Privacy Policy

Effective July 6, 2026

1. What we collect

Account information (name, email, company details), content you provide to the Service (messages, documents, business knowledge, support tickets), usage and billing records, and technical logs (IP address, browser data) for security and rate limiting.

2. How we use it

To operate the Service: powering your company's AI assistant and memory, running your automations, processing payments, providing support, securing the platform, and improving the product. Your company's memory and knowledge are used only for your own workspace — never shown to other companies.

3. Subprocessors

We use trusted providers to run the Service: Vercel (hosting), Supabase (database), Anthropic and OpenAI (AI processing), Clerk (authentication), Stripe (payments), Cloudflare (web delivery), Google (only when you connect Gmail/Calendar), and Resend (email notifications). Each receives only what it needs to perform its function.

4. Connected accounts

If your company connects Gmail or Google Calendar, we access them solely to perform the actions your team requests (reading/sending email, creating events). OAuth tokens are stored encrypted at rest and are never shared across companies. You can disconnect at any time, which revokes our access.

5. Retention & deletion

We keep your data while your subscription is active. After termination you may request an export within 30 days, after which data may be permanently deleted. You can request deletion of specific data at any time.

6. Security

Data is encrypted in transit and at rest. Company workspaces are isolated with row-level security. Sensitive actions require approval and are recorded in audit logs.

7. Your rights

Subject to applicable law (including PIPEDA in Canada), you may request access to, correction of, or deletion of your personal information, and you may withdraw consent for optional processing.

8. Contact

Privacy questions and requests: soccernello@aol.com. Mainbot Automation, Ontario, Canada.