Privacy Policy

1. Data Controller and Processor Roles

1.1 Controller. Llewellyn Systems acts as the Data Controller for personal information collected directly from visitors to our websites, marketing contacts, and prospective customers.

1.2 Processor. When processing Customer Data on behalf of our financial institution customers, Llewellyn Systems acts as a Data Processor. Our customers remain the Data Controller for their end-user and customer financial data.

1.3 Contact. Data Protection Officer: solstaff@soundoflife.media

2. Information We Collect

2.1 Information You Provide. Account registration data (name, email, organization); billing and payment information; compliance configuration settings; regulatory framework selections.

2.2 Financial Compliance Data. When you use our compliance agents, we process regulatory configuration data, control mappings, and compliance workflow settings. Customer financial data (transaction records, KYC documents, audit evidence) is processed within your security perimeter and is not transmitted to our servers.

2.3 Automatically Collected Information. Device identifiers, IP addresses, browser type; usage data, feature interactions, and performance metrics; cookies and similar tracking technologies.

3. AI and Machine Learning Disclosure

3.1 AI Agent Operations. ODE Social Capital employs 6 specialized AI compliance agents (ODE AI Agent, ODE AI Agent, ODE AI Agent, ODE AI Agent, ODE AI Agent, ODE AI Agent) that process data to provide compliance automation services. These agents use machine learning models to screen customers, detect fraud, assess risk, and generate audit evidence.

3.2 On-Premise Processing. Our AI agents are deployed within your security perimeter. Customer financial data, transaction records, and PII never leave your infrastructure for AI processing purposes.

3.3 Model Training. We do not use your financial data or compliance records to train our machine learning models. Aggregated, de-identified patterns may be used to improve detection accuracy.

4. GLBA Compliance

For financial institution customers subject to the Gramm-Leach-Bliley Act, we maintain appropriate safeguards for Non-Public Personal Information (NPI) as required by the Safeguards Rule. Our ODE AI Agent agent helps enforce NPI protection requirements within your organization.

5. Security Measures

• Encryption in transit (TLS 1.3) and at rest (AES-256)
• SOC 2 Type II certified infrastructure
• Role-based access control and principle of least privilege
• On-premise deployment option for sensitive financial data
• Regular security audits and penetration testing
• SEC Rule 17a-4 compliant record retention via ODE AI Agent

6. Contact

Llewellyn Systems Inc
2601 Blanding Ave, Ste C248, Alameda, CA 94501
Privacy: solstaff@soundoflife.media
DPO: solstaff@soundoflife.media