Privacy Policy

Who we are

World AI X ("World AI X", "we", "us") builds and operates AI-native enterprises with its clients through World AI OS. We have teams in Vancouver (Canada), Larnaca (Cyprus) and Riyadh (Saudi Arabia). We are responsible for the personal information described in this policy.

Privacy questions and requests: hello@worldaix.com. This address is also our point of contact for privacy matters.

Information we collect

We collect only what we need to respond to you and to operate the website.

• Information you give us. When you submit the contact form we receive your work email, first and last name, job title, phone number, company, industry, company size, country and message. If you email us, book a call or apply for a role, we receive what you send.
• Booking details. If you schedule a call through our Calendly link, Calendly collects your name, email and chosen time and shares them with us.
• Technical data. Our hosting provider and the third-party services used to display the site process your IP address, browser type, device type, pages requested and timestamps in server logs, for security and delivery.
• Preferences stored in your browser. We store your light or dark display choice in your browser's local storage. It stays on your device.
• Page of origin. The contact form records which page you submitted it from, so we can route your request.

We do not knowingly collect sensitive personal information. Please do not include confidential business data, credentials, health or financial account details in the contact form. At the time of writing the website does not use advertising cookies, analytics trackers or social-media pixels. If that changes, we will update this policy and, where required, ask for your consent first.

How we use information

• To reply to enquiries, arrange meetings and scope Discovery Sprints or other engagements.
• To evaluate and respond to job applications.
• To operate, secure and improve the website, and to prevent abuse.
• To send follow-up messages that relate to your request. We send marketing or newsletter emails only where you have asked for them or where applicable law permits, and each message lets you opt out.
• To meet legal, accounting and regulatory obligations and to establish or defend legal claims.

Legal bases (EEA, UK and similar regimes)

Where the GDPR or UK GDPR applies, we rely on: your consent when you submit a form or ask us to contact you; steps taken at your request before a contract when you ask about our services; our legitimate interests in running and securing the website, responding to business enquiries and developing our services, balanced against your rights; and legal obligation where the law requires us to keep or disclose information. You may withdraw consent at any time.

Who we share it with

We do not sell personal information and we do not share it for cross-context behavioural advertising. We share it only with:

• Service providers that host the website and process enquiries on our behalf, including Netlify (hosting), Google (Workspace, Sheets and email, used to store and receive form submissions; Google Fonts, used to display typefaces), Calendly (scheduling) and Typeform (application and intake forms linked from the site). They may use the information only to provide their service to us.
• Affiliated World AI X teams who need it to handle your request.
• Professional advisers, regulators and authorities where required by law or to protect rights and safety.
• A successor in a merger, financing or sale of the business, subject to equivalent protection of the information.

International transfers

We operate across Canada, Cyprus, Saudi Arabia and the wider Gulf, and our providers store data in several countries, including the United States and the European Union. Your information may therefore be processed outside your country of residence, where data-protection laws can differ. Where required, we use safeguards such as standard contractual clauses or an adequacy decision, and we require providers to protect the information to a comparable standard.

How long we keep it

• Contact-form and email enquiries: up to 24 months after our last contact with you, then deleted or anonymised, unless an engagement or legal obligation requires longer.
• Job applications: up to 12 months after the role is filled, unless you ask us to keep your details for future roles.
• Server logs: kept for a short period set by our hosting provider, usually no more than 90 days.
• Records needed for contracts, tax and accounting: for the period the law requires.

Your rights

Depending on where you live, you may have the right to:

• access the personal information we hold about you and receive a copy;
• correct information that is inaccurate or incomplete;
• delete your information, or restrict or object to our processing;
• withdraw consent you have given, without affecting earlier processing;
• receive your information in a portable format (GDPR);
• opt out of the sale or sharing of personal information (California). We do neither;
• not be discriminated against for exercising your rights.

To use any of these rights, email hello@worldaix.com. We may need to verify your identity and will respond within the time the law allows, generally within 30 days. You can also complain to your regulator: in Canada, the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner for British Columbia; in Cyprus, the Office of the Commissioner for Personal Data Protection; in Saudi Arabia, the Saudi Data and AI Authority (SDAIA); elsewhere, your local data-protection authority.

Security

We use technical and organisational measures appropriate to the sensitivity of the information, including encrypted connections (HTTPS), access controls on the systems that store enquiries and restricted internal access. No method of transmission or storage is completely secure. If a breach creates a real risk of significant harm, we will notify affected people and regulators as the law requires.

Children

The website is directed to business audiences and is not intended for anyone under 16. We do not knowingly collect information from children. If you believe a child has sent us information, contact us and we will delete it.

Links to other sites

The site links to third-party websites and services, including World AI University (waiu.org), LinkedIn and X. Their privacy practices are their own, and this policy does not cover them.

Changes to this policy

We may update this policy to reflect changes in our practices or the law. The date at the top shows the latest revision. For material changes we will make a prominent notice on the website.