Privacy Policy

1. Information We Collect

To provide our RAG and intelligence services, we strictly collect only what is necessary:

• Account Information: Name, email address, and authentication credentials via Supabase.
• Uploaded Data: Documents (PDF, DOCX), images, and audio files you explicitly upload to the platform for indexing.
• Usage Data: Anonymized interaction logs to improve search relevance and system performance.

2. How We Use Data

Your data powers the intelligence engine. We use it solely to:

• Index and store content in our secure vector databases.
• Retrieve relevant context to answer your specific queries.
• Process billing and subscription management via Stripe.

We DO NOT train our foundational models on your private data without explicit enterprise consent.

3. Data Sharing & Disclosure

We do not sell your personal data. We only share data with trusted third-party sub-processors required to run the service:

• Supabase: For database and authentication.
• Stripe: For payment processing.
• OpenAI / Anthropic: For LLM inference (data is sent transiently and not used for training).

4. Security Measures

We employ industry-standard security practices, including:

• Encryption at rest (AES-256) and in transit (TLS 1.3).
• Strict Row Level Security (RLS) in our databases to ensure tenant isolation.
• Regular security audits and vulnerability scanning.

5. Your Rights (GDPR & CCPA)

You have the right to access, rectify, or delete your data at any time. You can export your workspace data directly from the dashboard or contact support for full deletion.