Privacy notice

01Who runs the index

The service operator is AI Frontier Index, the name confirmed by the owner. The privacy contact is shown in the document details beside the title. The operator’s legal status, country of establishment and postal contact address have not been supplied; this name alone does not establish those details.

02What data the index handles

The public index does not offer visitor accounts, sign-in, comments, likes or a newsletter. Personal data may be processed when you contact the editors or submit a privacy request, and when you opt in to analytics. Technical data needed to deliver and protect a web request may also be processed by the hosting and security infrastructure.

• Contact and correction requests: what you write and the email address you give, if any.
• Analytics: page views and actions, only if you allow Analytics in the cookie banner or settings. No search text, email address or personal identifier is sent.
• Staff access to the private administration area (editors and the owner only) is never open to visitors and is covered by its own access records, not by this notice.

03Why it is used

Contact details and message content are used to receive, review and respond to your request. Optional analytics is used to measure page views and selected interactions only after you enable Analytics. Necessary technical processing supports delivery and security of the service.

Legal bases under the GDPR (Regulation (EU) 2016/679): for contact, correction and security messages, the operator's legitimate interest in receiving and answering them (Article 6(1)(f)), and your consent where you tick the consent box on a form (Article 6(1)(a)); for privacy requests, the need to handle a request about your data under Articles 12 to 22 (Article 6(1)(c)); for optional analytics, your consent (Article 6(1)(a)), which you can give or withdraw at any time in Cookie settings; for necessary technical processing, the legitimate interest in delivering and securing the service (Article 6(1)(f)).

04Who else receives it

When Analytics is configured and you have enabled it, page views and selected interactions are sent to Google Analytics. Analytics is disabled unless both supported GA4 configuration values are present and your current consent allows it. Google may process Analytics data outside the European Economic Area under the transfer safeguards that Google documents for the service.

Public catalogue records are gathered from public sources (including public APIs and pages) or entered by editors. Some records are automatically translated between English and Russian using a third-party language-model provider before editorial review. Privacy requests and contact-form messages are not sent to that provider.

05How long it is kept

A privacy request accepted into the private inbox expires after 30 days unless it is deleted earlier during manual handling. Messages from the contact and security forms are kept in a separate private inbox until staff delete them by hand; they have no automatic deletion period. Backups and operational records may be subject to separate retention periods. Hosting-provider retention depends on that provider's systems and is not stated here.

06Your rights and requests

You can contact the operator using the details shown with this document to ask about personal data or raise a request. The privacy request form accepts requests for a copy, correction, deletion or another privacy matter. An accepted request is stored in a private inbox for manual review; acceptance does not itself verify identity, send an email, or automatically complete a deletion or correction.

Under the GDPR you can ask for access to your personal data, for its correction or erasure, and for restriction of its processing; you can object to processing based on legitimate interests, ask for your data in a portable form where that applies, and withdraw consent at any time without affecting processing done before. You also have the right to lodge a complaint with a supervisory authority: in Romania this is the National Supervisory Authority for Personal Data Processing (ANSPDCP, Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal), or the authority of the EU country where you usually live or work.

07Contact and correction requests

Questions, corrections and partnership requests from the contact form are read by the editors and administrators. Your email address and message are never published, and neither is who reported an error: a published correction shows what changed, not who asked.

Security reports are read by administrators only, not by editors. They stay private, and embargoed details stay closed until the issue is disclosed.

When a request arrives, an email with only its reference and a link to the private administration area is sent to the operator's support mailbox; your message and email address are not included in it. Requests are kept until staff delete them by hand.

08Changes to this notice

Each published version gets a number, the date it takes effect and a summary of what changed.