Privacy Policy
What data the registry holds, what it does with it, and what rights you have under data protection law.
What we hold
The registry holds two kinds of data:
- Public listing metadata - providers, resources, governance signals, sovereignty claims, endpoints. This is intentionally public and available through the discovery API.
- Account data - name, email, organisation and role for registered providers, reviewers and operators. Used only to authenticate, route review work and contact you about the registry.
Lawful basis
Account data is held under the Mauritius Data Protection Act 2017. The lawful basis is either contract performance (we cannot run your provider account without it) or legitimate interest (operating a public registry of national interest).
What we don't do
We do not sell account data. We do not share it with third parties for marketing. We do not host or proxy calls to the AI resources we list, so we do not see end-user prompts or responses - those go directly between consumer and provider.
Your rights
You can request access to, correction of, or deletion of your account data at any time through the contact form. If your resource has been publicly listed, the AIR-ID and the underlying audit log persist (append-only) - the resource record can be tombstoned, but the governance trail behind a previously public listing is itself a public record.
Operator
Mauritius AI Registry is operated by Mauritius Telecom in collaboration with the Ministry of Information.