AbbaAI Ltd
Privacy Policy
Effective date: 10 September 2026
Applies to hireabba.ai and app.hireabba.ai.
Plain English summary: we collect the information needed to run your AbbaAI account and marketing, we never sell it, we never use one client's data to train or benefit another client, and you can ask us to delete it at any time.
1 Who we are
AbbaAI Ltd is a company registered in England and Wales, with its registered office at 5 Brayford Square, London, England, E1 0SG. AbbaAI Ltd is the controller of the personal data described in this policy. AbbaAI is an AI marketing platform available at app.hireabba.ai, with a marketing site at hireabba.ai. Questions about this policy go to contact@hireabba.ai.
2 Who this policy covers
- Visitors to hireabba.ai, including people who request a free sample post.
- Client users: people at a client business who hold an AbbaAI login.
- Client audiences and contacts: people whose details a client uploads or connects (for example an email marketing list) so that AbbaAI can work on the client's behalf. For this data the client is the controller and AbbaAI is a processor acting under the Data Processing Agreement.
- People who appear in public social media content that AbbaAI reads for market and competitor intelligence.
3 What we collect
| Data | Where it comes from | Why we use it |
|---|---|---|
| Name, business name, email, phone, business type | Website form, onboarding | To respond to enquiries and set up the account |
| Login credentials, authenticator and passkey data, device list, audit log | You, when you set up security | To secure the account and detect misuse |
| Brand materials: website content, documents, photos, past designs, corrections | Uploaded or connected by the client | To learn and reproduce the client's brand accurately |
| Connected social and email accounts (tokens, page IDs, publishing history) | Authorised by the client through the provider | To publish approved content and read results |
| Content from design tools you choose to connect, such as your own Canva account | Authorised by the client through the provider | To bring in the designs the client chooses and send finished designs back |
| Client audience data (email lists, contact records) | Connected email marketing provider | To send campaigns the client approves; processor role |
| Public social content from competitor and market accounts | Licensed data providers | To produce market and competitor intelligence |
| Usage data, approvals, chat with the AI team, cost data | Generated as you use the platform | To run, improve and bill the service |
| Technical data: IP address, browser, device, cookies | Your device | To keep the service running and secure |
4 Our legal bases (UK GDPR Article 6)
- Performance of a contract: running the platform for client users.
- Legitimate interests: security, fraud prevention, service improvement, responding to enquiries, and reading publicly available social content for intelligence. We have balanced these interests against individuals' rights.
- Consent: non essential cookies and marketing emails to prospects. You can withdraw consent at any time.
- Legal obligation: accounting, tax and responding to lawful requests.
5 Artificial intelligence
AbbaAI uses artificial intelligence to write, design, analyse and plan. Where specialist AI services are used they act as our processors under written contract, are permitted to use client data only to perform the requested task, and are prohibited from using it to train their own models. Each client's data is held in its own separate tenant. We never use one client's data to improve outputs for any other client. Nothing is published on a client's behalf without approval by a person at the client, unless the client has chosen the highest autonomy setting, which allows routine posts to publish on the client's schedule after automated quality checks and can be switched off at any time (see our Terms).
6 Who we share data with
We use a small number of specialist service providers to run the platform. They act on our instructions under written contracts, may use personal data only to provide their service to us, and are bound by confidentiality. They fall into these categories:
- Cloud hosting, storage and backup providers.
- AI and media production services used to write, design, produce and analyse content.
- Publishing infrastructure that connects to the social networks a client chooses to link.
- Email marketing platforms a client chooses to connect.
- Licensed providers of publicly available market and social data.
- Payment, accounting and professional advisers.
We also disclose data where the law requires it, to regulators or law enforcement on lawful request, and to a buyer or successor of our business. We do not sell personal data and we do not share it with advertisers. A list of the processors relevant to a client's own data is available to clients under the Data Processing Agreement.
7 International transfers
Data is stored in the United Kingdom and the European Economic Area. Some of our service providers process data in other countries. Where personal data is processed outside the UK we ensure an appropriate safeguard is in place: an adequacy regulation, the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses.
8 How long we keep data
- Client account data: for the life of the contract and 90 days after termination, then deleted, except where law requires longer retention.
- Prospect enquiries: 12 months from last contact.
- Security and audit logs: 12 months.
- Backups: rolling 30 day cycle; deleted data leaves backups within that cycle.
- Accounting records: six years, as required by UK law.
9 Your rights
You can ask us to access, correct, delete or port your personal data, to restrict or object to processing, and to withdraw consent. Write to contact@hireabba.ai. We respond within one month. If you are unhappy with our response you can complain to the Information Commissioner's Office at ico.org.uk. If your data was provided to us by a client business, we may pass your request to that client, who is the controller.
10 Data deletion
Anyone can request deletion of their data at hireabba.ai/data-deletion or by emailing contact@hireabba.ai with the subject line Data Deletion. See our Data Deletion page for the process and timelines.
11 Security
Encryption in transit and at rest, passwordless and multi factor authentication options including passkeys, per tenant isolation, role based access, audit logging, daily encrypted off site backups, and continuous security monitoring. No system is completely secure; if we become aware of a breach affecting you we will notify you and, where required, the ICO within 72 hours.
12 Children
The platform is for businesses. We do not knowingly collect data from anyone under 18.
13 Changes
We will post changes here with a new effective date and notify client users of material changes by email.