Privacy Policy

  1. INTRODUCTION.

    1. Use AI ("we," "us," or "our") is committed to protecting the privacy of individuals who access and use our Services. This Privacy Policy describes how we collect, use, share, and safeguard personal information through our website, applications, and any associated services, tools, or communications (collectively, the “Services”). It also explains the rights and choices available to users regarding their personal data.
    2. By accessing or using the Services, you agree to the practices described in this Privacy Policy and consent to the collection, use, and disclosure of your information as outlined herein. This Policy is incorporated into and forms part of our Terms and Conditions. If you do not agree with our practices, please do not use the Services.
    3. We recognize the importance of privacy and data protection in today’s digital environment, and we strive to handle your personal information in accordance with applicable data protection laws, including but not limited to the California Consumer Privacy Act (CCPA), the General Data Protection Regulation (GDPR), and other relevant U.S. state privacy laws.
    4. This Privacy Policy applies to all users of the Services, regardless of location, and governs how we handle personal information provided to or collected by us. We encourage you to read this Policy carefully to understand our privacy practices and how you can exercise your rights.
    5. If you have any questions or concerns about this Privacy Policy or our data practices, please contact us using the details provided in the “Contact Us” section below.

  3. INFORMATION WE COLLECT.

    1. In the course of providing access to and use of our Services, Use AI collects a range of personal and non-personal information. The information we collect depends on your interactions with us and the Services and may include information that you voluntarily provide, information we collect automatically, and information we obtain from third-party sources. We strive to collect only what is necessary, relevant, and proportionate to the purposes described in this Privacy Policy.
      1. Information You Provide to Us Directly: When you engage with the Services, you may provide us with personal information, including but not limited to:
        1. Account and Profile Information: When you create an account or update your profile, we collect identifiers such as your name, email address, username, and other registration details.
        2. Billing and Payment Information: If you purchase a subscription or pay for Services, we collect certain billing details, including transaction records and payment method (processed through third-party payment providers; we do not store full credit card numbers on our servers).
        3. User Submissions and Chat Inputs: We collect the content of the prompts, questions, messages, or other data you enter into our AI platform, including associated metadata such as timestamps or session identifiers. This may include personal or sensitive information if you voluntarily include it in your input.
        4. Support and Communication Records: If you contact us for support, feedback, or other inquiries, we collect your contact details and the content of your communications with us, including attachments and correspondence history.
      3. Information We Collect Automatically: We automatically collect certain technical and usage data when you access or use the Services, including:
        1. Device and Technical Information: Such as your IP address, browser type and version, operating system, device type and identifiers, screen resolution, and language settings.
        2. Usage and Interaction Data: Information about your interactions with our platform, including access times, features used, pages viewed, session duration, navigation paths, and error logs.
        3. Log and Diagnostic Data: System-generated logs that support debugging, performance monitoring, fraud detection, and system administration.
        4. General Geolocation Data: Approximate location information inferred from your IP address to support localization and security features.
      5. Information Collected via Cookies and Tracking Technologies: We use cookies, pixels, local storage, scripts, and other tracking technologies to collect information about your browsing behavior, device settings, and engagement with the Services. This may include analytics data, advertising metrics (if applicable), and information necessary for user authentication or session management. For more information, please refer to the Cookies and Tracking section of this Policy.
      6. Information from Third Parties: We may receive information about you from third-party sources to enhance our Services and improve our understanding of user needs, including:
        1. Analytics Providers and Data Processors: That provide aggregated or pseudonymized data to help us evaluate platform usage, engagement trends, and feature effectiveness.
        2. Payment Processors and Subscription Platforms: That notify us of completed transactions, billing disputes, account status, or failed payments.
        3. Marketing and Advertising Partners: That share information necessary to deliver or measure the effectiveness of promotional campaigns, subject to applicable law and user preferences.
      8. Aggregated or De-Identified Information: We may collect, use, and disclose aggregated, anonymized, or de-identified data that does not identify any individual user and is not considered personal information under applicable privacy laws. This data may be used for product development, statistical reporting, benchmarking, or service optimization.
    3. We maintain appropriate technical and organizational safeguards to ensure the confidentiality and integrity of the data we collect. We do not sell your personal information, and any data usage is subject to the limitations set forth in this Privacy Policy.

  5. HOW WE USE YOUR INFORMATION.

    1. We use the information we collect for a variety of business, operational, and legal purposes in connection with the delivery, improvement, and protection of our Services. Our use of your personal information is guided by principles of transparency, necessity, and proportionality, and is designed to support the legitimate functioning of our chat-based AI platform while respecting your privacy. The purposes for which we use your information include, but are not limited to, the following:
      1. To Provide and Operate the Services: We use your information to deliver, maintain, and administer the Services, including enabling you to access and interact with the platform, processing transactions, providing requested features or functionality, and delivering personalized experiences and results based on your inputs.
      2. To Improve and Optimize the Services: We analyze usage patterns, session behavior, error logs, and aggregated data to understand how users engage with our Services. This enables us to troubleshoot issues, enhance system stability and performance, develop new features, and refine user experience.
      3. To Process Payments and Manage Subscriptions: We use your billing and payment information to facilitate one-time purchases and recurring subscriptions, confirm successful transactions, send invoices or receipts, handle failed payments, and manage your subscription status.
      4. To Communicate with You: We may contact you for administrative, transactional, or support purposes, such as confirming your account registration, notifying you about account activity, responding to inquiries, or informing you about changes to our Services or policies. Where permitted, we may also send service-related or promotional communications, subject to your preferences.
      5. To Provide Customer Support: We use your contact details and communication history to respond to your questions, requests, or technical issues, as well as to investigate and resolve bugs, complaints, or disputes. This includes follow-up communications to ensure satisfactory resolution.
      6. To Secure the Platform and Enforce Policies: We use personal information to maintain the safety, integrity, and security of the Services, including monitoring for suspicious activity, detecting fraud or abuse, authenticating user accounts, enforcing our Terms and Conditions, and preventing unauthorized or illegal activity.
      7. To Operate AI Features: We transmit the content you submit to the third-party AI provider you select in order to generate the responses and outputs you request. We do not use your inputs or outputs to train, fine-tune, or develop our own AI or machine learning models. We do not use Google user data — including any data obtained from Google Workspace APIs — to develop, improve, or train generalized or non-personalized AI and/or machine learning models, even in de-identified or anonymized form. Google user data is used solely to provide and improve user-facing features of the application that are prominent in the user experience.
      8. To Comply with Legal and Regulatory Obligations: We may process your personal information as required by applicable laws, regulations, legal processes, or governmental requests. This may include cooperating with law enforcement, responding to subpoenas or court orders, fulfilling tax or audit obligations, and maintaining compliance documentation.
      9. To Enforce Our Rights and Defend Against Legal Claims: We may use your information as necessary to enforce our legal rights, pursue available remedies, defend against claims, or limit damages, including in connection with investigations, litigation, arbitration, or dispute resolution.
      10. With Your Consent: In certain cases, we may process your personal information based on your explicit consent. Where consent is required by law or applicable jurisdiction, you have the right to withdraw that consent at any time, without affecting the lawfulness of prior processing.
    3. We do not use your personal information to make automated decisions that have a legal or similarly significant impact on you without human involvement. All use of information is conducted in accordance with applicable data protection laws, and we do not sell or license your personal information to third parties.
    4. Measuring engagement with our emails — whether and when you open them and which links you click — to understand and improve our communications. Consent where required (including France and Italy); otherwise legitimate interests.

  7. PURPOSE OF PROCESSING.

    1. We process personal information to fulfill specific, legitimate, and proportionate purposes necessary for the operation, maintenance, and continuous improvement of our Services. The legal and practical foundations for such processing are rooted in our commitment to providing a secure, reliable, and personalized user experience, while also meeting our contractual, regulatory, and operational obligations.
    2. Primarily, we process your information to enable access to our chat-based AI platform and ensure that its core functionalities—including real-time conversation, personalization, and delivery of AI-generated responses—operate as intended. This includes facilitating account management, responding to inquiries, delivering requested content, and maintaining overall service availability and performance.
    3. We also process information to improve our Services over time. By analyzing aggregated or anonymized data from user interactions, we are able to monitor platform usage, optimize system performance, detect and correct technical issues, and develop new features. We do not use input content to train or fine-tune our own AI models; content you submit is processed by the third-party AI provider you select solely to generate your requested output.
    4. In addition, processing may be necessary to fulfill contractual obligations, such as managing subscriptions and processing payments, or to comply with legal obligations, including responding to lawful requests or defending our legal interests. We may also process information to maintain platform security, prevent abuse or fraudulent behavior, and enforce our Terms and Conditions or other applicable policies.
    5. In certain cases, we may rely on your consent to process information—for example, when you opt into receiving promotional emails or agree to participate in feedback sessions. You may withdraw your consent at any time, subject to applicable legal limitations.
    6. Each purpose of processing is guided by the principle of data minimization, meaning we only collect and use information that is reasonably necessary and directly relevant to fulfilling that purpose. We do not use personal data in a manner that is incompatible with the original purpose for which it was collected, unless we obtain your consent or are otherwise permitted by law to do so.

  9. HOW WE SHARE YOUR INFORMATION.

    1. We take your privacy seriously and do not sell or rent your personal information. However, in the course of operating our Services, there are limited circumstances under which we may share your information with third parties, always with appropriate safeguards in place to ensure your data is handled lawfully and responsibly.
    2. We may share your information with third-party service providers who perform essential business functions on our behalf. These providers assist with tasks such as hosting our infrastructure, processing payments, delivering customer support, analyzing usage data, providing security monitoring, or managing email communications. These service providers are contractually bound to process your information only as necessary to fulfill their specific functions and are prohibited from using it for any other purpose.
    3. We may also share information with analytics and performance tracking providers that help us understand how users interact with the platform. This includes general behavioral data such as session duration, feature usage, and device type, which may be collected through cookies or similar technologies. This data is typically shared in pseudonymized or aggregated form and does not directly identify individuals.
    4. In cases where you voluntarily choose to engage with third-party integrations, tools, or content accessed through our platform, we may share relevant information with those third parties to facilitate that functionality. Such sharing is governed by the third party’s own privacy policy, and we encourage you to review those policies prior to engaging with their services.
    5. We may disclose personal information if required to do so by law or if we reasonably believe that such action is necessary to (i) comply with a legal obligation, such as responding to subpoenas, court orders, or other lawful requests from government authorities; (ii) protect and defend our rights or property; (iii) prevent fraud or misuse of the Services; or (iv) protect the personal safety or rights of users, employees, or the public.
    6. In the event of a business transaction, such as a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. In such cases, we will take reasonable steps to ensure the confidentiality of your personal information and notify you of any change in ownership or use of your information as required by applicable laws.
    7. Additionally, we may share aggregated or de-identified data that does not identify you personally with partners, researchers, or the public for statistical analysis, research, product development, or marketing purposes. Such data falls outside the scope of personal information under most privacy laws.
    8. We do not permit third parties to access your personal information for their own independent marketing purposes. Any information shared is done so solely to support our delivery of Services and in accordance with the principles outlined in this Privacy Policy.
    9. Analytics & experience tools (Microsoft Clarity). We share limited usage and technical data with Microsoft as our analytics provider to generate heatmaps, session replays, and UX metrics. Microsoft may process this data pursuant to its own privacy terms and policies. We do not use Clarity to collect sensitive categories of data, and we implement masking to reduce capture of personal content entered into forms. Learn more in Microsoft’s Clarity disclosures and Terms.
    10. Bot protection (Cloudflare Turnstile). We use Cloudflare Turnstile to help distinguish human visitors from bots and protect the Services against malicious traffic. Turnstile processes a limited set of technical signals — such as IP address, TLS fingerprint, User-Agent header, and site key/origin — solely to detect and block bots; Cloudflare does not use these signals to identify, profile, or target individuals. Cloudflare acts as our data processor when providing this bot-detection service on our behalf, and separately acts as a data controller when it uses these signals to improve Turnstile's own bot-detection capabilities. For details, see Cloudflare's Turnstile Privacy Addendum: https://www.cloudflare.com/en-gb/turnstile-privacy-policy/.
    11. Credential storage (Composio). We use Composio, a third-party infrastructure provider, to securely store the OAuth credentials that authorize our access to the accounts you connect, including your Google account. Credentials are encrypted in transit and at rest, and Composio processes this data only on our behalf under a data processing agreement. See https://trust.composio.dev for Composio's security and compliance information.

  11. USE OF AI TECHNOLOGIES.

    1. Our Services function as an interface and orchestration layer that connects you to third-party artificial intelligence ("AI") providers. We do not develop, train, or fine-tune our own foundational, generalized, or proprietary AI/ML models. When you use the Services, the content you submit — such as prompts, questions, messages, or data you direct us to act upon — is transmitted to the third-party AI provider you select in order to generate the response or output you request. This processing is transient and occurs solely to fulfill your request.
    2. We do not use your inputs, outputs, or any data you provide — including any personal information you choose to include, and including any data accessed from connected accounts such as Google — to train, fine-tune, develop, or improve any AI or machine learning model. The third-party AI providers we use are accessed under their API or commercial terms (not consumer tiers), under which submitted content is not used to train their models. The providers we may use are identified in the "Third-Party AI Providers" section of this Policy.
    3. We may process de-identified, aggregated technical and usage data (such as latency, error rates, and feature usage) to monitor, secure, and improve the performance and reliability of the Services. This operational data does not include the substance of your AI content and is not used to train any AI model.
    4. By using the Services, you understand and acknowledge that responses are generated by third-party AI systems and may be probabilistic, approximate, or imperfect. You agree to use the Services responsibly and not to rely solely on AI-generated output for legal, medical, financial, or other critical decisions without independent human review or verification.
    5. If you have specific questions about how your data is processed in connection with these AI technologies, please contact us using the details in the "Contact Us" section.

  13. THIRD-PARTY AI PROVIDERS.

    1. Our Services allow you to send content you select — which may include data you have authorized us to access from Google Workspace APIs — to third-party large language model ("LLM") providers that you choose, solely to generate the output you request (for example, a summary, draft, reply, or edit). This content is transmitted to the selected provider's Application Programming Interface (API) only to perform the action you initiate, and is not used by those providers to train, fine-tune, create, or improve any generalized or foundational AI/ML model.
    2. We access these providers under their API or commercial terms (not consumer tiers), under which submitted data is not used for model training. The third-party AI providers we may use include:
      1. OpenAI (OpenAI API)
      2. Anthropic (Claude API)
      3. Z.ai / Zhipu AI (GLM API)
      4. xAI (Grok API)
      5. DeepSeek, Alibaba Qwen, Moonshot Kimi, and Meta Llama — accessed via the OpenRouter API, which we configure to route only to providers that do not train on or retain input data.
    4. We do not process Google Workspace user data through any consumer or free tier that uses submitted data for model training.

  15. LEGAL BASIS FOR PROCESSING.

    1. We process your personal information only when we have a valid legal basis to do so under applicable data protection laws, including but not limited to the General Data Protection Regulation (“GDPR”), the California Consumer Privacy Act (“CCPA”), and other similar frameworks, where applicable. The specific legal bases for processing depend on the nature of the information and the context in which it is collected and used. In most cases, we rely on one or more of the following legal bases:
      1. Performance of a Contract: We process your personal information to fulfill our contractual obligations to you, including providing access to our Services, delivering functionality, managing subscriptions or purchases, responding to inquiries, and maintaining your user account.
      2. Legitimate Interests: We may process your information where it is necessary for our legitimate interests or those of a third party, provided such interests are not overridden by your rights and freedoms. This includes activities such as improving our Services, preventing fraud, ensuring the security of our systems, understanding user behavior, and marketing our offerings to existing users. We conduct balancing tests to ensure that our legitimate interests do not unduly infringe on your privacy.
      3. Consent: In certain circumstances, we will rely on your explicit consent to process your personal data. This includes, for example, when you sign up to receive promotional communications or when you opt in to participate in surveys, beta testing, or usage analytics. You have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
      4. Compliance with Legal Obligations: We may process your information where necessary to comply with our legal or regulatory obligations, such as responding to lawful requests from public authorities, maintaining business records, or fulfilling tax or accounting requirements.
      5. Protection of Vital Interests: In rare cases, we may process personal data to protect your vital interests or those of another person, such as in the case of a security breach or other urgent matter that poses a threat to safety.
    3. Where required (e.g., EEA/UK/CH), our use of Microsoft Clarity is based on consent for non-essential cookies and session replay. In other regions, we may rely on legitimate interests (improving the Services and diagnosing issues) while honoring opt-out choices. Clarity’s Consent Mode is implemented to ensure cookies are set only after valid consent.
    4. We take care to apply the appropriate legal basis to each data processing activity, and we are committed to transparency in how those bases are determined. If you have questions about the legal bases relied upon for a specific processing activity, you may contact us for further clarification.

  17. COOKIES AND TRACKING.

    1. We use cookies and other tracking technologies to enhance the functionality and performance of our Services, personalize user experiences, analyze user behavior, and support marketing efforts. These technologies are deployed on our website, application, and any related digital properties and may be operated by us or by third-party service providers acting on our behalf. By accessing or using the Services, you consent to the placement of cookies and similar technologies on your device, subject to your ability to manage preferences as outlined below.
    2. Cookies are small data files that are stored on your browser or device when you visit or interact with a digital service. These files help remember your activity and preferences over time, enabling features such as login continuity, session authentication, customized settings, and the retention of usage preferences. We employ various types of cookies, including strictly necessary cookies essential to the operation of the Services, performance cookies that measure and enhance system efficiency, functional cookies that allow for personalization, and marketing or advertising cookies that support outreach efforts and the delivery of tailored content.
    3. In addition to cookies, we may utilize pixel tags, web beacons, embedded scripts, SDKs, and local storage technologies to capture user activity, diagnose system issues, and facilitate cross-device tracking. These tools may enable us to collect technical information such as device type, browser type, operating system, screen resolution, referring URLs, time spent on our Services, user interactions, and conversion metrics. In some instances, these technologies allow us to better understand how users engage with the platform so we can improve navigation, surface relevant content, and optimize overall system design.
    4. We also partner with third-party analytics and advertising providers, including but not limited to Google Analytics, Meta, and other behavioral tracking platforms. These providers may set their own tracking technologies through our Services, collecting data in accordance with their own privacy policies. Such data may be used to assess campaign performance, understand demographic trends, and deliver advertisements based on your inferred interests or prior browsing behavior. We do not control the operation of third-party cookies and disclaim any responsibility for their data handling practices.
    5. Where legally required, we will obtain your express consent before deploying any non-essential cookies or trackers. Depending on your jurisdiction and the nature of the cookies involved, you may be presented with a cookie management banner or tool that enables you to accept or decline specific categories of cookies. In addition, you may control or disable cookies directly through your browser or device settings. Doing so, however, may impact the availability or functionality of certain features, and your preferences may not persist across all sessions or devices unless saved via persistent cookies.
    6. At present, our Services do not respond to “Do Not Track” signals transmitted by web browsers, as no uniform standard for interpreting such signals has been established across the industry.
    7. All tracking data is retained only for as long as is necessary to fulfill the purpose for which it was collected, and is subject to our data retention and security practices as described elsewhere in this Privacy Policy. We remain committed to maintaining transparency about our use of cookies and tracking technologies and may update this section periodically to reflect changes in technology, law, or our internal practices.
    8. We use Microsoft Clarity to better understand how users interact with our website and app. Clarity collects behavioral data such as page rendering details, mouse movements, clicks, scrolls, and basic device/technical metadata. Clarity may create heatmaps and session replays to help us diagnose UX issues and improve performance. We configure Clarity’s privacy features (including masking and consent controls) so that non-essential cookies and session recording only activate after valid consent in jurisdictions that require it. For details on Clarity’s data collection and consent mode, see Microsoft’s documentation and Privacy Statement.
    9. We also use Cloudflare Turnstile, a privacy-focused security tool that verifies visitors are human rather than automated bots without relying on traditional CAPTCHA puzzles. Turnstile is designed to process only the minimal technical signals necessary for this purpose, and any cookies or similar technologies it sets are strictly necessary for the security of the Services (they do not require separate cookie-consent opt-in). For more information, see Cloudflare's Turnstile Privacy Addendum: https://www.cloudflare.com/en-gb/turnstile-privacy-policy/.
    10. Email open and click tracking. Separately from the website technologies described above, we use tracking pixels (web beacons) and unique tracked links in the emails we send to understand engagement — for example, whether and when you opened an email, your approximate location (derived from your IP address), and which links you clicked. Where prior consent is required — including recipients in France and Italy — this tracking is off by default and enabled only if you opt in; elsewhere we rely on our legitimate interests. You can grant or withdraw consent at any time using the "Manage Tracking Preferences" link in the footer of our emails. You can also limit open tracking by disabling automatic image loading in your email client (this does not prevent link-click tracking). Managing tracking preferences does not unsubscribe you from our emails. This tracking is provided through our email service provider, Customer.io.

  19. YOUR RIGHTS AND CHOICES.

    1. We are committed to ensuring that users have meaningful control over their personal information. Depending on your location, applicable data protection laws may provide you with specific rights regarding your personal data. We honor and respect these rights and provide mechanisms to help you exercise them. These rights are not absolute and may be subject to certain legal limitations, including our need to retain certain data for legitimate business or legal purposes.
    2. You may have the right to access the personal information we hold about you. This includes the right to request confirmation of whether we process your data, to receive a copy of the data we maintain, and to understand how it is used and shared. Where data is inaccurate, incomplete, or outdated, you have the right to request that it be corrected or updated. In certain circumstances, you may also have the right to request that your information be deleted or erased, especially when it is no longer necessary for the purposes for which it was collected or processed, or when you withdraw previously granted consent.
    3. You may request that we restrict or limit the processing of your personal information where you have objected to processing, contested its accuracy, or believe our processing is unlawful. You may also object to the processing of your personal information in certain contexts, such as for direct marketing or where we rely on legitimate interests as the basis for processing.
    4. Where we rely on your consent to process personal information, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. If you no longer wish to receive promotional communications from us, you may opt out at any time by following the unsubscribe instructions included in those messages or by contacting us directly. Please note that even if you opt out of marketing emails, we may still send you non-promotional communications related to your account or transactions with us.
    5. You also have the right to request the transfer of your personal data to another organization (known as the right to data portability), where technically feasible and where processing is carried out by automated means based on your consent or a contractual relationship.
    6. If you are located in certain jurisdictions—such as the European Economic Area (EEA), the United Kingdom, or California—you may have additional rights under local data protection laws. These include, where applicable, the right not to be subject to automated decision-making that produces legal or similarly significant effects, and the right to lodge a complaint with a supervisory authority or regulator if you believe your rights have been violated.
    7. To exercise any of your data rights, you may contact us using the information provided in the “Contact Us” section of this Policy. To help protect your privacy, we may need to verify your identity before fulfilling certain requests. We will respond to all requests within a reasonable timeframe and in accordance with applicable law.
    8. Please be aware that in some cases, we may be required to retain certain information to comply with legal obligations, enforce our Terms of Service, or resolve disputes. We will inform you when such limitations apply.
    9. You can manage analytics and session-replay preferences via our cookie banner or browser settings at any time. If you withdraw consent, Clarity’s cookies will be disabled and future session recordings will not be captured. Previously collected data remains subject to Microsoft’s retention schedule.

  21. ACCOUNT DELETION.

    1. You may request the deletion of your account and associated personal information at any time from Help Center or by contacting us through the channels listed in the “Contact Us” section of this Privacy Policy. Upon receiving your request, we will take reasonable steps to verify your identity before proceeding to ensure the security and integrity of your data. Once verified, we will permanently delete or de-identify your account data from our active systems, subject to the limitations outlined below.
    2. Please note that account deletion is irreversible. Once your account is deleted, you will lose access to all associated data, services, content, and purchase history. This action cannot be undone, and we are unable to recover deleted data. We encourage you to download any information you may wish to retain prior to initiating a deletion request.
    3. Certain information may be retained for a limited period of time in backup archives, solely for business continuity purposes. Additionally, we may retain information as necessary to comply with legal obligations, resolve disputes, enforce our Terms of Service, detect or prevent fraud, and protect the integrity of our platform. In such cases, retained data will be restricted to only what is strictly required for those specific purposes and will be securely stored and protected.
    4. If your account was created through a third-party service (e.g., Google, Apple), you may also be required to delete your access through that third-party platform. Deleting the app or ceasing use of the Services does not constitute an account deletion request.

  23. DATA RETENTION.

    1. We retain personal information for as long as necessary to fulfill the purposes for which it was collected, as outlined in this Privacy Policy, including providing the Services, maintaining and improving platform performance, complying with our legal obligations, resolving disputes, and enforcing our agreements.
    2. The duration for which we retain specific categories of data may vary depending on the nature of the information, the purpose for which it was processed, and any applicable legal or regulatory requirements. For example, data related to your account, such as your name, contact details, transaction history, and service usage logs, may be retained for as long as your account remains active and for a reasonable period thereafter to comply with retention obligations and safeguard our legitimate business interests.
    3. When we no longer have a legitimate need to retain personal information—whether for business, legal, or technical purposes—we will take appropriate steps to delete, anonymize, or aggregate the data so that it no longer identifies you. Where deletion is not immediately feasible (e.g., due to the existence of backup systems), we will securely store the information and isolate it from any further processing until deletion becomes possible.
    4. We may retain de-identified or aggregated data, which no longer constitutes personal information, for research, analytics, benchmarking, or product development purposes, without further notice to you.
    5. If you request account deletion, we will remove your personal information from active databases in accordance with our Account Deletion section and applicable laws. Please note that some information may remain in archived or backup systems for a limited time, consistent with our data retention and disaster recovery protocols.
    6. For data processed by Microsoft Clarity on our behalf, Microsoft currently retains: (i) recordings (playback data) for ~30 days, (ii) heatmap and click/aggregated data for up to ~13 months, and (iii) “favorited/labeled” sessions for up to ~13 months. After these periods, data on Clarity servers (including backups) is deleted per Microsoft’s policy. Retention periods and practices are controlled by Microsoft and may change; see Microsoft’s Clarity retention documentation for the latest details.

  25. DATA SECURITY.

    1. We are committed to protecting the integrity, availability, and confidentiality of your personal information. To that end, we implement comprehensive administrative, technical, and physical security measures designed to safeguard the data we collect and process through our Services.
    2. All data transmitted between your device and our systems is encrypted using industry-standard protocols such as Transport Layer Security (TLS). We also use encryption at rest for sensitive stored data and employ secure credential management techniques (such as salted hashing for passwords) to further protect your account information. Our systems are hosted with leading cloud infrastructure providers who maintain strict physical security controls, including biometric access, 24/7 surveillance, and fire suppression systems.
    3. Internally, we follow the principle of least privilege: only authorized personnel with a clear business need have access to user data, and such access is reviewed and monitored regularly. We employ firewall protection, intrusion detection and prevention systems, access logging, and vulnerability management programs to monitor, detect, and respond to unauthorized access or unusual activity. Our codebase is regularly audited for security risks, and we maintain an incident response protocol to respond promptly to potential threats or breaches.
    4. We also conduct periodic penetration testing and maintain up-to-date security patches and system configurations to defend against emerging threats. Our infrastructure includes multi-region redundancies and backup systems to ensure data resilience and continuity of service in the event of outages or disasters.
    5. While we take extensive precautions, no system can be guaranteed to be 100% secure. You acknowledge that transmission of data over the internet inherently involves certain risks. We encourage you to take proactive steps to protect your own information
    6. In the event of a data breach that poses a significant risk to your rights or freedoms, we will notify you and any applicable regulatory authorities in accordance with legal requirements. Notification will be made promptly and will include details of what occurred, what information was involved, and what actions we are taking in response.

  27. CHILDREN’S PRIVACY.

    1. Our Services are not directed to, intended for, or designed to attract individuals under the age of 18 (or the equivalent minimum age in the relevant jurisdiction). We do not knowingly collect or solicit personal information from children under this age. If you are under 18, you are not permitted to access or use the Services, and you should not provide any personal information through our website, application, or other communication channels.
    2. In the event that we become aware that we have inadvertently collected personal information from a child under the applicable age threshold without verified parental consent, we will take prompt steps to delete that information from our records. If you believe that a child has provided us with personal information in violation of this Policy, please contact us immediately so that we can investigate and take appropriate action.
    3. Parents and legal guardians who become aware that their child has accessed the Services or submitted personal information without their consent may request removal of the data by contacting us using the information in the Contact Us section of this Policy. We reserve the right to take reasonable steps to verify the identity and legal authority of any individual requesting information about a minor.
    4. We encourage parents and guardians to monitor and guide their children’s online activity to help ensure that their privacy is protected at all times.

  29. INTERNATIONAL USERS.

    1. Our Services are operated from the United States and are primarily intended for users located within the United States. However, we recognize that individuals from other countries may access our platform. If you are accessing the Services from outside the United States, you acknowledge and agree that your personal information will be transferred to, stored in, and processed in the United States or other jurisdictions where we or our service providers operate.
    2. These jurisdictions may not offer the same level of data protection as your home country. By using the Services, you understand that your information may be subject to the laws of the United States, including lawful access requests by government authorities. You expressly consent to the transfer of your information to the United States and other jurisdictions, and to its storage and processing in accordance with this Privacy Policy.
    3. We take appropriate measures to ensure that international data transfers comply with applicable laws, including the European Union’s General Data Protection Regulation (“GDPR”) and similar frameworks in other regions. Where required, we implement safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission or rely on other lawful bases to support cross-border transfers of personal data.
    4. If you are a resident of the European Economic Area (EEA), United Kingdom (UK), or Switzerland, you have certain rights under applicable data protection laws, including the right to request access to your personal data, request correction or deletion, object to or restrict processing, and lodge a complaint with a data protection authority. Please see the Your Rights and Choices section of this Policy for additional details.
    5. Residents of Canada, Australia, Brazil, and other jurisdictions with specific data protection laws may also have rights regarding how their personal information is processed. We will respond to such requests in accordance with the applicable local laws governing data access, correction, or deletion.
    6. Regardless of your location, we are committed to treating your personal information with care and maintaining practices that align with globally recognized privacy principles. If you have questions about how your data is handled internationally or wish to exercise your rights under local law, please contact us using the details provided in the Contact Us section.

  31. CALIFORNIA RESIDENTS.

    1. If you are a resident of California, you are entitled to certain rights under the California Consumer Privacy Act (“CCPA”), as amended by the California Privacy Rights Act (“CPRA”). This section supplements the information provided in this Privacy Policy and applies solely to individuals residing in the State of California. We are committed to complying with the CCPA/CPRA and providing California residents with clear explanations about how we collect, use, and share personal information.
    2. Over the past twelve (12) months, we may have collected various categories of personal information from or about California users, including identifiers (such as name, email address, and IP address), internet or other electronic network activity information (such as browsing behavior and usage metrics), geolocation data (if enabled by the user), commercial information (such as transaction or subscription history), and inferences drawn from the information we collect to better understand user preferences and improve our Services. We do not collect sensitive personal information as defined by the CPRA, such as Social Security numbers or precise geolocation.
    3. This information is collected and used for the business and commercial purposes described in the “How We Use Your Information” and “Purpose of Processing” sections above. We use it to operate, maintain, and enhance our Services, provide personalized features, communicate with users, prevent fraud, comply with legal obligations, and analyze usage trends to improve our offerings. We do not sell or share your personal information with third parties for monetary consideration or for cross-context behavioral advertising, as those terms are defined under California law.
    4. We may disclose certain categories of personal information to service providers, contractors, and trusted third parties that assist us in operating the Services and fulfilling our obligations to you. These disclosures are made pursuant to written agreements that require such entities to use the information only for specified purposes and to maintain its confidentiality and security. As a California resident, you may exercise the following rights under the CCPA/CPRA:
      1. Right to Know: You have the right to request that we disclose to you the categories and specific pieces of personal information we have collected about you, the sources from which we collected that information, the purposes for collecting or sharing it, and the categories of third parties with whom we shared it.
      2. Right to Delete: You have the right to request the deletion of personal information we have collected from you, subject to certain exceptions permitted by law (such as where the information is necessary to complete a transaction or comply with a legal obligation).
      3. Right to Correct: You have the right to request that we correct inaccurate personal information we maintain about you.
      4. Right to Opt Out of Sale or Sharing: You have the right to direct us not to sell or share your personal information. However, as noted above, we do not sell or share personal information within the meaning of the CCPA/CPRA.
      5. Right to Limit Use of Sensitive Personal Information: You have the right to limit our use or disclosure of your sensitive personal information. We do not collect sensitive personal information as defined under the CPRA, so this right does not apply to our Services.
      6. Right to Non-Discrimination: You have the right to be free from discriminatory treatment for exercising any of your CCPA/CPRA rights. We will not deny you access to our Services, charge you different prices, or provide a different level of service solely because you exercised your privacy rights.
    6. To exercise any of your rights under California law, please contact us using the details provided in the Contact Us section of this Privacy Policy. In order to protect your personal information and prevent unauthorized access, we may request verification of your identity before processing your request. You may also authorize an agent to make a request on your behalf, provided that you give the agent signed permission and we can verify both your identity and the agent’s authority.
    7. Please note that we do not currently respond to browser-based “Do Not Track” signals. You may still manage your privacy preferences through your browser settings or by following the cookie and tracking options described in the “Cookies and Tracking” section of this Policy.

  33. THIRD PARTY LINKS.

    1. Our Services may contain links to websites, applications, or services operated by third parties that are not owned or controlled by us. These third-party websites may include, but are not limited to, external resources, integrations, tools, or social media platforms. Any such links are provided for your convenience and informational purposes only.
    2. We do not endorse, monitor, verify, or make any representations regarding the content, accuracy, privacy practices, or security of any third-party websites or services. When you click on a third-party link or interact with a third-party feature, you may be directed to a website or service governed by its own privacy policy and terms of use. We strongly encourage you to review the privacy policies and terms of any third-party websites or services that you access, as they may differ from ours and may not provide the same level of protection.
    3. Your interactions with third-party websites or platforms are solely between you and the third party. We are not responsible for any damages, losses, liabilities, or other consequences arising from your use of or reliance on any third-party websites, services, or content. We disclaim all liability arising from your access to or use of any third-party links provided through the Services.
    4. In addition, we reserve the right to remove or disable links to any third-party site or service at any time without notice and at our sole discretion. The inclusion of a third-party link does not imply any partnership, sponsorship, or affiliation with the third party unless expressly stated.
    5. By using our Services, you acknowledge and agree that your use of third-party services is entirely at your own risk and subject to the third party’s terms and privacy practices.

  35. CHANGES TO THIS POLICY.

    1. We reserve the right to update, revise, or otherwise modify this Privacy Policy at any time to reflect changes in our practices, legal obligations, or enhancements to our Services. Any changes we make will be effective immediately upon posting the revised Policy on our website or application, unless otherwise required by applicable law.
    2. When we update the Policy, we will revise the “Last Updated” date at the top of the document. In the event of material changes that may significantly affect your rights or the way we process your personal information, we will provide additional notice, which may include sending an email, displaying a prominent notice within the Services, or by other reasonable means.
    3. We encourage you to review this Privacy Policy regularly to stay informed about how we collect, use, disclose, and protect your information. Your continued use of the Services after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the changes, you should discontinue use of the Services and, where applicable, update your privacy preferences or request deletion of your account.
    4. If you have any questions about the changes or how they may affect you, please contact us using the details provided in the Contact Us section below.

  37. GOOGLE USER DATA.

    1. When you connect your Google account, our application accesses limited Google user data via Google APIs solely to provide the features you have requested. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
    2. What we access: We access the following Google Workspace data, limited to the scopes you authorize and only to provide the corresponding features you request:
      1. Gmail: to read, summarize, organize, draft, and send messages on your behalf.
      2. Google Drive: to find, open, create, and edit files you direct us to work with.
      3. Google Docs, Sheets, and Slides: to read, create, and edit documents, spreadsheets, and presentations at your request.
      4. Google Calendar: to view, create, and edit events on your behalf.
      5. Google Tasks: to create and manage your tasks.
      6. Google Meet: to create and manage meeting spaces generated by the application.
    4. How we use it: Google user data is used only to provide and improve the user-facing features of the Services that are visible and prominent in the user experience. We do not use Google user data for any other purpose.
    5. How we share it: We do not transfer Google user data to third parties except: (a) necessary to provide or improve user-facing features, and only with service providers operating under equivalent confidentiality and use restrictions. This includes (i) transmitting content you select to the third-party AI providers described in the "Third-Party AI Providers" section, at your direction, solely to generate requested outputs, none of which use Google user data to train their models; and (ii) our infrastructure provider Composio, which securely stores the credentials that authorize this access; (b) to comply with applicable law; or (c) as part of a merger, acquisition, or sale of assets, with prior notice to users. We do not sell or license Google user data.
    6. How we protect it: Google user data is transmitted over TLS, stored encrypted at rest, and access is restricted to authorized personnel on a need-to-know basis.
    7. Retention and deletion: We retain Google user data only as long as necessary to provide the requested features. You may revoke access at any time via your Google Account permissions page (https://myaccount.google.com/permissions), which will trigger deletion of associated Google user data from our active systems within 30 days. You may also request deletion by contacting us at support@use.ai.
    8. What we will NOT do with Google user data:
    9. Train, develop, or improve generalized or non-personalized AI or machine learning models.
    10. Serve advertising of any kind, including personalized, retargeted, or interest-based advertising.
    11. Sell or transfer to data brokers or information resellers.
    12. Use for credit, lending, or eligibility decisions.
    13. Build or augment external databases or user profiles unrelated to the Services.

  39. CONTACT US.

    1. If you have any questions, concerns, or requests regarding this Privacy Policy, our data practices, or your personal information, we encourage you to contact us directly. Your privacy matters to us, and we are committed to responding promptly and transparently. You may contact us via:
      1. Email: help@use.ai 
      2. Mailing Address: 2093 Philadelphia Pike #1935, Claymont, DE 19703, USA
    3. When reaching out, please include sufficient detail to help us understand and respond to your inquiry. This may include your name, the nature of your request or concern, and any relevant context such as your use of the Services or applicable dates.
    4. Please note that, depending on the nature of your request, we may need to verify your identity before responding in order to protect your personal information and maintain security.
    5. We strive to respond to all privacy-related inquiries in a timely and appropriate manner and will work in good faith to resolve any concerns you may have about your privacy or the use of your information in connection with our Services.