1. Information We Collect
Account Information
Name, email address, organization name, role, and billing information provided during registration.
Usage Data
AI Request counts, feature usage patterns, session duration, and performance metrics. We do NOT collect or store the content of your prompts at the AI provider level (see Zero Data Retention policy).
Documents and Content
Files you upload, AI-generated reports, and conversation history within the platform. All stored in your organization's encrypted partition.
Technical Data
IP addresses, browser type, device information, and referral URLs. IP addresses are hashed after 90 days in audit logs.
2. How We Use Your Information
We use your information to: (a) provide and improve the Service; (b) process billing; (c) communicate service updates and security notices; (d) comply with legal obligations; (e) enforce our Terms of Service. We do NOT use your data for advertising, sell it to third parties, or use it to train AI models.
3. Data Sharing
We share data only with: (a) AI providers (OpenAI, Anthropic, Google) under zero-retention enterprise agreements — they process but never store your data; (b) AWS as our infrastructure provider under their data processing agreement; (c) Stripe for payment processing; (d) law enforcement when compelled by valid legal process.
4. Data Security
We implement industry-leading security measures including AES-256 encryption, per-organization KMS keys, TLS 1.3 in transit, 4-role RBAC with row-level security, MFA enforcement, and immutable audit logging. See our Security Overview for full details.
5. Data Retention
We retain your data only as long as necessary. AI provider prompts: 0 days. User documents: duration of account + 30 days. Audit logs: 6 years. See our Data Retention Policy for the complete schedule.
6. Your Rights
Depending on your jurisdiction, you may have rights to: access your personal data; correct inaccurate data; delete your data; export your data in a portable format; restrict or object to processing; withdraw consent. To exercise these rights, contact privacy@yourai.com.
7. Children's Privacy
YourAI is not intended for use by individuals under 18. We do not knowingly collect personal information from children.
8. International Transfers
All data is processed and stored in AWS US regions. If you access the Service from outside the United States, your data will be transferred to and processed in the US.
9. Changes to This Policy
We will notify you of material changes via email at least 30 days before they take effect. The "Last updated" date at the top of this page indicates when the policy was last revised.
10. Contact Us
For privacy-related questions or requests: privacy@yourai.com. Melade, Inc., Attn: Data Protection Officer.