Privacy Policy

At InnossistAI, we are committed to protecting the privacy and security of your enterprise data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you build, deploy, and scale AI agent workflows using our platform.

1. Information We Collect

We collect information in several ways depending on how you interact with our platform:

• Account Information: When you register an account, we collect your name, business email address, company name, and password.
• Workflow Configuration Data: We store the metadata, canvas nodes, settings, and connector configurations of the workflows you construct using our visual builder.
• Integration Credentials: To connect external data sources (e.g. PostgreSQL, HubSpot, Pinecone), we encrypt and safely store your API keys and credentials, or fetch them dynamically using OAuth tokens.
• Usage and Telemetry Data: We analyze request counts, execution speeds, token counts, and error rates to monitor platform health and optimize performance.

2. How We Use Your Information

We utilize your data to serve, refine, and secure the InnossistAI platform:

• To compile, orchestrate, and execute the AI workflows you build.
• To provide customer support and diagnose system errors or issues.
• To monitor API traffic usage and billing tiers.
• To protect against fraudulent, unauthorized, or illegal activities.
• To send product updates, feature announcements, and security alerts.

3. Data Protection and Sovereignty

As an enterprise AI builder, we respect your data sovereignty. We do not train underlying foundation LLMs or machine learning models on your proprietary business data, prompt inputs, or system outputs without your explicit consent or configuration options.

4. Security Standards

We employ strict technical and organizational measures designed to secure your data against unauthorized access, theft, or modifications:

• Encryption: Data is encrypted both in transit (using TLS 1.3) and at rest (using AES-256).
• Access Control: We enforce strict role-based access controls (RBAC) and audit log monitoring for internal operations.
• Isolation: Multi-tenant isolation layers prevent cross-tenant data leaks.

5. Sharing and Disclosure

We do not sell your personal or business data. We only share information in the following situations:

• Third-Party Model Providers: When your workflows route prompts to LLM providers (like Anthropic or OpenAI), data is transmitted as configured by your canvas connectors.
• Service Providers: We work with trusted hosting and database providers (e.g. AWS, Vercel) under strict data protection agreements.
• Legal Requirements: If compelled by law or judicial warrants to disclose information, we will notify you in advance unless prohibited by legal restrictions.

6. Your Rights

Depending on your location and jurisdiction, you may have rights under GDPR, CCPA, or other data privacy laws to access, correct, delete, or export your personal data. To exercise these rights, please contact our support team.

7. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please reach out to us:

Email: privacy@innossistai.com