Privacy Policy

1. Information we collect

We may collect information you provide when creating an account or using the platform, including your name, email address, business details, workspace configuration, knowledge sources, API-key metadata, and support requests. We also receive technical information needed to operate and secure the service, such as browser, device, IP, request, authentication, and session information.

When a business embeds a Connect AI widget on its website, visitors may submit messages to that widget. Those messages, the AI responses, and related session information may be processed and temporarily stored to provide the conversation and security controls.

2. Support and diagnostic information

If a user submits a support report through a Connect AI widget, the report may include the submitted description, the page URL, recent conversation context, and browser or device information such as user agent, language, platform, viewport, screen dimensions, and timezone. This information is used to investigate and resolve reported problems.

3. How we use information

We use information to create and authenticate accounts, provide Connect AI, keep business workspaces isolated, process chatbot requests, retrieve relevant business knowledge, provide support, prevent abuse, maintain security, enforce usage limits, maintain audit records, diagnose failures, and improve reliability.

4. Business customer data

Businesses may add their own knowledge, documents, configuration, and instructions to Connect AI. That information is used to provide the services configured by the relevant business. Businesses are responsible for ensuring that the information they provide is lawful, accurate, appropriately authorized, and suitable for processing through the service.

Where a business uses Connect AI to communicate with its own website visitors or customers, the business is responsible for providing any notices, obtaining any permissions or lawful bases, and giving any instructions required by applicable law. Depending on the arrangement and applicable law, Connect AI may process that information on the business's behalf.

5. AI processing

To generate responses, Connect AI may send relevant conversation messages, system instructions, and retrieved business knowledge to the AI provider configured for the deployment. The configured provider may process that information according to its applicable terms and privacy documentation. AI-generated responses are returned to Connect AI so they can be delivered to the requesting user.

Do not submit information to Connect AI unless you have the right to have it processed for the intended purpose.

6. Cookies and similar technologies

Connect AI uses necessary browser storage and cookies where required for authentication, sessions, security, and core application functionality. We do not currently require advertising or non-essential analytics cookies for the public landing page.

7. Service providers and infrastructure

Connect AI uses third-party infrastructure and service providers for functions such as database and authentication services, storage, deployment, and AI processing. The current application uses Supabase for core database, authentication, and storage functionality. Additional providers may be used depending on the deployment configuration. Providers receive information needed to provide their respective services and may process it according to their own terms and privacy policies.

8. Security

We use technical and organizational safeguards appropriate to the service, including authenticated access, row-level database controls, server-side handling of privileged credentials, workspace-level authorization, API-key hashing, temporary session tokens, origin restrictions for embedded widgets, rate limiting, audit logging, and security headers. No internet service can guarantee absolute security.

9. Retention

Connect AI widget sessions are created with an expiration period controlled by the service configuration and currently default to 30 minutes. Expired sessions that have not been associated with a support report are cleaned up as part of normal session maintenance, including their associated chat messages. Sessions associated with support reports may be retained for support and security purposes.

Business knowledge sources and related extracted content are retained while needed to provide the configured service and until the relevant business removes them or the applicable account or workspace is terminated, subject to backups, security records, and legal obligations. Audit and support records may be retained longer where reasonably necessary for security, troubleshooting, dispute resolution, or legal compliance.

10. Your choices and privacy requests

Depending on your role and applicable law, you may have rights to access, correct, export, object to, restrict, or request deletion of personal information. Account users can stop using the service and contact the Connect AI team to request assistance. Requests may need to be verified before action is taken.

11. Children

Connect AI is intended for business and professional use and is not directed at children. Do not submit information about a child unless you have an appropriate lawful basis and authorization to do so.

12. International and third-party processing

Depending on the providers and deployment configuration used by Connect AI, information may be processed or stored in countries other than the country where it was collected. Where applicable, the service operator will use appropriate contractual, technical, or other safeguards required by applicable law.

13. Connect AI testing status

Connect AI is currently in testing and development. It is currently operated as a development/testing project and is not currently operated through a registered company or incorporated business entity. The service, features, AI systems, integrations, and content may be experimental and may be modified, suspended, or discontinued during this testing period.

Because Connect AI is undergoing testing, the service may contain errors, inaccuracies, interruptions, security limitations, or other defects. Users should not rely on the service for critical decisions or as a substitute for qualified professional advice.

14. Changes

We may update this policy as the service changes. The date at the top of this page identifies the latest revision. Material changes should be reviewed before continuing to use the service.

15. Contact

For privacy questions or requests, use the support contact available through your Connect AI account or the contact method provided by the Connect AI team.