Privacy Policy

1 Introduction

Welcome to Airric ("we", "our", "us"). This Privacy Policy describes how Airric Technologies, Inc. collects, uses, discloses, and safeguards your information when you use our website, applications, APIs, and AI automation services (collectively, the "Services").

By accessing or using our Services, you agree to the collection and use of information in accordance with this policy. If you do not agree with any part of this policy, please discontinue use of the Services.

2 Information We Collect

We collect information to deliver, improve, and secure our Services. The categories of data we may collect include:

2.1 Information You Provide

• Account data: name, email address, company name, password, and billing details.
• Workspace content: documents, knowledge bases, and configuration you upload for AI training.
• Communications: messages, support tickets, and feedback you send us.
• Payment information: processed securely via PCI-DSS compliant providers (Stripe, Paddle). We never store full card numbers.

2.2 Information Collected Automatically

• Usage data: pages viewed, features used, session duration, and interaction events.
• Device data: IP address, browser type, operating system, and device identifiers.
• Log data: timestamps, error reports, and API request metadata.

2.3 Information from Third Parties

• Authentication providers (Google, GitHub) when you sign in via SSO.
• Integration partners (Slack, Notion, HubSpot) when you connect them to your workspace.

3 How We Use Your Data

We use the information we collect to:

• Provide, operate, and maintain the Services.
• Authenticate users and prevent fraud or abuse.
• Process transactions and send related billing notices.
• Personalize your experience and recommend relevant features.
• Respond to support requests and communicate service updates.
• Analyze usage trends to improve performance and reliability.
• Comply with legal obligations and enforce our Terms of Use.

4 AI & Data Processing

Airric uses large language models (LLMs) from providers including OpenAI, Anthropic, and Google to power AI agents. Here's how your data interacts with these systems:

• Your data is not used to train foundation models. We enforce zero-retention agreements with all LLM providers.
• Fine-tuning is optional and isolated. If you opt in, your workspace data is used only to fine-tune private models exclusive to your account.
• Data residency options: Enterprise customers can select US, EU, or APAC processing regions.
• Human review is prohibited except when you explicitly request support debugging.

5 Cookies & Tracking

We use cookies and similar technologies to operate our Services. Categories include:

• Essential cookies: required for authentication, security, and core functionality.
• Preference cookies: remember your theme (dark/light) and language settings.
• Analytics cookies: help us understand how the Services are used (opt-out available).

You can control cookies through your browser settings. Disabling essential cookies may prevent you from logging in or using parts of the Services.

6 Data Sharing

We do not sell your personal information. We share data only in the following limited circumstances:

• Service providers: trusted vendors (hosting, payments, analytics) bound by strict data processing agreements.
• Integrations you enable: when you connect third-party apps, we share only the minimum data required.
• Legal requirements: when required by law, subpoena, or to protect the rights and safety of our users.
• Business transfers: in the event of a merger or acquisition, with continued protection under this policy.

7 Data Security

We implement industry-leading security measures to protect your information:

• End-to-end encryption in transit (TLS 1.3) and at rest (AES-256).
• SOC 2 Type II certified infrastructure and annual third-party audits.
• Role-based access controls and multi-factor authentication (MFA).
• Continuous monitoring, intrusion detection, and incident response procedures.

While we strive to protect your data, no system is 100% secure. If you suspect unauthorized access, contact us immediately at security@airric.com.

8 Data Retention

We retain your information only as long as necessary to fulfill the purposes described in this policy:

• Account data: retained while your account is active, plus 30 days after deletion.
• Conversation logs: default 90 days, configurable from 7 days to 2 years.
• Billing records: retained for 7 years to comply with tax regulations.
• Backups: encrypted and automatically purged within 35 days.

9 Your Rights

Depending on your location (GDPR, CCPA, and similar laws), you may have the following rights:

• Access: request a copy of the personal data we hold about you.
• Correction: update inaccurate or incomplete information.
• Deletion: request erasure of your data ("right to be forgotten").
• Portability: receive your data in a machine-readable format (JSON/CSV).
• Objection: opt out of certain processing activities, including marketing.
• Non-discrimination: we will not degrade your service for exercising these rights.

To exercise any right, email privacy@airric.com or use the self-service tools in Dashboard → Settings → Privacy. We respond within 30 days.

10 International Transfers

Airric is headquartered in the United States. When we transfer data across borders, we rely on:

• Standard Contractual Clauses (SCCs) approved by the European Commission.
• UK International Data Transfer Addendum.
• Data Privacy Framework (DPF) certification where applicable.

11 Children's Privacy

Our Services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us so we can delete it promptly.

12 Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Notify you via email at least 30 days before the change takes effect.
• Display an in-app banner with a link to the revised policy.
• Update the "Last updated" date at the top of this page.

Your continued use of the Services after changes take effect constitutes acceptance of the updated policy.

13 Contact Us

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, please reach out: