Privacy Policy

1. Who we are

Aigenta, Inc. ("Aigenta", "we", "us") operates the aigenta.app website and the embeddable chat assistant. We're a Delaware corporation with an EU presence in Madrid, Spain.

2. What we collect

From account holders (you, the customer): name, email, billing address, payment method, and any content you upload to train your assistant.

From end users (visitors to your website): the messages they send, IP address (used only for rate-limiting, not stored beyond 24 hours in identifiable form), and any contact information they voluntarily share.

3. What we don't collect

• Browsing history outside of the chat interface.
• Sensitive categories (health, financial, biometric) unless your assistant is explicitly configured to handle them.
• Anything used to train generic AI models. Your conversations never train models that serve other customers.

4. How we use it

To operate the service, respond to support requests, and improve your assistant's responses on your account specifically. We send transactional emails about your account and (with consent) occasional product updates.

5. Who we share it with

Sub-processors necessary to run the service: AWS (hosting, EU regions), Stripe (payments), Resend (transactional email), Anthropic (model inference). A current list with locations and purposes is at /dpa.

6. Your rights

Access, correction, deletion, portability, restriction, objection. Email [email protected] from the address on your account and we'll respond within 30 days. Under GDPR Article 15 and CCPA §1798.110 we provide a single bundled export of all data we hold about you in machine-readable JSON.

7. Retention

• Account data: while your account is active + 90 days after closure.
• Conversation logs: 365 days by default; configurable down to 30 days on Growth and Scale.
• Billing records: 7 years (tax law).

8. Cookies

We use a strictly necessary session cookie (aigenta_session) and a localStorage entry for theme preference (aigenta-theme). No third-party trackers, no advertising cookies. Period.

9. International transfers

We store EU customer data in Frankfurt (eu-central-1). Any transfer outside the EEA happens under Standard Contractual Clauses (2021/914/EU). Full transfer assessments available on request.

10. Changes

If we materially change this policy we'll email account holders at least 30 days in advance. Version history is on GitHub.

11. Contact

Data protection officer: Ines Falk, [email protected]. Postal: Aigenta, Inc., 1209 Orange Street, Wilmington, DE 19801, USA.