Privacy Policy

1. Data we collect

We collect only what the Service needs in order to work:

• Account data. Your email address, display name, and profile picture, provided by your identity provider when you sign in with Google. We also store your sign-in timestamps and the workspace or organization your account belongs to.
• Content you provide. The messages, files, images, and other content you send to Infano, together with the responses generated for you. Infano is a memory-centred assistant: this content is stored so that it can be recalled in later conversations. This is a core function of the Service, not an optional feature.
• Usage and diagnostic data. Technical logs such as request timestamps, feature usage, error reports, and crash diagnostics, used to operate, secure, and debug the Service.
• Product analytics. Events describing how the Service and our websites are used — pages viewed, features opened, buttons clicked, and whether a form submission succeeded — together with the referring page, campaign parameters in the URL, approximate location derived from your IP address (country and region only), and your browser and device type. A cookie or equivalent browser storage holds a random identifier so that repeat visits can be counted as one visitor. We do not record the content of your messages or files in analytics events.
• Session recordings (our public website only). On our marketing website we record anonymous playback of page interactions — scrolling, clicks, and navigation — to understand how visitors move through the page. This is not enabled inside the Service, where your conversations and files are displayed.
• Payment data. If you purchase credits or a subscription, payment is processed by Stripe. We receive a record of the transaction and its status. We never receive or store your full card number.

We do not collect precise location, contacts, health data, or advertising identifiers, and we do not use your data for advertising.

2. How we use data

• To provide the Service, including generating responses and maintaining the long-term memory that Infano is built around.
• To authenticate you, keep accounts secure, and prevent abuse.
• To process payments and maintain billing records.
• To diagnose faults and improve reliability and quality.
• To understand which parts of the Service and our websites are used, so we can decide what to build, fix, and remove. This is analysis in aggregate; it is not used to make decisions about you individually.
• To comply with legal obligations.

We do not sell personal data, and we do not share it with third parties for their own advertising or marketing.

3. Service providers and international transfers

To generate responses, the content of your requests is transmitted to third-party model providers acting as our processors. Depending on the model selected for a given request, these currently include:

• DeepSeek
• Alibaba Cloud (Model Studio / DashScope)
• OpenAI
• Anthropic

We also use Stripe for payment processing, Amazon Web Services for hosting, Sentry for crash and error diagnostics, and PostHog for product analytics and website session recording. PostHog processes this data on our behalf in the United States; it is not permitted to use it for its own purposes.

Cross-border transfers. Our infrastructure operates in the United States. Some model providers listed above operate outside the United States, including in the People’s Republic of China. Where a request is routed to such a provider, the content of that request is transferred and processed outside your country of residence, and is subject to the laws of the country in which the provider operates. If you do not want your content processed in a particular jurisdiction, do not submit that content to the Service.

4. Retention

We retain account data and your content for as long as your account is active, because retained content is what allows Infano to recall earlier context. You may delete individual content at any time from within the Service. When you delete your account, we delete or irreversibly anonymise your account data and content, except where we are required to retain records for legal, tax, accounting, or fraud-prevention purposes. Backups are purged on a rolling schedule.

5. Your rights and account deletion

Depending on where you live, you may have the right to access, correct, export, restrict, or delete your personal data, to object to certain processing, and to lodge a complaint with a supervisory authority.

You can request deletion of your account and associated data at any time by emailing support@adjunction.ai. We will action verified requests within 30 days.

6. Security

Data is encrypted in transit using TLS and encrypted at rest by our hosting provider. Access to production systems is restricted to authorised personnel. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Children

The Service is not directed to children. It is not intended for, and may not be used by, anyone under the age of 13 (or the minimum age required in your country). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

8. Changes

We may update this Policy. If we make a material change, we will update the effective date above and, where required, notify you in the Service.

9. Contact

Questions or privacy requests: support@adjunction.ai