program.
ServeusAI retains Personal Data only for as long as necessary to provide the Services, fulfil contractual commitments and comply with applicable legal obligations.
Once Personal Data is no longer required, it is securely deleted or anonymized using documented operational procedures.
Individuals whose Personal Data is processed by ServeusAI may have certain rights under the General Data Protection Regulation (GDPR) and other applicable data protection laws.
The availability of these rights depends on the circumstances of the processing and whether ServeusAI is acting as a Data Controller or a Data Processor.
Where ServeusAI processes Personal Data solely on behalf of a Customer, requests relating to Customer Content should generally be directed to the relevant Customer acting as the Data Controller.
You may request confirmation as to whether ServeusAI processes your Personal Data.
Where applicable, you may also request access to:
You have the right to request that inaccurate or incomplete Personal Data be corrected.
ServeusAI will take reasonable steps to update inaccurate information where we are responsible for the processing.
In certain circumstances, you may request the deletion of your Personal Data.
This right may apply where:
This right is subject to legal and contractual limitations.
You may request that processing of your Personal Data be restricted in circumstances permitted under applicable law.
During a period of restriction, Personal Data may continue to be stored but will generally not be otherwise processed except where permitted by law.
Where processing is based on consent or contract and carried out by automated means, you may request a copy of your Personal Data in a structured, commonly used and machine-readable format where required by applicable law.
You may object to certain processing activities based on legitimate interests.
Where a valid objection is received, ServeusAI will cease the relevant processing unless compelling legitimate grounds exist or the processing is otherwise permitted by law.
Where processing is based on consent, you may withdraw that consent at any time.
Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
If you believe that your Personal Data has been processed in violation of applicable data protection laws, you have the right to lodge a complaint with the competent supervisory authority.
Where possible, we encourage individuals to contact ServeusAI first so that we may seek to resolve concerns directly.
Requests relating to privacy rights may be submitted using the contact information provided in this Privacy Policy.
To protect Personal Data from unauthorized disclosure, ServeusAI may request additional information necessary to verify the identity of the individual submitting the request.
Requests will be handled within the timeframes required by applicable law.
Where Personal Data forms part of Customer Content uploaded to Minerva, ServeusAI generally acts solely as a Data Processor.
Accordingly, requests relating to:
should normally be directed to the relevant Customer responsible for determining the purposes and means of processing.
ServeusAI will assist Customers in responding to such requests where required under the applicable Data Processing Agreement.
ServeusAI respects the privacy rights of individuals and is committed to supporting the exercise of those rights in accordance with applicable data protection legislation.
Where ServeusAI acts as a Data Controller, requests are handled directly. Where ServeusAI acts as a Data Processor, we assist our Customers in fulfilling their legal obligations.
ServeusAI is committed to protecting Personal Data through appropriate technical and organizational measures designed to safeguard the confidentiality, integrity and availability of information.
Our security program is based on recognized industry practices and is continuously reviewed and improved as our products, technologies and regulatory obligations evolve.
ServeusAI implements security measures including, where appropriate:
These controls are intended to reduce the likelihood of unauthorized access, disclosure, alteration or destruction of Personal Data.
Information security is supported through documented policies and operational procedures covering areas including:
Security responsibilities are assigned to appropriate personnel within the organization.
ServeusAI continuously reviews its security controls through:
ServeusAI currently uses Vanta to support security governance, evidence collection and continuous compliance monitoring as part of its preparation for ISO/IEC 27001 certification.
At the time of publication of this Privacy Policy, the organization is actively preparing for certification and continues to enhance its Information Security Management System (ISMS).
ServeusAI maintains documented procedures for identifying, investigating and responding to security incidents.
Where required by applicable law or contractual commitments, affected Customers will be notified of Security Incidents involving Personal Data without undue delay.
Additional information regarding our security practices is available in the ServeusAI Security Overview.
Protecting Personal Data is a fundamental component of ServeusAI's operations.
Through technical safeguards, organizational controls and continuous improvement of our security program, we seek to maintain an appropriate level of protection for the information entrusted to us.
The Services provided by ServeusAI, including the Minerva platform, are designed exclusively for business and professional use.
Our Services are not intended for use by children and are not directed toward individuals under the age of eighteen (18), or any higher minimum age required under applicable law.
ServeusAI does not knowingly collect Personal Data directly from children.
ServeusAI does not intentionally:
Our websites, products and services are intended for organizations, businesses and professional users.
Customers are responsible for ensuring that the information they upload to the Minerva platform complies with applicable laws and internal policies.
If Customer Content contains Personal Data relating to children, the Customer remains responsible for:
ServeusAI processes such information solely on the documented instructions of the Customer when acting as a Data Processor.
If ServeusAI becomes aware that Personal Data has been collected directly from a child in circumstances where such collection was not intended or permitted, we will take reasonable steps to:
ServeusAI does not knowingly collect Personal Data directly from children and provides its Services exclusively for business and professional users.
ServeusAI may update this Privacy Policy from time to time to reflect changes in:
We encourage users to review this Privacy Policy periodically to remain informed about how Personal Data is processed.
Where changes are material, ServeusAI may provide notice through one or more of the following methods:
The method of notification will depend on the nature and significance of the changes.
The "Effective Date" shown at the beginning of this Privacy Policy indicates when the current version became effective.
The "Last Updated" date reflects the most recent revision.
Continued use of the Services after an updated Privacy Policy becomes effective constitutes acknowledgment of the revised Policy, except where applicable law requires additional consent.
ServeusAI may retain previous versions of this Privacy Policy for internal governance, audit and compliance purposes.
Historical versions may be made available upon reasonable request where appropriate.
Privacy requirements evolve over time.
ServeusAI is committed to maintaining an accurate, transparent and up-to-date Privacy Policy that reflects our current data protection practices.
Questions regarding this Privacy Policy or the processing of Personal Data may be directed to ServeusAI using the contact information published on our website.
Privacy-related enquiries may include:
Customers requiring assistance with the Minerva platform should contact the ServeusAI support team using the support channels provided within the Services or through our website.
Support requests involving Customer Content may require verification of the requester's identity and authority.
Individuals wishing to report suspected security vulnerabilities or security incidents are encouraged to use the security contact details published within the ServeusAI Trust Center.
ServeusAI investigates reported security issues in accordance with its documented Incident Response procedures and Responsible Disclosure Policy.
Individuals located within the European Economic Area have the right to lodge a complaint with the competent supervisory authority if they believe that the processing of their Personal Data infringes applicable data protection legislation.
Nothing in this Privacy Policy limits any statutory rights available under applicable law.
Additional information regarding ServeusAI's privacy and security practices is available through the ServeusAI Trust Center, including:
The current contact information for ServeusAI is available on the official website.
Where dedicated contact addresses are established for privacy, security or compliance matters, this Privacy Policy and the Trust Center will be updated accordingly.
ServeusAI is committed to protecting the privacy, confidentiality and security of Personal Data entrusted to us by our Customers, users and business partners.
We believe that responsible data protection is an essential component of trustworthy AI services. Through transparent governance, strong technical and organizational safeguards, continuous security improvements and ongoing compliance efforts, we strive to ensure that Personal Data is processed lawfully, fairly and securely throughout its lifecycle.
As our Services and regulatory obligations continue to evolve, ServeusAI will continue to enhance its privacy program to maintain the trust placed in us by our Customers and stakeholders.