Privacy Policy

AICompliant Inc. (“AICompliant,” “we,” “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at aicompliant.ai.

1. Information We Collect

Account Information: Name, email address, company name, job title, and billing details provided during registration and subscription.

Organizational Data: Information about your AI systems, operating states, compliance assessments, and generated documents that you input into the platform.

Usage Data: Log data, device information, IP addresses, browser type, pages visited, features used, and interaction patterns collected automatically.

Payment Data: Payment processing is handled by Stripe. We do not store credit card numbers on our servers. See Stripe’s Privacy Policy.

2. How We Use Your Information

We use your information to: (a) provide, maintain, and improve the Service; (b) generate compliance documents and assessments; (c) process billing and subscriptions; (d) send transactional communications (account alerts, billing receipts, compliance updates); (e) analyze usage patterns to improve the platform; (f) comply with legal obligations.

We do not sell your personal information to third parties. We do not use your organizational compliance data to train AI models.

3. AI-Generated Content

When you generate compliance documents, your organizational data is processed by AI language models (Anthropic Claude and Google Gemini) to produce tailored outputs. This data is transmitted securely via API and is not retained by the AI providers for model training purposes, consistent with their enterprise API terms.

4. Data Sharing

We may share your information with: (a) Service providers — Stripe (payments), Clerk (authentication), Anthropic/Google (AI processing), Resend (email) — solely to operate the Service; (b) Legal authorities — when required by law, subpoena, or legal process; (c) Business transfers — in connection with a merger, acquisition, or sale of assets, with advance notice to users.

5. Data Security

We implement industry-standard security measures including: TLS encryption in transit, encrypted data at rest, role-based access controls, regular security audits, and SOC 2-aligned practices. However, no method of electronic transmission or storage is 100% secure.

6. Data Retention

We retain your account and organizational data for as long as your account is active. Upon account deletion, we remove your personal data within 30 days, except where retention is required by law. Generated documents and audit trails may be retained for up to 7 years to support your compliance record-keeping needs.

7. Your Rights

Depending on your jurisdiction, you may have the right to: (a) access the personal data we hold about you; (b) request correction of inaccurate data; (c) request deletion of your data; (d) export your data in a portable format; (e) opt out of marketing communications; (f) withdraw consent where processing is based on consent.

To exercise these rights, contact us at [email protected].

8. Cookies and Tracking

We use essential cookies for authentication and session management. We may use analytics cookies (Google Analytics) and advertising pixels (Google Ads, Meta) to measure campaign effectiveness. You can control cookie preferences through your browser settings.

9. Children’s Privacy

The Service is not directed to individuals under 18. We do not knowingly collect information from children. If we learn we have collected data from a child, we will delete it promptly.

10. International Users

The Service is operated from the United States. If you access the Service from outside the US, your information will be transferred to and processed in the United States. By using the Service, you consent to this transfer.

11. California Residents (CCPA)

California residents have additional rights under the CCPA, including the right to know what data is collected, the right to delete, and the right to opt out of the sale of personal information. We do not sell personal information. To make a CCPA request, email [email protected].

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify registered users of material changes via email and post the updated policy on this page with a new “Last updated” date.

13. Contact

For privacy-related questions or requests: [email protected] or call 800-407-2118.