Privacy Policy

Security Summit Ltd, trading as urgentic ("urgentic", "we", "us", or "our"), provides an autonomous AI security operations platform that investigates security alerts on behalf of our customers ("Customers"). This Privacy Policy explains how we collect, use, share, and protect personal data when you visit urgentic.ai (the "Site"), use our platform, or otherwise interact with us.

Security Summit Ltd is the data controller for personal data described in this policy. We are registered in England and Wales under company number 16489802, with our registered office at 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.

This policy covers data we collect directly from visitors and customers of the Site. It does not cover data that flows through the platform itself as part of a customer's own security tooling (alerts, logs, incident data) — that data is governed by the data processing terms in each customer's service agreement, since we act as a processor of that data on the customer's behalf, not as its owner.

We collect information in four ways:

• Information you provide — name, work email, company, job title, and message content submitted through contact forms, demo requests, or the booking calendar.
• Information you send to our AI assistant — the messages you type into the chat window on the Site, together with any contact details you choose to share in that conversation. See section 3 below, which describes this in full.
• Information collected automatically — our hosting provider records standard server request data, including IP address, browser type, and the pages requested, for security and reliability purposes. We do not run advertising or behavioural analytics trackers on the Site.
• Information from third parties — where you book a demo via our Microsoft Bookings calendar, Microsoft processes the scheduling data under its own privacy terms in addition to ours.

The Site offers an AI chat assistant. It is optional — you can use every part of the Site without it, and closing it stops it appearing again during your visit.

What happens to your messages. The text you type is sent to Anthropic PBC, based in the United States, which operates the AI model that generates the replies. Anthropic acts as our processor and does not use the content of these conversations to train its models. This is a transfer of personal data outside the UK and EEA, made under the safeguards described in section 9.

What we store. We keep a record of each conversation — the messages exchanged, the time, and any name, email address or phone number you volunteer — in a database operated by Cloudflare and hosted in Western Europe. We use it to answer follow-up questions, to improve the assistant’s answers, and to contact you if you have asked us to. Conversations are visible to urgentic staff.

What we do not do. We do not require you to give any personal details in order to use the assistant, and we do not place a persistent identifier on your device to recognise you across visits. The conversation is held in your browser’s session storage so it survives a page refresh, and it is discarded when you close the browser.

Please do not enter passwords, credentials, or confidential material about your own security environment into the chat. If you would like a conversation deleted, contact us using the details in section 12.

• To respond to enquiries, schedule demos, and provide requested information about our platform.
• To operate, maintain, and improve the Site and our commercial relationship with Customers.
• To send product updates or marketing communications, where you have consented to receive them.
• To comply with legal obligations and enforce our agreements.

We do not sell personal data. We share it only with service providers who help us run the Site and our business, under contractual obligations to protect it, or where required by law, regulation, or a valid legal process. The providers who may handle personal data from this Site are:

• Netlify and Cloudflare — hosting the Site and storing AI assistant conversations.
• Anthropic PBC — generating the AI assistant’s replies (United States).
• Microsoft — demo scheduling through Microsoft Bookings.
• Google — page translation, and only if you switch language yourself. See section 10.

We use industry-standard technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. Details of the security controls underpinning the urgentic platform itself are set out on our Security page.

We retain personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by law or a Customer agreement, after which it is deleted or anonymised.

AI assistant conversations are kept for up to 24 months so we can follow up on enquiries and improve the assistant, unless you ask us to delete yours sooner. Enquiry and demo-request details are kept for as long as we are in contact with you about them, and for a reasonable period afterwards.

Depending on your location, you may have the right to access, correct, delete, or port your personal data, object to or restrict certain processing, and withdraw consent at any time. To exercise any of these rights, contact us using the details below.

urgentic is headquartered in the United Kingdom. Where personal data is transferred outside the UK or the European Economic Area, we rely on appropriate safeguards, such as Standard Contractual Clauses, to ensure it remains protected.

We do not use advertising, tracking, or analytics cookies on this Site, so there is no cookie banner to dismiss. Nothing non-essential is stored on your device unless you turn it on yourself.

• Translation (optional, off by default). If you use the language switcher to read the Site in another language, we load Google Translate, which shares your IP address with Google and stores a googtrans cookie so the page stays translated as you browse. We ask before this happens, and nothing is sent to Google unless you agree. Switching back to English removes the cookie and withdraws that permission.
• Session storage. The AI assistant keeps your current conversation in your browser’s session storage so it survives a page refresh. It is not a cookie, it is not sent to us automatically, and your browser discards it when you close it.

You can clear or block any of this through your browser settings at any time.

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

Questions about this policy or your personal data can be sent to hello@urgentic.ai, or by post to Security Summit Ltd, 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.