Privacy Policy

1. Who We Are

AssistantX is an AI assistant workspace. In this document, “we”, “us”, and “our” refer to the operator of the Service, and “you” refers to the person accessing the Service. If you have questions about anything in this policy, use the contact information in the final section.

2. Information We Collect

2.1 Information you provide

• Account information: your name, email address, and authentication provider (for example Google, GitHub, or magic link).
• Content: messages, prompts, uploads, files, images, and workspace data you create while using the Service.
• Communications: feedback, waitlist submissions, and messages you send us.

2.2 Information we collect automatically

• Usage data: pages visited, features used, request timestamps, and error events.
• Device and network data: IP address, browser type, operating system, and approximate location derived from IP.
• Cookies and local storage: used for authentication, session state, workspace preferences, and analytics.

2.3 Information from third parties

When you connect an integration (for example GitHub or Google Drive), we receive limited profile and content data from that provider under the scope you approve.

3. How We Use Information

• Operate, maintain, and improve the Service.
• Process your prompts and uploads through selected AI model providers.
• Authenticate you and sync your workspace across devices.
• Monitor performance, detect abuse, and secure the Service.
• Communicate with you about product updates, security notices, and support requests.
• Comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information, and we do not use your private workspace content to train foundation models.

4. Legal Bases (EEA / UK Users)

If you are located in the European Economic Area or the United Kingdom, we process your data on the following legal bases under the GDPR / UK GDPR:

• Contract: to provide the Service you request.
• Legitimate interests: to keep the Service secure, prevent abuse, and improve features.
• Consent: where required (for example non-essential cookies or marketing emails).
• Legal obligation: where we are required to retain or disclose data by law.

5. Sharing And Disclosure

We share information only in the situations described below:

• Service providers: infrastructure, hosting, database, email, analytics, and AI model providers that process data on our behalf under written agreements.
• User-initiated integrations: when you connect a third-party service, the data flowing to that service is governed by their privacy policy.
• Legal requests: when required by law, regulation, court order, or other valid legal process.
• Safety and abuse prevention: where necessary to protect the rights, property, or safety of users or the public.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, with continued protection of your data.

6. International Transfers

The Service is operated with a global user base. Your data may be processed in countries other than your own, including outside the EEA/UK. Where applicable, we rely on approved transfer mechanisms such as the European Commission's Standard Contractual Clauses.

7. Data Retention

We retain personal data for as long as your account is active and for a reasonable period afterwards to meet legal, accounting, or reporting requirements, defend legal claims, and analyze aggregate service metrics. Content in your workspace is retained until you delete it or your account is terminated. Deleted content may persist in backups for up to 90 days.

8. Security

We use administrative, technical, and physical safeguards designed to protect your information — including encryption in transit, authenticated access controls, and infrastructure managed by reputable providers. No system is perfectly secure, and we cannot guarantee absolute security.

9. Your Rights

Depending on where you live you may have the right to:

• Access, correct, or delete personal data we hold about you.
• Object to or restrict certain processing.
• Receive a copy of your data in a portable format.
• Withdraw consent for processing that relies on consent.
• Lodge a complaint with your local data protection authority.

To exercise these rights, contact us using the details in the final section. We may need to verify your identity before responding.

10. Cookies

We use strictly necessary cookies to sign you in and remember basic preferences. We may also use analytics cookies to understand product usage. You can control non-essential cookies through your browser settings and any consent controls presented on the site.

11. Changes To This Policy

We may update this Privacy Policy from time to time. When we do, we will post the updated version on this page and change the “Last updated” date at the top. Material changes will also be highlighted in the Service or by email where appropriate.

12. Contact

Questions or requests about this Privacy Policy can be sent through our Contact page. We aim to respond within 30 days.