Privacy Policy

Who we are

Core9 (“we”, “us”) runs core9.ai, including the Insights blog and the Toolkit. We decide how and why the personal data described here is used, and we are responsible for it.

We are based at 1st Floor, Office #4, DHA Business Hub Phase 8, Lahore, Pakistan, with offices in Riyadh, Saudi Arabia and Jakarta, Indonesia. You can reach us about anything in this policy at hello@core9.ai.

This policy covers our website. Data that our products (DriveSense, VISOR and illytical) process for our customers is governed by our agreements with those customers.

What we collect and why

We only collect what we need for each purpose below.

When you book a demo

Your first name, work email, company, phone number and message if you add them, and the page you sent the form from. We use them to respond to your request, arrange the demo and follow up about it. We process this data because you asked us to contact you.

When you use the Toolkit

The calculators run in your browser, and your inputs stay there unless you ask us to email you a report or request a pilot plan. In that case we receive your email address, any name, company and phone number you give, your answers in the tool, and the page you used. We use them to send what you asked for and to follow up about it.

When you accept analytics cookies

Google Analytics records which pages you visit, how you arrived, your device and browser type, your approximate location and how you use the site. We use this to understand which content is useful and to improve the site. This only happens with your consent, which you can withdraw at any time.

When you visit the site

Our web server records technical details such as your IP address, browser and the time of each request, as any website does. When you send a form, we keep a scrambled (hashed) form of your IP address to stop the same sender flooding our forms. We use this data to keep the site secure and working.

When you email us

Your email address and whatever you include in your message, which we use to reply.

We do not ask for sensitive personal data, and we do not use your data for automated decisions that affect you.

Cookies

Cookies are small files a website stores in your browser. We use as few as possible.

• Analytics cookies, only if you accept: Google Analytics sets _ga and _ga_* to tell visits apart. They last up to two years.
• Your cookie choice: we remember whether you accepted or declined in your browser’s storage, so we don’t ask on every page.
• Page transitions: a short-lived value in your browser’s session storage makes moving between pages smoother. It is removed when you close the tab.

We do not use advertising cookies. You can change your choice at any time with Cookie settings, also linked at the bottom of every page. Declining removes our analytics cookies from your browser. You can also block or delete cookies in your browser settings.

Who we share it with

We do not sell your personal data. We share it only with service providers who help us run the website and handle enquiries, under contracts that limit how they can use it:

• HubSpot stores demo requests and helps us manage our contact with you.
• Google provides Google Analytics, if you accept analytics cookies.
• GoDaddy hosts our website and the database that stores Toolkit requests.

We may also share data with our professional advisers, or with authorities when the law requires it.

International transfers

Our service providers may store or process your data outside your country, including in the United States and Europe. When that happens, we rely on the safeguards these providers offer, such as standard contractual clauses, and we transfer only what is needed for the purposes in this policy.

How long we keep it

• Demo requests and Toolkit requests: up to 24 months after our last contact with you, unless you become a customer, in which case our agreement with your company applies.
• Analytics data: no longer than 14 months.
• Server logs and hashed IP addresses: only as long as needed for security.

After that we delete the data or make it anonymous.

How we protect it

The site is served only over encrypted connections (HTTPS). Access to enquiries is limited to the people at Core9 who need it, and our admin systems are protected by strong passwords and login limits. No system is completely secure, so if a breach affects your data, we will tell you and the relevant authorities as the law requires.

Your rights

Depending on where you live, you can ask us to:

• tell you what personal data we hold about you, and give you a copy;
• correct data that is wrong or incomplete;
• delete your data when we no longer need it;
• stop using your data, or stop contacting you;
• withdraw your consent at any time, without affecting what we did before.

Email hello@core9.ai and we will reply within 30 days. We may need to confirm your identity first.

Marketing

We only send you marketing emails if you have agreed to receive them. Every marketing email includes a way to unsubscribe, and you can also ask us to stop at any time.

Children

Our website is for businesses. It is not meant for anyone under 18, and we do not knowingly collect their personal data.

Changes to this policy

We will update this policy when our practices or the law change, and show the new date at the top of this page. If a change is significant, we will make it clear on the website.