PRIVACY POLICY · LAST UPDATED 13 OCTOBER 2026

Lisa & Gatekeeper
Privacy Policy

This notice explains the handling of personal data on gatekeeperai.tech and in Lisa’s business communication workflows. It covers website inquiries and, when separately connected and authorized, LinkedIn personal-profile and company-page functions.

1. Who is responsible

The controller is Day&Ross Global LTD LLC, a Wyoming, United States company. For privacy questions or requests, contact gatekeeperoperations1@gmail.com. Lisa is the company’s AI-assisted business communication application.

2. Website inquiries

Our inquiry form collects your name, company, work email, application area, message, contact consent, submission time and inquiry reference. We use these details to review your request, discuss a validation scope and respond. Submitting an inquiry does not subscribe you to a marketing mailing list. Please do not send passwords, API keys, sensitive personal data, customer records or confidential source code through this form.

3. Lisa and LinkedIn

Integration status: the LinkedIn connection is being configured. Publishing this policy does not activate it or grant Lisa access to a LinkedIn account. Features depend on LinkedIn’s available products, granted permissions and account or Page administrator authorization.

Once enabled, an authorized connection may process account and Page identifiers, basic profile information, access credentials, post drafts and published content, attached media, comments, reactions and associated timestamps. Conversation content and participant details are processed only if a separately authorized messaging capability is available. Access is limited to the permissions granted for the relevant account and purpose; authorizing posting does not by itself authorize access to private messages.

These data are used to prepare and manage business posts, respond to relevant interactions, maintain conversation context and coordinate business follow-up. Public posts and comments are visible to their selected LinkedIn audience; messages are delivered to their selected recipients. LinkedIn independently processes activity on its platform under its own Privacy Policy.

4. Purposes and legal bases

Where European data protection law applies, we rely on consent for consent-based contact and optional connections, steps requested before a contract or contract performance where applicable, and legitimate interests in managing relevant business correspondence and protecting our systems. Those interests must be balanced against your rights. Records may also be retained to meet applicable legal obligations. You may withdraw consent without affecting processing that was lawful before withdrawal and may object to processing based on legitimate interests.

5. AI assistance and execution controls

Lisa can use AI to interpret correspondence and prepare responses. Relevant text may be submitted to an AI service such as the OpenAI API where that workflow is enabled. Lisa should therefore not be treated as a wholly offline service. AI output may be inaccurate; you can ask to have a communication reviewed by a person using the contact above.

Lisa’s external actions are designed to require Gatekeeper authorization before execution. Meduza provides a separate protective layer. These controls do not constitute a promise that security incidents or incorrect content are impossible. This business communication service is not intended to make solely automated decisions producing legal or similarly significant effects on individuals.

6. Storage, recipients and service providers

Website inquiries are stored in the site’s hosted database. Authorized operators and technical providers process data as needed to host, secure and operate the service. The website uses ChatGPT Sites and Cloudflare infrastructure. Inquiry notifications and correspondence can be handled through Google Gmail. Enabled Lisa workflows may additionally use AI processing providers, and LinkedIn receives content submitted to its platform. Technical records may include request identifiers, timestamps, authorization evidence and delivery or error status.

Personal data may be processed outside your country, including in the United States. Where applicable law requires safeguards for international transfers, the relevant provider arrangements and legally recognized transfer mechanisms must cover the processing. Contact us for information about the arrangements applicable to your data.

7. How long information is kept

Inquiry and correspondence records are kept while needed to handle the request, ongoing business discussions or an established relationship. Retention also takes account of applicable recordkeeping obligations, dispute handling and security needs. There is no automatic deletion deadline stated for the current inquiry database. You can request deletion or information about the retention of a specific record. Deletion may be restricted where continued retention is legally necessary.

Disconnecting a platform stops future access through that connection but does not automatically erase previous business records or content already published on the platform. You can separately request deletion of records held by us and manage published content through the relevant platform.

8. Your choices and rights

Contact gatekeeperoperations1@gmail.com to request access, correction, deletion, restriction or a portable copy of your data where applicable; to withdraw consent; or to object to processing, including direct marketing. Include your inquiry reference or the relevant account or conversation so we can locate the record. We may request proportionate information to verify your identity; do not email passwords or access tokens.

You can revoke LinkedIn application access in your LinkedIn account settings. You may also complain to your competent data protection authority. In Hungary this is the Hungarian National Authority for Data Protection and Freedom of Information (NAIH). We handle rights requests within the periods required by applicable law.

9. Browser data and updates

The current website application does not add advertising pixels, marketing analytics or browser-based lead tracking. Infrastructure providers may process technical connection information and use essential security or session mechanisms. We will update this notice when the described processing changes; the date above identifies the latest revision.