Privacy Policy

1. Information we collect

Account information. When you sign up we collect your email address and a password (stored only as a secure hash by our authentication provider), and optionally your name.

Google Sign-In. If you choose “Continue with Google”, Google shares your name, email address and profile picture with us. We request only these basic profile scopes (openid, email, profile). We do not access your Gmail, Google Drive, Contacts, Calendar or any other Google data.

Content you provide. Messages, prompts, uploaded documents and text, and the content the Service generates for you (such as chats, BRDs and other documents, drafts, filings and notes).

Workspace information. Workspaces you create or join, members you invite (their email addresses) and roles.

Billing information. If you buy a paid plan, your payment is processed by Razorpay or Stripe. We receive your plan, payment status and transaction identifiers — we never receive or store your full card or bank details.

Developer API. If you create API keys, we store each key only as a one-way cryptographic hash together with its name, a short display prefix, when it was created and last used, and a request count. Content sent through the API is processed to generate a response and is not saved to your chat history.

Communications. If you email us, we keep the message and our reply so we can help you. We also send you a verification email when you sign up.

Usage and device information. Pages and features used, generation counts, approximate country derived from your IP address (used to choose your language), browser type, and error diagnostics.

2. How we use information

• To provide the Service: authenticate you, run your chats and document generation, save your conversation history, and enable workspace collaboration.
• To send AI requests on your behalf to our AI model providers and return the results to you.
• To show the Service in your language and remember your preferences.
• To process payments, enforce plan limits and prevent fraud and abuse.
• To send service emails, such as workspace invitations, security and account notices. We do not send marketing email without your consent.
• To keep the Service secure, debug errors and improve reliability.
• To comply with legal obligations.

We do not sell your personal information, and we do not use your content to train our own AI models.

3. Google user data

Anomic AI’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use the name, email address and profile picture received from Google only to create and sign you in to your Anomic AI account and to display your profile in the Service. We do not transfer this data to third parties except as needed to operate the Service (for example, our authentication and database provider), we do not use it for advertising, and we do not allow humans to read it except with your consent, for security purposes, or to comply with the law.

4. How we share information

We share information only with service providers that help us run the Service, under contracts that limit their use of it, or when the law requires:

• Supabase — authentication and database hosting.
• Vercel — website and application hosting.
• Google (Gemini API) and, where enabled, other AI model providers such as OpenAI or Anthropic — to generate AI responses to your prompts. These providers process your prompts under their own API terms and may retain them for a limited time for abuse monitoring.
• Razorpay and Stripe — payment processing.
• Resend — sending transactional email such as invitations.
• Sentry — error monitoring.

Content you place in a shared workspace, or a conversation you share by link, is visible to the people you share it with. You can revoke a share link at any time. We may also disclose information if required by law, to protect the rights and safety of our users or the public, or as part of a merger or acquisition (with notice to you).

5. Sensitive information

Please avoid entering real customer personal data, account numbers, government identifiers or other confidential information unless you are authorised to do so. The Service automatically flags messages that appear to contain such data to help you notice it, but you remain responsible for the content you submit.

6. Cookies

We use only cookies that are needed for the Service to work:

• Authentication cookies that keep you signed in.
• A language cookie (NEXT_LOCALE) and an approximate-country cookie (USER_COUNTRY) to show the right language.
• A workspace cookie that remembers your active workspace.
• A signed trial cookie (anomic_trial) that counts how many free trial chats you have used before signing up. It contains a random identifier and the ids of your trial chats — no personal information.

We also store a few preferences, such as your chosen theme, in your browser’s local storage.

We do not use advertising or cross-site tracking cookies.

7. Data retention

• We keep your account and content for as long as your account is active.
• Conversations you have not used for 60 days are automatically archived (not deleted); you can restore them at any time.
• If you deactivate your account, it and its content are permanently deleted 30 days later unless you reactivate it.
• If you permanently delete your account from Account settings, your account and content are deleted immediately.
• We may keep limited records (such as payment records and security logs) for longer where the law requires it.

8. Security

Data is encrypted in transit (HTTPS) and at rest by our hosting providers. Access to your data is restricted by account and workspace permissions, and significant actions on conversations are recorded in an audit log. No system is perfectly secure, so please use a strong password and tell us promptly if you suspect unauthorised access to your account.

9. Your rights and choices

Depending on where you live (for example under India’s Digital Personal Data Protection Act, 2023, or the EU/UK GDPR), you may have the right to:

• access and receive a copy of your personal data — you can also export your conversations from the app;
• correct inaccurate data;
• delete your data — you can delete conversations or your entire account from Account settings;
• withdraw consent, and turn off cross-conversation memory in your profile settings;
• object to or restrict certain processing, and lodge a complaint with your data protection authority.

To exercise any right, email support@anomicai.com. We will respond within 30 days.

10. International transfers

Our service providers may process data in countries other than yours, including the United States and India. Where required, we rely on appropriate safeguards such as standard contractual clauses.

11. Children

The Service is intended for professionals and is not directed to anyone under 18. We do not knowingly collect personal data from children. If you believe a child has given us data, contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time. If we make material changes we will notify you by email or in the Service before they take effect. The effective date above shows when it was last updated.

13. Contact us

Questions, requests or complaints about privacy (including for our Grievance Officer) can be sent to support@anomicai.com.