What this website collects.

Who is responsible

HER2NI LLC (შპს ჰერ2ენაი), Identification No. 404813975, registered in Sakartvelo (Georgia) at Krtsanisi district, Nino and Ilia Nakashidze Street N 1, (former Avlev) Building N3, Apartment N3, is the controller for personal data processed through this website.

Enquiries, including requests about your data: her@her2ni.ai.

What happens when you load a page

Your browser requests the page and its self-hosted fonts and image assets from this domain. The HER2:N·I home page includes first-party presentation scripts for font readiness, scroll-aware navigation and external-link handling. These scripts make no automatic third-party requests and do not write to local or session storage.

GitHub

This website is served directly from the HER2NI/her2ni-ai repository's main branch through GitHub Pages over HTTPS. GitHub processes technical browser requests to deliver the site and states that it logs visitors' IP addresses for security purposes. See GitHub Pages data collection. HER2NI LLC does not add a separate page-level analytics system; no assertion is made here about access to GitHub's own security logs.

Cloudflare

Cloudflare operates authoritative DNS for her2ni.ai. The site's web-address records point to GitHub Pages without Cloudflare's HTTP reverse proxy. DNS resolution is distinct from the delivery and logging of the website by GitHub Pages.

Informational Security

For operating this informational website, HER2NI LLC relies, to the extent it determines relevant technical processing, on its important legitimate interest in making public research and corporate information available and protecting the site's integrity (Article 5(1)(i) of Georgia's Law on Personal Data Protection), subject to necessity and visitors' overriding rights. GitHub separately describes its own processing in its Privacy Statement.

GitHub describes processing in the United States and other locations. Its published Privacy Statement explains its data-protection and international-transfer practices. The website uses HTTPS and does not add third-party trackers or send visitors' content to an AI provider merely by loading the page. These facts do not mean that GitHub performs no security logging or that personal data necessarily remains in Georgia.

Cookies and local storage

The HER2:N·I homepage and this Privacy page contain no code that sets cookies or writes to browser local or session storage. They do not embed analytics, advertising trackers, third-party font loaders or external content. This page-code finding does not establish the cookie or log practices of hosting infrastructure or linked services.

Links that leave this site

Following an external link takes you to another operator's service, where its published terms and privacy practices apply. Current links include:

• Zenodo (CERN, Switzerland) — the research record DOIs.
• GitHub — the HER2:N·I repositories and GitHub hosting/privacy documentation.
• NATO NSPA — NCAGE verification.
• SAM.gov — U.S. government entity records.
• her2.ai — the separate H.E.R surface for citizen consumers.
• Email links — these open your own mail client; nothing is sent by the website itself.

These destinations are linked, not embedded in the homepage or this Privacy page. Selecting an external link is separate from loading this page.

If you contact us

If you email her@her2ni.ai, HER2NI LLC receives your email address, subject, message, attachments you choose to provide and ordinary delivery metadata. Providing an enquiry is voluntary; without an address and relevant information, we may not be able to respond. Please do not send passwords, provider credentials, classified material or sensitive pilot data through ordinary email.

Corporate correspondence is delivered through Proton Mail, operated by Proton AG (Switzerland). Proton Mail stores messages using zero-access encryption. Correspondence with external email providers is not necessarily end-to-end encrypted. The domain's inbound MX records point directly to Proton.

The corporate mailbox is accessible to one authorised HER2NI LLC representative. On the current reported configuration, ordinary inbound mail does not use Cloudflare Email Routing, and no automatic forwarding or CRM export is configured. Proton and other email-delivery operators handle information necessary to deliver correspondence; people or organisations deliberately included in a conversation may also receive its contents and relevant metadata.

We use correspondence to respond to enquiries, assess requested H.E.R research or corporate engagements, take steps requested towards an agreement and maintain necessary business, security, procurement, fundraising, accounting or legal records. For general corporate enquiries and necessary follow-up, the legal basis is our important legitimate interest in responding to people who contact us and maintaining proportionate organisational correspondence (Article 5(1)(i) of Georgia's Law on Personal Data Protection), subject to the sender's overriding rights. Where an individual requests a service review or contractual steps, Article 5(1)(j) or Article 5(1)(b), respectively, may apply to that particular processing. Where a specific law requires a record to be kept, processing is based on that law where applicable (Article 5(1)(c)). We do not use ordinary enquiries to add senders to a marketing list, sell or rent their correspondence.

Data Retention

Retention policy adopted on 25 October 2026: ordinary closed enquiries are deleted no later than 12 months after closure unless a documented continuing lawful purpose requires longer storage; open enquiries inactive for six months are reviewed for closure; material contractual, legal, procurement, financial and IP records are kept for the applicable legal obligation or documented continuing purpose and reviewed at least annually. Historical correspondence predating this policy remains pending progressive classification; these rules must not be read as a claim that all old mail was deleted or that automatic deletion is configured.

Cloudflare manages the domain's DNS and is designated as a recipient of aggregate DMARC email-authentication reports; that technical reporting role is distinct from ordinary inbound correspondence delivery. Proton says it stores encrypted Proton Mail data on servers in Switzerland, Germany and Norway. These jurisdictions appear in Georgia's State Audit Office adequacy list of 14 April 2026; ordinary email transit and any onward delivery to external correspondents are not necessarily confined to those storage locations. Proton's current product privacy policy describes its own safeguards and processing.

Your rights

Under the Law of Georgia on Personal Data Protection you may ask us what personal data we hold about you, ask for it to be corrected, ask for it to be deleted or its processing restricted, and receive a copy. Write to her@her2ni.ai and we will respond within the period the law allows.

If you believe we have handled your data improperly, you may complain to the State Audit Office of Georgia.

H.E.R the system, and this website

This notice concerns the HER2:N·I website and its corporate enquiry channel. H.E.R itself — the Artificial Intelligence system described on the home page — does not run through these public pages; visiting them does not submit prompts or documents to H.E.R's AI providers. A deployment or evaluation requires agreement of its own written terms and data-protection arrangements. Sending material to our public email address does not bypass ordinary email processing.

Changes

We will update the effective date when material changes to this notice are published. The public repository preserves revisions to published website source. Changes to this notice do not, by themselves, modify the terms of any separately agreed corporate service or licensed deployment.