Privacy policy

1 — Introduction and privacy commitment

At the Iris engine we commit to protecting the privacy of user data. This policy explains how text or technical documents you submit are collected, processed, stored, and protected.

2 — Data we collect

User inputs: any text or files you provide so the engine can analyze or process them.

Usage data: interaction metadata (device type, region, timestamps, inquiry types) to improve reliability and security.

Identity data: when registering we may collect phone number, name, email, country, and professional affiliation.

3 — Why we process data

To deliver responses and analyses you request.

To develop and improve Iris AI capabilities unless you decline model-training use.

To secure the platform against unauthorized activity.

4 — Security

Encryption protects data in transit and at rest with industry-standard protocols.

Humans review user content only in narrow technical-support cases with explicit authorization.

5 — Model training

You may opt out of having your proprietary data reused to train future Iris versions by contacting Potoo.

When permitted data feeds training pipelines, identifiers are aggregated or pseudonymized to reduce re-identification risk.

6 — Sharing with processors

We do not sell user data for advertising.

We may rely on audited cloud processors under strict contractual privacy obligations.

7 — Your rights

Depending on jurisdiction you may:

• Access your recorded profile via the platform.
• Ask for deletion or “right to be forgotten” via the app or Potoo privacy mailbox.
• Object to certain processing grounds.

8 — Governing law

This policy is construed under the governing law applicable where the Iris engine is contracted (such as Iraq or Egypt for regional engagements) while aligning with GDPR principles whenever international audiences are onboarded.

Parent company

Potoo — Potoo blends modern web engineering with applied AI—building platforms anchored by Iris while meeting professional-grade compliance expectations.