SYS_LEGAL // PRIVACY SPECIFICATION

PRIVACY POLICY

LAST_UPDATED: July 31, 2026 | ENTITY: ULAKTO LTD

ENTITY
Ulakto LTD (England & Wales)
FRAMEWORK
UK GDPR / EU GDPR / DPA 2018
RETENTION
12-Month Purge Cycle
ENCRYPTION
TLS 1.3 / AES-256 At-Rest

01. OPERATIONAL OVERVIEW

Ulakto LTD ("Company", "we", "us"), registered in England and Wales, engineers multi-provider AI agents, automated telemetry routing pipelines, and custom API systems. This policy details how personal data is ingested, processed, and safeguarded across ulakto.com, our deployment widgets, and customer-facing voice/chat orchestration terminals.

02. DATA INGESTION PROTOCOLS

Data processing is isolated across two primary streams:

  • [DIRECT INPUTS] Names, business emails, telephone numbers, and inquiry parameters submitted via consultation forms or interactive demo terminals.
  • [TELEMETRY LOGS] Voice audio streams, speech-to-text transcripts, prompt payloads, IP network metadata, and session tokens utilized strictly for real-time model routing and system performance.
[ZERO-TRAINING GUARANTEE]

Ulakto LTD enforces enterprise API isolation agreements. Customer inputs, voice transcripts, and database context passed through our routing architecture are NEVER submitted to third-party model providers (e.g., OpenAI, Anthropic, Google Cloud) for public LLM training datasets.

03. SUB-PROCESSOR ROUTING & INFRASTRUCTURE

To execute real-time AI orchestration, encrypted data payload fragments are transmitted to authorized sub-processors bound by UK GDPR compliance standards:

Inference Providers
OpenAI, Anthropic, Google Cloud
Voice & Telephony
Vapi AI, Retell AI, Twilio
State & Storage
AWS, Supabase, Vercel

04. RETENTION & DATA SUBJECT RIGHTS

Telemetry logs and interaction records are retained for up to 12 calendar months before automated purge routines execute. You have the right under UK GDPR to request access, correction, or permanent deletion of your data.

EXECUTE_ERASURE_REQUEST: hello@ulakto.com