Privacy Policy

We collect information in three main ways: information you provide to us, information we collect automatically, and information we receive from third parties.

a. Information You Provide to Us

• Account & Contact Information: When you register for an account, we collect your name, email address, company name, role, and authentication credentials.
• Customer Data: We collect and store the records, files, text, images, messages, tasks, and any other content you upload, create, or submit to the Services (“Customer Data”). Your organization controls this data.
• Billing Information: When you subscribe to a paid plan, we collect subscription tier details and payment method information. This information is securely processed by our third-party payment provider. We do not store full credit card numbers.
• Communications & Support: When you contact us for support, provide feedback, or participate in a survey, we collect the messages, attachments, and other information you share.

b. Information Collected Automatically

• Usage & Diagnostics Data: We collect data about your interactions with our Services, such as features used, pages visited, and performance metrics. This includes device and browser information, timestamps, and crash logs.
• Cookies & Similar Technologies: We use cookies and similar technologies to operate the Services, such as keeping you signed in, remembering your preferences, and analyzing performance.
• Log Data: Our servers automatically record information when you access the Services, including your IP address, user and organization IDs, and request/response headers.

c. Information from Third Parties

• Single Sign-On (SSO): If your organization enables SSO, we may receive information from your identity provider (e.g., Google, Microsoft Entra ID) such as your name and email.
• Integrations: If you connect third-party applications to our Services, we may access and process data from those services as authorized by you to provide the integration.

• To Provide and Maintain the Services: To operate, secure, and manage our platform, including user authentication, authorization, backups, and fraud prevention.
• To Process Customer Data: We process Customer Data on behalf of you and your organization in accordance with your instructions and settings.
• To Improve and Develop Our Services: We analyze usage data to understand user needs, develop new features, and improve the quality and performance of our Services.
• To Communicate With You: To send you service-related announcements, security alerts, billing notifications, and other administrative messages.
• To Comply with Legal Obligations: To comply with applicable laws, regulations, legal processes, or enforceable governmental requests, and to enforce our Terms of Service.

Some features within our Services are AI-assisted. Our commitments regarding these features are:

• Purpose Limitation: Customer Data is processed only to provide the requested AI feature and is not used to train third-party AI models unless you (or your organization) explicitly opt in.
• Sub-processors: We may use trusted third-party AI processors under strict confidentiality and data-processing agreements.
• User Responsibility: AI-generated outputs may be inaccurate. Users are responsible for reviewing and verifying any output before relying on it.

We use cookies, SDKs, and similar technologies to (i) enable core functionality (e.g., login, security), (ii) remember preferences, and (iii) measure performance and improve the Services. Essential cookies are always on because they are necessary to provide the Services. Non-essential cookies (e.g., analytics) are used only with your consent where required by law.

• Managing Preferences: You can control cookies in your browser settings and manage your consent preferences on our homepage.
• Retention: Cookie lifetimes vary by purpose; see your browser’s storage viewer for details.

If you are in the European Economic Area (EEA) or the United Kingdom (UK), our legal bases for processing your personal information are: performance of a contract, our legitimate interests (e.g., for security, product improvement, and fraud prevention), your consent (where required), and compliance with legal obligations.

• Service Providers / Sub-processors: We generally do not disclose or share your personal information with third parties except where necessary to provide our services, comply with legal obligations, or protect our rights. We may share limited information with trusted third-party service providers who perform services on our behalf, such as email delivery, analytics, and payment processing.
• Your Organization: If you use the Services through an organization, the organization’s administrators may access and manage your account and the Customer Data within their workspace.
• Legal Compliance & Safety: We may disclose information to comply with a law, regulation, or legal request; to protect the safety of any person; to address fraud or security issues; or to protect our rights.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to the commitments made in this Privacy Policy.

We retain personal information for as long as your account is active and as necessary to provide the Services, comply with our legal obligations, and enforce our agreements. Customer Data is retained according to the terms of the agreement with your organization.

We employ reasonable administrative, technical, and physical safeguards to protect your information. Measures include encryption in transit (TLS) and at rest, role-based access controls, and security logging. However, no system is 100% secure.

We are based in the United States and may process your data in the U.S. and other countries. When we transfer personal data from regions like the EEA or UK, we use recognized legal mechanisms like Standard Contractual Clauses to ensure an adequate level of data protection.

The Services are not directed to individuals under 18. We do not knowingly collect personal information from minors. If we become aware that we have, we will take steps to delete such information.

We may update this Privacy Policy from time to time. If the changes are material, we will provide additional notice, such as via email or a prominent notice within the Services.

If you have any questions about this Privacy Policy, please contact us at [email protected].