Privacy Policy

Last updated: December 18, 2024

At VIENT AI Agents, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered email management platform. Please read this policy carefully to understand our practices regarding your personal data.

GDPR & CCPA Compliant

We are committed to protecting your data rights under the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). You have the right to access, correct, delete, and port your data at any time.

1. Information We Collect

We collect information you provide directly to us, including: Personal Information: • Name and email address • Organization name • Profile picture (optional) • Payment information (processed securely by Stripe) Usage Information: • Email content processed through our service • Log data (IP address, browser type, access times) • Device information Third-Party Data: • Information from connected services (Gmail, Notion) • OAuth tokens for authorized integrations

2. How We Use Your Information

We use the information we collect to: • Provide, maintain, and improve our services • Process and classify your emails using AI • Generate AI-powered email responses • Send you technical notices and support messages • Respond to your comments and questions • Monitor and analyze trends and usage • Detect and prevent fraudulent transactions • Personalize and improve your experience We do not sell your personal information to third parties.

3. AI Processing & Data Security

AI Processing: Our AI systems process email content to provide classification and response suggestions. This processing is: • Performed in real-time • Not used to train general AI models • Subject to strict access controls Data Security: We implement industry-standard security measures: • End-to-end encryption for data in transit • AES-256 encryption for data at rest • Regular security audits and penetration testing • SOC 2 Type II compliance (in progress) • GDPR and CCPA compliant data handling

4. Information Sharing

We may share your information in the following circumstances: With Your Consent: When you explicitly authorize sharing with third parties Service Providers: • Cloud hosting (AWS, Google Cloud) • Payment processing (Stripe) • Analytics services • Customer support tools Legal Requirements: When required by law or to protect our rights Business Transfers: In connection with a merger, acquisition, or sale of assets We require all third parties to respect the security of your data.

5. Data Retention

We retain your information for as long as necessary to: • Provide our services to you • Comply with legal obligations • Resolve disputes and enforce agreements Retention Periods: • Account data: Until account deletion + 30 days • Processed emails: 90 days (configurable) • Log data: 12 months • Analytics data: 24 months (anonymized) You can request data deletion at any time through your account settings.

6. Your Rights

You have the following rights regarding your data: Access: Request a copy of your personal data Rectification: Correct inaccurate personal data Erasure: Request deletion of your data ("Right to be Forgotten") Portability: Receive your data in a structured format Restriction: Limit how we process your data Objection: Object to certain processing activities Withdraw Consent: Revoke previously given consent To exercise these rights, contact us at fistadev00001@gmail.com

7. Cookies & Tracking

We use cookies and similar tracking technologies to: Essential Cookies: • Authentication and session management • Security features • Load balancing Analytics Cookies: • Usage statistics (anonymized) • Performance monitoring • Error tracking Preference Cookies: • Language and theme settings • Dashboard customization You can manage cookie preferences in your browser settings.

8. International Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place: • Standard Contractual Clauses (SCCs) • Data Processing Agreements with all vendors • Privacy Shield certification (where applicable) We primarily process data in: • United States (AWS us-east-1) • European Union (AWS eu-west-1) • United Arab Emirates (local processing available)

9. Policy Updates

We may update this Privacy Policy from time to time. We will notify you of any changes by: • Posting the new policy on this page • Updating the "Last Updated" date • Sending an email notification for significant changes We encourage you to review this Privacy Policy periodically for any changes.

10. Contact Us

If you have questions about this Privacy Policy or our privacy practices: Email: fistadev00001@gmail.com Data Protection Officer: fistadev00001@gmail.com Mailing Address: VIENT AI Agents Business Bay, Dubai United Arab Emirates We respond to privacy inquiries within 30 days.