Last updated · 10 May 2026

Privacy Notice

SQRT AI Limited (“SQRT AI”, “we”, “us”) takes data minimisation seriously. This notice describes the personal information we collect when you use sqrtai.com, why we collect it, who we share it with, and the choices you have.

Who we are

SQRT AI Limited is a company incorporated in Hong Kong SAR. We operate the website at sqrtai.com (the “Site”) and the gated research surfaces at /labs and /labs/investor.

For any privacy-related question, write to contact@sqrtai.com.

What we collect

We collect the minimum personal information needed to respond to you and to operate the Site. We do not run third-party advertising, tracking pixels, or retargeting. We do not sell personal information.

Information you give us directly

  • Contact form (/contact): name, company, role, email address, and the message you submit. Used to respond to your enquiry.
  • Labs access request (/labs): name, email address, company or firm, optional LinkedIn handle, optional context paragraph. Used to review your request for access to the gated investor surface.
  • Email correspondence: any information you choose to send us by email.

Information we collect automatically

  • Session cookie (/labs/investor): a signed, HTTP-only, same-site cookie issued after you click a magic link. Stores your email address only. Valid for 30 days. Used to keep you signed in to the gated surface.
  • Server logs and operational events: for the gated /labs surfaces only, we record page views and authentication events (timestamp, your email from the session, IP address, user-agent). Used for security monitoring and to provide aggregate engagement reporting to our team.
  • Standard request metadata: like any web service, our hosting provider receives request headers (IP address, user-agent, referrer) for the duration needed to serve the request and produce standard infrastructure logs.

We do not use analytics cookies on the public marketing pages. We do not fingerprint visitors.

Why we use this information

  • Responding to your enquiries and requests.
  • Operating the gated /labs surface and verifying your access.
  • Detecting and mitigating security threats (fraud, abuse, unauthorised access attempts).
  • Meeting our legal and regulatory obligations.

We do not use your personal information for profiling, automated decision-making, or advertising.

Sharing and disclosure

We do not sell, rent, or share your personal information with advertisers, data brokers, or unaffiliated marketing partners.

We may disclose information when required by law (for example, a valid court order) or where we believe disclosure is necessary to protect the safety, rights, or property of SQRT AI Limited, our users, or others.

Where your information is stored

Personal information collected via the Site may be stored or processed on infrastructure located outside Hong Kong, including in the United States and Europe, as part of our normal operations. Where applicable law requires specific safeguards for international data transfers, we apply them.

How long we keep it

We keep personal information only for as long as we have a clear reason to retain it:

  • Enquiry correspondence: typically retained for up to 24 months.
  • Labs access requests: retained while the request is under review and for our records of who has requested access.
  • Session cookies: 30 days from issue.
  • Operational event logs: rolling retention sufficient for security review and aggregate reporting.

We may retain information longer where required by law, to resolve disputes, or to enforce our agreements.

Your rights

Subject to the law that applies to you, you may have the right to ask us to:

  • Confirm what personal information we hold about you.
  • Provide you with a copy of that information.
  • Correct information that is inaccurate or out of date.
  • Delete information we no longer have a lawful basis to keep.
  • Restrict or object to certain uses of your information.

Hong Kong residents have rights under the Personal Data (Privacy) Ordinance (Cap 486). Residents of the European Economic Area or the United Kingdom have rights under the EU/UK GDPR. We will respond to verified requests within a reasonable timeframe consistent with the applicable law.

To exercise any of these rights, write to contact@sqrtai.com from the email address associated with your information.

Security

We use reasonable technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure, or destruction. These include encrypted transport (HTTPS), HTTP-only and same-site session cookies, short-lived authentication tokens, secrets management for our infrastructure credentials, and limiting access to personal information on a need-to-know basis. No system is perfectly secure; we cannot guarantee absolute security.

Children

The Site is intended for business and professional audiences and is not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

Changes to this notice

We may update this notice from time to time. We will revise the “Last updated” date at the top of this page whenever we do. Material changes will be communicated through the Site or, where appropriate, by email to identified users.

Contact

SQRT AI Limited
Hong Kong SAR
contact@sqrtai.com

See also our Terms of Use.