Privacy Notice

This notice explains how Abasis Limited processes personal data when you use the independent RIF AI Assistant at rif.abasis.ai.

1. Who is responsible

The data controller is Abasis Limited, registration number HE452540, 17 Nearchou Kliridi, office 401, 1087 Nicosia, Cyprus. Privacy enquiries: privacy@abasis.ai.

2. Independence from RIF

This is an independent service operated by Abasis Limited. It is not an official service of, and is not operated or endorsed by, the Cyprus Research and Innovation Foundation (RIF). Applications must be made and verified through official RIF and IRIS channels.

3. Data we process

• The questions and conversation context you submit to the assistant.
• Technical request data such as IP address, time, browser information and security logs.
• Service diagnostics, without intentionally creating user profiles.

Do not submit special-category, confidential, application-secret or unnecessary personal data. The service does not require an account.

4. Why we process it

We process data to answer questions about public RIF calls, operate and secure the service, prevent abuse, diagnose faults and maintain accurate information. Our legal basis is our legitimate interest in providing and protecting this informational service (Article 6(1)(f) GDPR). We do not use the assistant to make decisions that produce legal or similarly significant effects about you.

5. Providers and international transfers

Prompts and conversation context are sent to the Google Gemini API to generate an answer. Hosting and infrastructure providers, including Hetzner, process technical data on our behalf. Where a provider processes data outside the EEA, we rely on the applicable contractual and transfer safeguards offered for that service, such as European Commission standard contractual clauses where required.

6. Retention

The application does not intentionally keep ordinary free-form chat histories after the session. Limited response caching may be retained for up to 7 days. Technical and security logs are retained for no longer than 30 days, unless a longer period is necessary to investigate a security incident or comply with law. Providers may apply their own documented retention periods to data they process.

7. Your rights

Subject to the GDPR, you may request access, correction, deletion, restriction, portability or object to processing. Contact us at privacy@abasis.ai. You may also complain to the Office of the Commissioner for Personal Data Protection in Cyprus at dataprotection.gov.cy.

8. Changes

We may update this notice when the service, its providers or legal requirements change. The current version and date will remain available on this page.