Privacy Policy
Thank you for using Ansai (the "Service"), operated by Atlatero, Inc. ("Atlatero", "we", "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our Service.
1. Information we collect
We may collect and process the following data about you:
- Account information. Name, email address, phone number, and organization details you provide when you sign up.
- Connected account data. Content and metadata from third-party accounts you choose to connect, such as email, calendar events, contacts, documents, and CRM records. See section 3.
- Usage data. Information about how you use the Service, including the workflows and agents you run and the actions they take.
- Cookies and similar technologies. We use cookies to keep you signed in, remember preferences, and understand how the Service is used.
2. How we use your information
- To provide, operate, and maintain the Service, including running the agents and workflows you configure.
- To improve, personalize, and develop the Service.
- To communicate with you, including for support and service announcements.
- To protect the Service and its users, and to comply with legal obligations.
3. Connected accounts (Google, Microsoft, and others)
When you connect a third-party account such as Google Workspace, Microsoft 365, Slack, or HubSpot, you authorize Ansai to access specific data through that provider's API using the permissions shown on the provider's consent screen. We access only the data needed to perform the features you enable, for example reading mail headers and calendar attendees to build your address book, or reading and drafting messages inside a workflow you set up.
Ansai's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Our use of Microsoft Graph data is governed by this policy and the Microsoft consent you grant. Specifically, we do not:
- Sell connected account data or use it for advertising.
- Use connected account data to train generalized artificial intelligence or machine learning models.
- Allow humans to read your connected account data, except with your consent, for security or abuse investigation, to comply with law, or when the data is aggregated and anonymized.
- Transfer connected account data to third parties except to provide or improve the features you use, as required by law, or as part of a merger or acquisition with notice to you.
You can disconnect an account at any time from the integrations page in the app, which revokes our access token. You can also revoke access from your Google or Microsoft account security settings. We delete stored data from a disconnected account within 30 days unless we are required to retain it by law.
4. Data used with AI models
The Service uses large language models from third-party providers to run agents and workflows. Content is sent to these providers only as needed to perform the task you requested and under agreements that prohibit the provider from training on your data. We do not use your data to train our own models unless you separately and explicitly opt in.
5. Data security
We implement appropriate technical and organizational measures to protect your data, including encryption in transit and at rest, access controls, and audit logging. No transmission over the Internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.
6. Data retention
We retain your personal data only for as long as necessary for the purposes described in this policy, or as required by law. You may request deletion of your account and associated data at any time by contacting us.
7. Sharing your information
We do not sell, trade, or rent your personal information. We share it only with service providers who process it on our behalf under contract (such as cloud hosting and model providers), as required by law, to protect our rights and users, or with your direction and consent.
8. Your rights
Depending on your location, you may have rights to access, correct, delete, export, or restrict the processing of your personal data, and to object to certain uses. To exercise these rights, contact us using the details below. We will respond within the time required by applicable law.
9. Changes to this policy
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will post the updated policy on this page and update the "last updated" date. For material changes we will notify you by email or within the Service.
10. Contact us
If you have questions about this Privacy Policy or our data practices, contact us at messages@atlatero.com.