Privacy Policy

Last Updated: October 23, 2025

This Privacy Policy describes how Aigui ("we", "us", or "our") collects, uses, and discloses your personal information when you use our service for transforming operational documents into visual intelligence (the "Service"). By using the Service, you agree to this policy.

Information We Collect

We collect:

Personal Data: Email, full name, organization details, billing address (if provided).
Uploaded Documents: PDFs, TXT, MD files you upload for processing (e.g., SOPs, manuals).
Usage Data: IP address, browser type, device info, pages visited, time spent (automatically collected).
Cookies/Tracking: For session management, preferences, and analytics (essential and functional cookies only).

How We Use Your Information

Provide the Service: Process documents using Anthropic Claude API for AI classification into hierarchical trees.
Manage Accounts: Authentication, organization membership, role-based access.
Improve Service: Analyze usage trends, debug issues.
Communicate: Send notifications (if enabled), support responses.
Compliance: Meet legal obligations, prevent fraud.

We do not sell your data or use it for advertising.

Sharing Your Information

Service Providers: Anthropic (Claude API, SOC 2 compliant) for AI processing; Supabase for storage/database (with RLS for data isolation).
Within Organizations: Shared with your organization members per roles.
Legal Requirements: If required by law, subpoena, or to protect rights.
Business Transfers: In mergers/acquisitions (data as asset).

No sharing without consent except as described.

Security

We use industry-standard measures: encryption, RLS policies for multi-tenancy isolation, access controls. Claude API is SOC 2 compliant. However, no system is 100% secure—use strong passwords and report issues.

Data Storage: Documents are stored in encrypted cloud storage with organization-level access controls. Only members of your organization can access your documents. Content extracted into nodes is stored in encrypted databases. Supabase (our infrastructure provider) has encryption at rest, but database administrators could theoretically access unencrypted data. For end-to-end encryption requirements, contact us about enterprise deployment options.

Data Retention

Personal data retained as needed for Service (e.g., until account deletion). Documents/nodes deleted upon request or account closure. Usage data kept up to 2 years for analytics.

Your Rights

Access/Update/Delete: Via settings or support request.
Opt-Out: Email notifications in preferences.
Cookies: Browser settings to refuse (may limit functionality).
GDPR/CCPA: If applicable, request export/deletion (contact support).

Children's Privacy

Service not for under 13 (or 16 in some jurisdictions). We delete data if collected from children.

Changes to Policy

Updated versions posted here with date. Continued use means acceptance.