Privacy Policy

This Privacy Policy explains how WEBSPACEAI ("WEBSPACEAI," "we," "us," or "our") collects, uses, discloses, and protects personal data when individuals use AnswerAI, WSAI CODE, Trainer One, WEBSPACEAI Cloud, and other WEBSPACEAI products (collectively, the "Services").

Applies to all visitors, registered users, enterprise customers, and API developers interacting with WEBSPACEAI Services worldwide, regardless of jurisdiction.

• Personal Data — information relating to an identified or identifiable natural person.
• Processing — any operation performed on Personal Data.
• Controller / Processor — as defined under GDPR Article 4; see also the Data Processing Addendum Doc. 6.
• Training Data Opt-Out — a user election excluding their content from model training or fine-tuning datasets.
• Verifiable Unlearning — a documented technical process demonstrating that opted-out or deleted data has been excluded from, or removed from the influence of, trained model weights and derivative fine-tuning datasets, to the extent technically feasible.

WEBSPACEAI collects account information, usage data (prompts, outputs, session metadata), device/log data, and voluntarily submitted content. Data is used to provide, secure, and improve Services, comply with legal obligations, and communicate with users. WEBSPACEAI does not sell personal data.

⟳Default Training Posture Consumer-tier accounts default to no model training on user content. Users may opt in to contribute content to training via explicit account settings. Enterprise and API customers default to no training regardless of tier, consistent with the Data Processing Addendum.

⟳Verifiable Unlearning Commitment Where a user opts out of training or requests deletion, WEBSPACEAI commits to: (a) excluding the content from all future training runs within 30 days; (b) documenting exclusion in the training data pipeline's audit log; (c) where content has already influenced a released model and exact weight-level removal is not technically feasible, applying best-available mitigation (fine-tuning exclusion, output filtering, or model retraining at the next scheduled cycle) and disclosing this limitation to the user upon request. This directly addresses GDPR Article 17 (right to erasure) and storage limitation principles.

International transfers rely on Standard Contractual Clauses or equivalent mechanisms.

Chief Privacy Officer owns this policy. Product implements privacy-by-design and default no-training settings. Engineering maintains the unlearning pipeline and audit logs. DPO oversees regulatory compliance.

Aligns with GDPR, CCPA/CPRA, India's DPDP Act, and the EU AI Act's data governance provisions for training data (Article 10). Annual privacy impact assessments required for new data-processing features. Unlearning pipeline is audited semi-annually by Security.

Non-compliance results in disciplinary action up to termination; vendor violations result in access revocation.

Data rights requests: privacy@webspaceai.in. Acknowledged within 5 business days; resolved within 30 days.

Exceptions require written approval from CPO and Legal, documented with risk justification and a remediation timeline not exceeding 60 days.

Reviewed every 6 months (increased from annual) given evolving training-data regulation, or upon material regulatory change.

privacy@webspaceai.in | dpo@webspaceai.in | https://webspaceai.in/trust