Who we are
Adverant Limited is the controller of the personal data described in this notice. We are a company registered in Ireland and based in Dublin. HONESTAS is an Adverant product, and we build and operate it.
Write to us about anything in this notice at privacy@honestas.ai. Company details are on the legal notice.
What this notice covers
This notice covers the honestas.ai website, the demo and contact forms on it, the emails we send you in reply, and our dealings with people at the firms we talk to.
It does not cover the data our customers put into HONESTAS. For that data, each customer decides what happens to it, under its contract with us. See Data in HONESTAS.
What we collect
What you give us
- The demo form: your name, work email, company, role, the kind of business you work in, and the decision you would like AI to help with.
- The contact form: your name, email, company if you give it, the topic and your message.
- Emails and calls: what you tell us when you write to us or speak to us, including in a demo.
What we collect automatically
- Server logs: IP address, browser and device type, the pages you ask for, the time, and the site that sent you. We use them to run and protect the site, and to count visits in aggregate.
- Site settings: your Day or Night theme and your language, kept in your own browser. The language choice is also kept in one first-party cookie, so pages load in your language. See the cookie notice.
We do not use third-party analytics, tracking pixels, advertising networks or data brokers. We do not ask for special category data, such as health information, through this site. Please do not send it to us.
Why we use it, and on what basis
| What we do | Legal basis under the GDPR |
|---|---|
| Arrange and hold a demo, send a paper you asked for, answer your message and follow up on it | Steps you asked for before a possible contract (Art. 6(1)(b)), and our legitimate interest in answering enquiries (Art. 6(1)(f)) |
| Run, secure and fix the site, and count visits in aggregate | Our legitimate interest in a working, secure website (Art. 6(1)(f)) |
| Remember your theme and language | Storage you asked for by choosing them, which the Irish ePrivacy Regulations allow without separate consent |
| Manage our relationship with customers, partners and suppliers | Performing a contract (Art. 6(1)(b)) and our legitimate interests (Art. 6(1)(f)) |
| Meet legal duties, such as tax records and answering lawful requests from authorities | Legal obligation (Art. 6(1)(c)) |
Where we rely on legitimate interests, we have weighed them against your rights. You can ask us for that assessment, and you can object at any time. We do not send marketing emails from the demo or contact forms.
The inference boundary
HONESTAS does not use psychometric profiling, personality inference or emotion recognition to price a risk, underwrite it or decide a claim. Not with consent, not as a signal and not as a tiebreaker.
This is enforced in the platform, not left to a policy someone could set aside under pressure. A sealed decision record can show that no such input reached that decision. We hold this website to the same rule: nothing on honestas.ai infers anything about you from how you use it.
Automated decisions
We do not make decisions about you based only on automated processing that have legal or similarly significant effects. A person reads every demo request and every message.
When an insurer uses HONESTAS to decide something about you, a named person signs the decision. If AI played a part, you are entitled to a clear explanation of how the decision was reached, not just the outcome. GDPR Article 22 gives you the right not to be subject to a decision based solely on automated processing. Article 15(1)(h) lets you ask for meaningful information about the logic involved, and the Court of Justice held in case C-203/22 (27 February 2025) that this means the procedure and principles actually applied. HONESTAS builds that explanation from the same sealed record a supervisor reads, so the two cannot differ. Ask the insurer first. It is the controller for that decision. This is a summary, not legal advice.
Data in HONESTAS
When a firm uses HONESTAS, it decides what data goes in and what happens to it. For that data the customer is the controller, and Adverant acts as its processor under a data processing agreement. We process customer data only to provide the service and on the customer's instructions.
Customer data stays in our EU cloud or in the customer's own data centre, as the customer chooses. Each customer brings its own AI provider accounts. We do not use customer data to train models. A customer can export all of its sealed records at any time, in an open format, with the hashes that make them checkable.
Who we share it with
We do not sell your personal data, and we do not share it for advertising. We share it only with:
- Service providers who host the site in our EU cloud and deliver our email. They act on our instructions under written contracts and may not use your data for their own purposes.
- Resend, an email delivery service. When you send a demo or contact form, Resend delivers it to our inbox by email, with your address as the reply-to. It acts as our processor.
- Professional advisers, such as lawyers and auditors, under duties of confidence.
- Authorities, when the law requires it.
- A buyer or successor, if Adverant's business is sold or merged, under the same protections.
Transfers outside the EEA
We keep personal data in the European Economic Area wherever we can. Form submissions are an exception: Resend may process them in the United States. Resend is certified under the EU-US Data Privacy Framework, which the European Commission found adequate on 10 July 2023, and under its UK Extension. Its data processing agreement reflects that certification. If any other service provider handles personal data outside the EEA, we rely on an adequacy decision of the European Commission or on the Commission's standard contractual clauses, with extra safeguards where they are needed. Ask us for a copy of the safeguards that apply.
How long we keep it
| Data | How long |
|---|---|
| Demo and contact requests, and our emails about them | We keep enquiries for up to 24 months after our last contact, unless you become a customer |
| Server logs | We keep server logs for up to 12 months |
| Theme and language settings | In your browser until you clear them. See the cookie notice. |
| Customer and supplier records | For the length of the contract, then as long as tax and company law require |
Your rights
Under the GDPR you can ask us to:
- give you a copy of your personal data (access);
- correct data that is wrong or incomplete;
- delete your data, where there is no good reason to keep it;
- limit how we use it while a question is sorted out;
- give you your data in a machine-readable form, or send it to someone else (portability);
- stop using it where we rely on legitimate interests (objection).
Write to privacy@honestas.ai. We reply within one month. If a request is complex we may need up to two more months, and we will tell you why. We may ask you to confirm who you are. Using your rights is free.
Complaints
Please tell us first, and we will try to put it right. You also have the right to complain to a data protection authority. Our lead supervisory authority is the Data Protection Commission in Ireland, 6 Pembroke Row, Dublin 2, D02 X963, dataprotection.ie. You can also complain to the authority where you live or work.
How we protect it
We use encryption in transit and at rest, access limited to the people who need it, logging of that access, and regular testing. More is on the security page. If you find a problem, write to security@honestas.ai.
Children
This site is for businesses and is not aimed at children. We do not knowingly collect data from anyone under 18. If you think we have, tell us and we will delete it.
Changes to this notice
We update this notice when our practices change, and change the date at the top. If a change matters to you, we will tell you before it takes effect.