Privacy Policy

1. Introduction

How AI Connects Inc. ("we", "our", "us") operates the AI Governance platform. This Privacy Policy explains what information we collect when you use the alpha service, how we use it, and the controls you have over it.

2. Information We Collect

We collect information you provide directly:

• Account information (name and email address from your chosen sign-in provider)
• GitHub repository metadata when you connect a repository for scanning
• Scan inputs you submit (configuration choices, custom policies you upload)

We also collect information automatically:

• Operational logs (request paths, status codes, timestamps)
• Telemetry needed to operate the service and improve reliability

3. How We Use Your Information

We use the information we collect to:

• Provide and operate the service
• Authenticate you and gate access to your own data
• Perform the scans and analyses you request
• Respond to your support requests
• Detect, investigate, and prevent abuse

We do not sell your data. We do not train models on your repository contents or your scan inputs.

4. Data Storage & Security

Customer data is stored in databases located in regions we control and is gated by row-level security so other customers cannot access it. Access by our staff is limited to operational necessity. We use industry-standard transport security (TLS) for data in transit and at-rest encryption provided by our cloud storage providers.

5. Data Retention

Alpha-period retention defaults: account data is retained while your account is active and for 30 days after you stop using the service. Operational logs are retained for 90 days. Scan findings are retained for as long as your account is active.

6. Sub-processors

We use a small set of established cloud providers to operate the service (authentication, database hosting, observability). The specific provider list will be published as the service exits alpha.

7. Your Rights

You may request a copy of the personal information we hold about you, ask us to correct inaccurate information, or ask us to delete your data. Send requests to privacy@howaiconnects.com. We will respond within 30 days.

8. Changes

We may update this policy during alpha. Material changes will be indicated by an updated "Last updated" date at the top of this page.

9. Contact

Questions about this policy can be sent to privacy@howaiconnects.com.