AI Data Security & Usage Policy
Our Commitment to Data Security
We use Artificial Intelligence (AI) tools to enhance the quality, speed, and value of our services. While AI helps us deliver better outcomes, protecting your data is our top priority. This policy explains how we handle your information when AI is involved, and just as importantly, what information we will never use in AI tools.
What We Will Never Share with AI Systems
We will never input, upload, or expose any of the following client information to AI tools, whether in prompts, training data, or file uploads:
- Personally Identifiable Information (PII) – Names, addresses, phone numbers, email addresses, ID numbers, or any other information that can identify an individual.
- Financial Data – Bank account details, credit/debit card numbers, invoices containing sensitive financial details, payroll information.
- Health Data – Any information related to medical history, conditions, treatments, or health records.
- Confidential Business Information – Internal strategies, trade secrets, proprietary code, unreleased product information, or legal contracts.
- Regulated Data – Any information covered by laws such as GDPR, HIPAA, CCPA, or similar regulations, unless expressly permitted and fully compliant.
What Data We May Use with AI
We only use non-sensitive, anonymized, or publicly available information in AI tools. Examples include:
- General industry trends and public market research
- Descriptions of products or services
- Anonymized performance metrics or aggregated statistics
- Publicly available marketing content (e.g., your published website copy, public blog posts)
Before any client-related information is entered into AI tools, we apply a strict redaction and anonymization process to ensure it cannot identify you, your employees, or your customers.
How We Keep Your Data Safe
We follow a layered security approach when working with AI:
- Anonymization & Redaction – Sensitive identifiers are removed or replaced before being processed by AI.
- Secure, Trusted AI Providers – We only work with AI providers that meet enterprise-grade security standards, hold recognized compliance certifications (such as GDPR, SOC 2, ISO 27001), and do not use your data to train public models without explicit consent. (OpenAI, Claude, Gemini, Microsoft Azure)
- Access Control – Only authorized team members can interact with AI systems on your behalf.
- No AI Training on Client Data – We do not allow your data to be used for training public AI models.
- Regular Policy Reviews – We update our AI security practices as technology and regulations evolve.
Compliance & Ethics
Our AI usage complies with relevant privacy laws and industry best practices, including GDPR and CCPA where applicable. We also commit to ethical AI use — ensuring that our AI-assisted work is transparent, unbiased, and aligned with your expectations.
Questions?
If you have any concerns about how we use AI or protect your information, please contact us at admin@hop.online.
