PRIVACY
POLICY

1. INTRODUCTION

Perfect Paradox Ltd ("Company", "we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal data when you visit our website at perfectparadox.co.uk (the "Website") and when you use our buy-once Mac apps.

Perfect Paradox delivers software in four ways, and the privacy position differs for each:

• — (1) Cloud AI (bring your own key) — Mac apps that use your own AI provider key. Your data goes wherever you direct it; it never passes through Perfect Paradox. One-time purchase.
• — (2) Self-hosted — software you run on your own server. Your data never leaves your infrastructure. One-time purchase.
• — (3) Hosted by us — services we host on your behalf, such as C0RTEX (web chat) and SYN4PSE (voice; coming soon). A private, isolated, encrypted instance, on a cancellable monthly subscription. Here Perfect Paradox acts as data processor — see Section 5A.
• — (4) Local — apps that run entirely on your Mac; your files do not leave the device. One-time purchase.

This Website-and-apps policy applies to models (1), (2) and (4) and to this Website. For the Hosted model (3), the controller/processor split and the full detail are governed by the product-specific Privacy Policy and Data Processing Agreement (see Section 5A).

This policy is issued in compliance with:

• — The UK General Data Protection Regulation (UK GDPR)
• — The Data Protection Act 2018
• — The Privacy and Electronic Communications Regulations 2003 (PECR)

For personal data we collect through this Website and our buy-once apps, Perfect Paradox Ltd is the data controller. For data inside a Hosted instance, the customer is the controller and Perfect Paradox is the processor (Section 5A).

2. WHAT DATA WE COLLECT

2.1 Data You Provide Directly

If you contact us via email (info@perfectparadox.co.uk or legal@perfectparadox.co.uk), we collect:

• — Your email address
• — Your name (if provided)
• — The content of your message

Lawful basis: Legitimate interest (Art. 6(1)(f)) — responding to your enquiry.

2.2 Data Collected Automatically

When you visit this Website, our hosting provider may automatically collect:

• — IP address (anonymised where possible)
• — Browser type and version
• — Pages visited and time spent
• — Referring website
• — Device type and operating system

Lawful basis: Legitimate interest (Art. 6(1)(f)) — website security and performance monitoring.

2.3 Data We Do NOT Collect

On this Website and in our buy-once Mac apps (the Cloud AI, Self-hosted, and Local models), we do not:

• — Require user registration or accounts
• — Process payments ourselves (subscription payments for Hosted services are handled by Paddle as Merchant of Record — see Section 5)
• — Use advertising or third-party tracking
• — Collect sensitive personal data (health, biometric, political, etc.)
• — Profile visitors for marketing purposes

Important: the statements above do not apply to our Hosted services (C0RTEX, SYN4PSE). Hosted services necessarily involve an account, a monthly subscription, and the processing of customer and end-user data within a private instance. See Section 5A and the product-specific Privacy Policy and DPA.

3. COOKIES

3.1 What Cookies We Use

This Website uses only strictly necessary cookies. We do not use analytics cookies, advertising cookies, or third-party tracking cookies.

If we add analytics cookies in the future, we will update this policy and display a consent banner before loading any non-essential cookies.

3.2 How to Manage Cookies

You can control cookies through your browser settings. Blocking strictly necessary cookies may affect website functionality.

4. HOW WE USE YOUR DATA

We use your personal data for:

• — (a) Responding to your enquiries via email
• — (b) Maintaining and securing this Website
• — (c) Complying with applicable laws and regulations

We do NOT use your data for advertising, profiling, selling to third parties, or automated decision-making.

5. DATA SHARING

We do not sell, rent, or trade your personal data. We may share data with:

5A. HOSTED SERVICES (C0RTEX, SYN4PSE)

For our Hosted products — C0RTEX (web chat) and SYN4PSE (voice; coming soon) — Perfect Paradox hosts a private, isolated instance for each customer and operates it on their behalf. In this model the roles are different from the rest of this policy:

• — The customer is the data controller of the data inside their instance (their knowledge base, end-user conversations, and any data derived from them).
• — Perfect Paradox is the data processor for that data, processing it only on the customer's documented instructions to provide the service, under a Data Processing Agreement (Article 28 UK GDPR).

Within a Hosted instance, customer and end-user data is held in a private, isolated, encrypted instance. It is never sold, never shared for advertising, and never used to train general-purpose AI models. We engage sub-processors (for example our hosting and, where applicable, LLM/AI providers) only under written contracts with equivalent data-protection obligations.

If you are an end user (for example, a visitor chatting on a business's website powered by C0RTEX), the business operating that instance is the controller of your data — please consult their own privacy notice.

For the full detail of the Hosted regime — including the complete list of sub-processors, international-transfer mechanisms, retention, security measures, and data-subject rights handling — see the C0RTEX product documents rather than relying on this page:

• — C0RTEX Privacy Policy
• — C0RTEX Data Processing Agreement

SYN4PSE (voice) will involve call handling, call recording, and speech-to-text transcription, and will be subject to additional privacy terms and consent requirements (including under PECR) before it launches.

6. DATA RETENTION

7. YOUR RIGHTS UNDER UK GDPR

You have the following rights regarding your personal data:

• — Right of Access (Art. 15) — Request a copy of the personal data we hold about you.
• — Right to Rectification (Art. 16) — Request correction of inaccurate or incomplete data.
• — Right to Erasure (Art. 17) — Request deletion of your personal data.
• — Right to Restrict Processing (Art. 18) — Request that we limit how we process your data.
• — Right to Data Portability (Art. 20) — Request your data in a machine-readable format.
• — Right to Object (Art. 21) — Object to processing based on legitimate interests.

To exercise any of these rights, email legal@perfectparadox.co.uk. We will respond within one month.

8. DATA SECURITY

For this Website and our buy-once apps, we implement appropriate measures to protect your data, including:

• — HTTPS/TLS encryption on all website traffic
• — Secure email provider with encryption at rest
• — Access restricted to authorised personnel only

The technical and organisational measures applicable to our Hosted services (including tenant isolation, encryption at rest, role-based access, and incident response) are set out in the C0RTEX Data Processing Agreement (see Section 5A).

If we discover a data breach involving your personal data, we will notify the ICO within 72 hours and notify you within 48 hours if the breach poses a high risk to your rights.

9. INTERNATIONAL DATA TRANSFERS

Our hosting provider (Hostinger) may process data in the European Economic Area. Where data is transferred outside the UK, we ensure appropriate safeguards are in place (Standard Contractual Clauses or adequacy decisions approved by the ICO).

10. CHILDREN'S PRIVACY

This Website is not directed at children under 16 years of age. We do not knowingly collect personal data from children under 16.

11. CHANGES TO THIS POLICY

We may update this policy from time to time. The "Last Updated" date at the top indicates the most recent revision. Material changes will be clearly indicated on this page.

12. COMPLAINTS

If you are unsatisfied with how we handle your data, you may lodge a complaint with the Information Commissioner's Office:

We encourage you to contact us first at legal@perfectparadox.co.uk so we can try to resolve your concern directly.

13. CONTACT US