1. Introduction

Welcome to the Responsible Artificial Intelligence Lab (“RAIL,” “we,” “us,” or “our”). We are committed to advancing the field of artificial intelligence through responsible and ethical research. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you interact with our applications, websites, and services (collectively, our “Services”).

Protecting your privacy is a core component of our mission. We are committed to transparency and security in our data practices. This policy details our commitment to anonymizing data where possible, encrypting your information, and giving you control over its retention.

Please read this Privacy Policy carefully. By using our Services, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

We may collect information about you in a variety of ways. The information we may collect via our Services includes:

a) Personal Data You Provide to Us

We collect personally identifiable information that you voluntarily provide to us when you register for an account or interact with our Services. This information includes:

• Account Credentials: Your username, email address, and a hashed, salted (and therefore unreadable) version of your password.

• Social Authentication: If you choose to register or log in using a third-party social media service (e.g., Google, GitHub, Microsoft), we will collect the authentication information provided by that service, such as your name and email address. We do not collect or store the password you use for that third-party service.

b) Data Collected Automatically

When you use our Services, we may automatically collect information about your usage, such as:

• Log and Usage Data: Information about your activity on our Services, including timestamps of your visits, pages viewed, and other system activity. This data is necessary to enforce our data retention policies (e.g., to track account inactivity).

3. How We Use Your Information

We use the information we collect for the following purposes:

• To Provide and Manage Your Account: To create your account, authenticate you as a user, and provide you with access to our Services.

• To Secure Our Services: To monitor for and prevent fraudulent or malicious activity and to ensure the security of your data and our systems.

• For AI Research and Development: This is the core purpose of our lab. To facilitate this research, all personally identifiable information (PII) is anonymized or aggregated before it is used by our researchers. Your personal login credentials (like your email or password) are never used in our research data sets. Our research focuses on patterns and insights from non-identifiable data.

• To Communicate With You: To send you administrative information, such as updates to our terms, security alerts, or support messages.

• To Enforce Our Policies: To comply with legal obligations and enforce our data retention and deletion policies.

4. Data Security

We implement robust administrative, technical, and physical security measures to protect your information. Key security practices include:

• Encryption in Transmission: All data exchanged between your device and our Services is encrypted in transmission using industry-standard Transport Layer Security (TLS/SSL) protocols.

• Encryption at Rest: Your personal data, including your account credentials, is stored in an encrypted format on our servers.

• Anonymization: As stated above, any data used for research purposes is anonymized to remove any personal identifiers.

• Access Controls: Access to raw personal data is strictly limited to essential personnel who require it for system administration and security, and who are bound by strict confidentiality obligations.

While we have taken reasonable steps to secure the personal information you provide to us, please be aware that no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse.

5. Data Retention and Deletion

We believe in data minimization and user control. We store personal information only for as long as it is necessary to fulfill the purposes for which it was collected, or as required by law.

a) Policy on Inactivity

By default, your account and all associated personal data will be either permanently deleted or securely archived (and put beyond use) after a continuous period of thirty (30) days of inactivity.

Inactivity is defined as not logging into or otherwise interacting with our Services. We will attempt to notify you via your registered email address before this 30-day period expires to give you an opportunity to keep your account active.

b) Deletion Upon Request

You have the right to request the deletion of your account and all associated personal data at any time. You can make this request by:

• Using the account deletion settings within our Services (if available).

• Contacting us directly at the email address provided in the “Contact Us” section below.

We will process your request in a timely manner, subject to any legal obligations that may require us to retain certain information.

6. Your Data Protection Rights

You have certain rights regarding your personal information. Depending on your location, these may include the right to:

• Access: Request a copy of the personal information we hold about you.

• Rectification: Request that we correct any inaccurate or incomplete information.

• Erasure (Deletion): Request that we delete your personal information, as detailed in Section 5.

• Portability: Request that we provide your data in a structured, machine-readable format.

• Object: Object to our processing of your personal data for certain purposes.

To exercise any of these rights, please contact us.

7. Children’s Privacy

Our Services are not intended for or directed to individuals under the age of 13 (or a higher age if required by applicable law). We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal data from a child, we will take steps to delete it as soon as possible.

8. Third-Party Links and Services

Our Services may contain links to third-party websites or integrate with third-party services (such as social authentication providers). We are not responsible for the privacy practices or the content of these third-party services. This Privacy Policy does not apply to them. We encourage you to read the privacy policies of any third-party services you use.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Last Updated” date at the top.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Responsible Artificial Intelligence Lab (RAIL) Email: responsibleailab@gmail.com Address: KNUST, college of engineering, Research hill, Kumasi, Ghana