Privacy notice · 2026-10-draft-2

How your data is handled

Draft for the pilot. Final text follows legal review.

Who processes your data
Global AI Council runs this program on XLab, a platform by Exoasia Innovation Hub. Both handle your data under the Philippine Data Privacy Act of 2012 (RA 10173).
What we hold
Your work email and name, your venture's records (steps, canvases, Experiment Register, gate cards, Concept Papers), the evidence files you upload (PDFs and images, up to 20 MB each), your conversations with the co-pilot and an audit trail of changes.
Where it is stored
In Supabase, in Singapore (ap-southeast-1). This is a transfer outside the Philippines.
The co-pilot
Xi conversations, and the evidence you submit for Xi to read, are sent to Anthropic, which processes them to produce replies and summaries. Xi drafts; people decide.
Who can see your venture
Your venture team, your lab's managers and admins, and your kill authority. Nobody outside this program.
Your rights
You can ask to access, correct or delete your data, and complain to the National Privacy Commission. Contact: [Data protection officer].