Last updated: Nov 18, 2025
Burnt Group, Corp. is committed to processing personal data in a lawful, fair, and transparent manner. This privacy notice explains how we collect, use, store, protect, and share personal data when individuals use our website and our artificial intelligence software products (the “Services”). Burnt acts as a Data Controller for personal data we collect directly and as a Data Processor for customer submitted data processed within our platform.
Personal Data We Collect
We collect only the personal data necessary to operate, secure, and improve the Services. This includes identifiers such as name, work email address, job title, and company affiliation. We also process account credentials, authentication information, and content submitted for AI processing. Automatically collected data includes IP addresses, device and browser information, usage logs, timestamps, and cookie data used for authentication and security. Payment information is handled by third party providers and is never stored by Burnt.
Legal Basis for Processing
We process personal data to perform our contractual obligations and provide the Services. We also rely on legitimate interest for platform security, fraud prevention, analytics, support operations, and business to business outreach. Consent is used for optional communications or non essential cookies. In limited cases, we process personal data to comply with legal obligations.
How We Use Personal Data
We use personal data to operate, maintain, and improve the Services; to provide customer support; to secure and monitor platform activity; to develop new features; to prevent fraud and misuse; to communicate updates; and to comply with applicable laws. Burnt does not sell personal data and does not use customer submitted content to train public or shared machine learning models.
Sharing and Disclosure
We share personal data only under controlled conditions and with verified service providers who act under our instructions and are bound by Data Processing Agreements. We may disclose personal data to comply with legal obligations, protect safety and security, or when you direct us to do so. A list of sub processors is available on request.
International Transfers
Some personal data may be transferred outside the European Economic Area due to our use of global cloud providers. These transfers rely on Standard Contractual Clauses, adequacy decisions, or other GDPR approved safeguards. All transfers are subject to transfer impact assessments and technical protections such as encryption.
Retention
We retain personal data only for as long as necessary to fulfill the purposes outlined in this notice or to meet contractual and legal requirements. Retention periods vary depending on the type of data. Users may request deletion unless retention is required by law.
Data Subject Rights
Individuals have the right to access, correct, delete, or restrict their personal data; to object to processing based on legitimate interests; to request portability; and to withdraw consent for processing that relies on consent. Individuals also have the right to lodge a complaint with their Data Protection Authority. Requests can be submitted at support@getburnt.ai.
Cookies
We use essential cookies required for authentication and secure operation of the Services. Optional cookies for analytics or personalization are only used with consent. A separate Cookie Policy is available on request.
Automated Decision Making
We do not perform automated decision making that produces legal or similarly significant effects. Our AI features assist users by generating insights based on content provided, but the user always retains control over decisions and outputs.
Security Measures
We maintain technical and organizational safeguards designed to protect personal data. These measures include encryption in transit and at rest, access controls, least privilege permissions, monitoring, logging, and incident response procedures. We regularly review and improve our security posture.
Children’s Data
Burnt does not knowingly collect or process personal data from children. The Services are intended exclusively for professional use by individuals acting on behalf of their employer or organization. If children’s data is ever submitted in error, it is removed promptly.
Contact Information
For questions about this privacy notice or data protection practices, individuals may contact us at support@getburnt.ai or at our registered business address. If required, we will appoint a Data Protection Officer and an EU representative.
Changes to This Privacy Notice
We may update this privacy notice when necessary to reflect product changes or legal requirements. When updates occur, we revise the date and provide notice where required.
Burnt’s products and website are for adults who use our tools for work. We do not provide services for children, and we do not collect or use any information about children. If a child’s information is ever sent to us by mistake, we delete it safely.
Version Number - 1.0