Privacy policy

Who we are

This service is operated by [Company legal name], registered in [jurisdiction] at [registered address]. For anything in this policy, the controller of your personal data is [Company legal name].

Questions about privacy can go to [privacy@example.com].

Information you give us

We collect what you provide in order to create and run a company workspace:

• Account details: name, email address, and password credentials.
• Billing details, handled by our payment processor — we do not store full card numbers.
• The description of the business you want to build, and everything you write, upload, or approve inside the workspace.
• Messages you send us for support.

Information we collect automatically

When you use the service we record technical and usage data: IP address, device and browser type, pages viewed, actions taken in the product, and timestamps. We use this to keep the service working, to investigate faults and abuse, and to understand which features are used.

Business and customer data you bring

Running a company through the service may involve data about other people — prospects you research, recipients you contact, and customers who buy from you. You remain responsible for having a lawful basis to process that data, and for the accuracy of any contact list you introduce.

For that data we act as a processor on your instructions. We use it to perform the actions you have asked for and do not sell it.

How we use information

We use personal data to:

• Provide the service: plan, build, publish, and operate the company workspace you set up.
• Carry out actions you have authorised, and hold back the ones you have not.
• Keep a record of actions taken on your behalf, so they remain reviewable by you.
• Bill you, prevent fraud and abuse, and meet legal obligations.
• Improve the service, and — where required — ask your consent before using your content to train models.

AI processing

The service uses automated systems, including large language models, to produce plans, content, code, and outbound messages. Content you provide may be sent to model providers acting as our sub-processors in order to generate those outputs.

Automated output can be wrong. Decisions with legal or financial consequences remain subject to the approval boundaries you configure.

Sharing and processors

We share personal data only with service providers who help us run the service — hosting, model providers, email delivery, payment processing, analytics, and error monitoring — each under contract and only for those purposes.

We may also disclose data where legally required, to protect our rights or someone's safety, or as part of a merger or acquisition, in which case we will tell you.

Cookies

We use cookies and similar technologies to keep you signed in, remember preferences, and measure usage. You can refuse non-essential cookies without losing access to core functionality; blocking essential cookies will stop the service from working.

Retention

We keep account and workspace data for as long as your account is active, and afterwards only as long as needed for legal, accounting, or dispute-resolution purposes. Action history is retained so it stays auditable. You can ask us to delete your workspace at any time.

Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise any of these, contact [privacy@example.com].

You also have the right to complain to your local data protection authority.

International transfers

We and our processors may handle data in countries other than yours, including [list of regions]. Where we transfer personal data out of its country of origin, we rely on an appropriate safeguard such as standard contractual clauses.

Security

We use encryption in transit, access controls, and audit logging to protect data. No service can promise perfect security; if a breach affects your personal data, we will notify you and any regulator as required.

Children

The service is not intended for anyone under 18, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.

Changes to this policy

If we make a material change we will update the date above and, where the change matters to you, tell you directly before it takes effect.