Data Protection
DPA, cross-border mechanisms, data-subject rights and security controls under both GDPR and PIPL.
Data-protection framework
Customer business data and personal information stay off-chain. Confirm region, vendors, access, retention and deletion in writing before a project. Use the request form on the privacy page to request inquiry-data deletion.
Request data deletion- Aligned with GDPR, UK GDPR, China PIPL, CCPA / CPRA and Singapore PDPA.
- Control framework references: ISO/IEC 27001, SOC 2 and ISO 27701; these do not imply certification.
- Verify the data controller and legally required representatives in the data agreement.
Data Processing Agreement (DPA)
When Global AI DAO acts as a processor on behalf of customers, we sign a DPA covering processing purpose, categories, retention, sub-processors, transfer mechanisms and security obligations, with EU SCCs / UK IDTA / PIPL standard contracts attached.
To request a DPA, please contact dpo@globalaidao.org。
Cross-border transfers
We perform Transfer Impact Assessments (TIA) before any cross-border transfer and rely on EU SCCs (2021/914), UK IDTA, PIPL standard contracts or adequacy decisions, supplemented by encryption and pseudonymisation.
Data-subject rights
You may exercise rights of access, rectification, erasure, restriction, objection, portability and consent withdrawal. Please email privacy@globalaidao.org and we will respond within statutory timeframes.
Incident response
We operate 24/7 security monitoring and incident response. In the event of a personal-data breach, we notify regulators and affected individuals within 72 hours where required. Report security incidents to security@globalaidao.org。
Related pages
Defined scope. Accountable delivery.
Staged pricing & acceptance
Discovery, pilot and rollout have separate scope and fees. Contracts define baselines, evaluation samples, acceptance metrics and responsibility. Results are not unconditionally guaranteed.
Customer business data stays off-chain
Business records and personal data are not written to a blockchain. Confirm deployment region, model providers, access, retention and deletion in writing before work begins.
Clear contracting & delivery responsibility
Before signing, obtain and verify the legal entity, registration, jurisdiction, delivery owner and dispute terms. DAO collaboration does not replace contractual responsibility.