Privacy Policy

1. Who controls your data

INTIGAL.AI is the seller and data controller for account information and the data processor for the datasets you upload and analyse. Contact our privacy team at privacy@intigal.ai.

2. What we collect

Account data: name, email address, company, country, authentication identifiers and, where you subscribe, billing metadata handled by our payment processor (we never store card numbers).

Content data: files, database connection metadata, prompts, conversation history and generated analysis.

Usage data: message and upload counts, dataset sizes, feature usage, timestamps, device and browser information, and error diagnostics.

3. Why we process it

To deliver the analysis you request, authenticate you, enforce plan limits, bill subscriptions, provide support, detect abuse and fraud, and improve platform reliability and performance.

We do not sell your personal data, and we do not use your uploaded datasets to train foundation models.

4. How we protect it

All traffic is encrypted in transit with TLS, and data is encrypted at rest. Every record is scoped to your account with database-level row isolation, so one customer's queries can never return another customer's rows.

Access by our staff is limited to the minimum necessary for support and incident response, logged, and requires multi-factor authentication.

5. Sub-processors and data sharing

We use vetted infrastructure and model providers to host the platform, store data, send transactional email, process payments and run inference. Each is bound by a data-processing agreement with confidentiality and security obligations. A current list is available on request.

We share order and account details with Paddle.com, our reseller and Merchant of Record, so it can sell the product, manage subscriptions, take payment, issue invoices and meet tax obligations. We also share data with professional advisers and with authorities where the law requires it.

6. Retention

Conversations and uploaded datasets are retained while your account is active so you can revisit past analyses. You may delete any thread or dataset at any time; deletions are removed from live systems immediately and from backups within 30 days.

When you close your account, content is retained for 30 days to allow export, then permanently deleted. Minimal billing records are kept as long as tax law requires.

7. International transfers and sovereignty

Data may be processed outside your country of residence, protected by standard contractual clauses. Pro and Enterprise plans support regional data residency, and Enterprise supports on-premise or self-hosted deployment where data never leaves your infrastructure.

8. Your rights

Subject to applicable law, including the GDPR, the UK GDPR, CCPA/CPRA and comparable national data protection laws, you may request access, correction, deletion, export in a portable format, restriction of processing, or object to processing. Email privacy@intigal.ai and we will respond within 30 days.

You also have the right to lodge a complaint with your local data-protection authority.

9. Cookies

We use strictly necessary cookies and local storage to keep you signed in and remember interface preferences. We do not run advertising trackers.

10. Changes

We will notify you by email or in-app before any material change to this policy takes effect.