← Back to Legal & Compliance

Privacy Policy

Armour Consortium AI - Cart Recovery API
Effective Date: December 2025 | Last Updated: December 2025

1. Who We Are

Armour Consortium AI operates the Cart Recovery API, an AI-powered service that generates personalised cart recovery content for e-commerce businesses.

Contact:
Email: hello@armourconsortium.ai
Website: https://armourconsortium.ai


2. Scope of This Policy

This policy covers:


3. Data We Process

3.1 API Data (Processor Role)

When merchants use our API, we process data they submit:

Data TypeExamplesPurposeRetention
Customer IdentifiersEmail, phone, first nameContent personalisationNone - transient only
Transaction DataCart value, products, currencyMessage contextNone - transient only
Consent FlagsMarketing preferencesCompliance enforcementNone - transient only

Important: We do not store any customer personal data. All processing is transient (milliseconds).

3.2 Website Data (Controller Role)

When you visit our website:

Data TypePurposeRetentionLawful Basis
Contact form submissionsResponding to enquiries2 yearsConsent
Waitlist signupsProduct launch notificationsUntil unsubscribeConsent
Analytics (anonymised)Service improvement26 monthsN/A (non-personal data)

3.3 Subscription Customer Data

For Subscription based customers:

Data TypePurposeRetention
Account detailsService provisionDuration of contract + 6 years
Payment informationBilling (via Stripe)Handled by Stripe
Usage analyticsService provision, billing verification, performance monitoringDuration of contract + 6 years

4. Legal Bases for Processing (UK/EU)

Processing ActivityLawful BasisReference
API content generationContract performance (with merchant)Art. 6(1)(b)
Marketing to subscribersConsentArt. 6(1)(a)
Billing and accountsLegal obligationArt. 6(1)(c)

5. Cookies and Tracking

We do not use cookies on our marketing website.


6. Data Sharing

6.1 Sub-Processors (API)

For content generation, data processed by:

See Sub-Processor List for details.

6.2 Service Providers

6.3 Legal Requirements

We may disclose data if required by law or to protect our legal rights.


7. International Transfers

Where data is transferred outside the UK/EEA:


8. Your Rights (UK/EU)

Under UK GDPR and EU GDPR, you have the right to:

RightDescriptionHow to Exercise
AccessRequest copies of your dataEmail us
RectificationCorrect inaccurate dataEmail us
ErasureRequest deletion (where applicable)Email us
RestrictionLimit how we use your dataEmail us
PortabilityReceive data in machine-readable formatEmail us
ObjectObject to processing based on legitimate interestsEmail us
Withdraw ConsentWhere processing is based on consentEmail us or unsubscribe link

Response Time: Within 30 days (extendable by 60 days for complex requests).

Contact: hello@armourconsortium.ai


9. California Privacy Rights (CCPA/CPRA)

California residents have additional rights:

9.1 Right to Know

You may request:

9.2 Right to Delete

You may request deletion of personal information we hold, subject to exceptions.

9.3 Right to Opt-Out of Sale

We do not sell personal information. We do not share personal information for cross-context behavioural advertising.

9.4 Right to Non-Discrimination

We will not discriminate against you for exercising your privacy rights.

9.5 How to Exercise CCPA Rights

Email: hello@armourconsortium.ai
Subject: "CCPA Request"

We will verify your identity before fulfilling requests.


10. CAN-SPAM Compliance (USA)

For any commercial emails we send:

Our Address:
Armour Consortium AI
United Kingdom


11. Data Security

We implement appropriate security measures:

See Security Measures for details.


12. Data Retention

Data TypeRetention Period
API request dataNone - transient processing
Website contact forms2 years
Subscription accountsContract duration + 6 years
Anonymised analytics26 months

13. Children's Privacy

Our services are not directed at individuals under 18. We do not knowingly collect data from children.


14. Changes to This Policy

We may update this policy periodically. Material changes will be notified via:

Check the "Last Updated" date for the current version.


15. Complaints

If you have concerns about our data practices:

  1. Contact us first: hello@armourconsortium.ai
  2. UK ICO: ico.org.uk (if unsatisfied with our response)
  3. EU DPAs: Your local supervisory authority

16. Contact Us

Armour Consortium AI
Email: hello@armourconsortium.ai
Website: https://armourconsortium.ai

This policy applies to all services offered by Armour Consortium AI.