Privacy Policy

This Privacy Policy applies to the Service and describes how the Company collects, uses, discloses, and otherwise processes personal data.

The Customer controls what data is submitted to the Service and how the Service is configured. To the extent the Company processes Customer-provided content on behalf of the Customer, the Customer is the controller (or business) and the Company acts as a processor (or service provider), except as otherwise required by applicable law.

We process information you provide or make available in connection with the Service, which may include account identifiers, contact information, and Customer-provided content submitted for evaluation and decisioning.

We also process technical and usage data generated through use of the Service, such as log data, timestamps, IP addresses, device and browser information, and identifiers necessary to maintain sessions, security, and reliability.

Data types may include: workflow identifiers, request identifiers (including idempotency keys), decision records (PASS/WARN/BLOCK + reason), approval state for WARN decisions, and Customer-provided content submitted for evaluation. Customers control what they submit.

• To provide, maintain, secure, and improve the Service and its features.
• To authenticate users, administer accounts, and provide customer support.
• To monitor for abuse, fraud, misuse, and security incidents and to enforce acceptable use.
• To comply with applicable law and respond to lawful requests and legal process.

We do not sell personal data. We do not disclose personal data for cross-context behavioral advertising.

We may disclose personal data to service providers and subprocessors that assist with hosting, monitoring, analytics, customer support, and communications, under contractual obligations consistent with this Privacy Policy.

We may also disclose personal data (a) to comply with law, legal process, or governmental requests, (b) to protect the rights, security, and safety of the Company, the Service, Customers, or third parties, or (c) in connection with a corporate transaction such as a merger, acquisition, financing, reorganization, or sale of assets.

We retain personal data for as long as reasonably necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. Retention and availability may vary by plan and configuration.

Retention periods for decisions, approvals, and audit logs are plan-dependent and shown in-product. Higher plans provide longer retention for investigations, compliance, and governance.

Where required by applicable law, you may have rights to access, correct, delete, or object to certain processing of personal data. Requests may require verification.

Access is restricted to authorized personnel and intended to support customer support, reliability, and security operations.

We do not train AI models on customer data. We do not sell personal data and do not disclose it for cross-context behavioral advertising.

We implement administrative, technical, and organizational measures designed to protect personal data. No system is perfectly secure. You are responsible for maintaining the security of your own systems, credentials, and integrations.

Where required by applicable law, you may have rights to access, correct, delete, or object to certain processing of personal data. Requests may require verification.

To contact us regarding privacy, please email support@aisafegate.com.