Privacy Policy

1. Information We Collect

We collect information you provide when registering an account (name, email, firm details), client data uploaded for compliance processing (financial statements, company documents, tax returns), and usage data (pages visited, features used, AI interactions). We do not collect data beyond what is necessary to provide our services.

2. How We Use Your Data

Your data is used solely to provide compliance automation services: document analysis, AI-assisted document generation, client management, and financial processing. Client documents are processed through AI models (Anthropic Claude) for analysis and generation. We do not use your data for advertising, marketing to third parties, or any purpose unrelated to the Platform's core services.

3. Data Storage & Security

Data is stored on encrypted cloud infrastructure (Supabase) with row-level security. Documents are stored in encrypted cloud storage. All data transmission uses TLS 1.2+ encryption. Access to client data is restricted to the firm's authorized users only. We implement industry-standard security measures to protect against unauthorized access.

4. AI Processing

When documents are analyzed or generated, content is sent to Anthropic's Claude API for processing. Anthropic does not use API data for training their models. AI-processed data is returned to the Platform and stored in your account. We do not retain AI conversation logs beyond what is needed for your chat history feature.

5. Data Sharing

We do not sell, rent, or share your personal or client data with third parties except as required to provide our services (cloud infrastructure providers, AI processing) or as required by Indian law (court orders, regulatory requirements). Sub-processors are bound by data protection agreements.

6. Data Retention

Client data is retained for as long as your account is active. Upon account cancellation, data is retained for a period consistent with Indian statutory requirements (typically 8 years for financial records) and then securely deleted. You may request earlier deletion of non-statutory data by contacting us.

7. Your Rights

You have the right to access, correct, or request deletion of your personal data. You may export your data at any time through the Platform. For data requests, contact us at privacy@ai2all.ai.

8. Compliance with Indian Law

This Privacy Policy complies with the Information Technology Act, 2000 and the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. We are committed to compliance with the Digital Personal Data Protection Act, 2023 as applicable provisions come into effect.

9. Contact

For privacy concerns, contact our Data Protection Officer at privacy@ai2all.ai.