Privacy Policy

1. Introduction

At Auboz ("we", "us", or "our"), we understand the importance of privacy in the digital environment. Protecting your personal data is not just a legal requirement — it is an essential part of our commitment to earning and maintaining your trust.

This Privacy Policy explains how we collect, use, process, store, and safeguard information when you interact with our website, APIs, and other related services. By choosing to use our Service, you acknowledge that you have read, understood, and agreed to the practices described herein.

2. Definitions

Certain key terms help clarify how your data is handled. "Personal Data" refers to any information that can identify an individual directly or indirectly. A "Customer" or "Client" refers to businesses and organizations using our Service under a contractual relationship. "Service Data" describes the information we handle strictly on behalf of these Customers.

We follow internationally recognized privacy principles, and the terms "Controller" and "Processor" align with the meaning provided in global data protection regulations, indicating who determines the purpose of processing and who carries out the processing.

3. About Auboz

Auboz is a cloud-based AI agents platform that enables businesses to build intelligent agents from their knowledge sources. It allows users to upload documents, connect APIs and tools, deploy AI chatbot widgets on websites, and query their knowledge base using natural language — powered by RAG (Retrieval-Augmented Generation) and semantic search.

We are deeply committed to ensuring that every layer of the platform — from infrastructure to user interface — adheres to strict privacy, reliability, and security standards.

4. Collection of Personal Data

We collect information to deliver a secure, efficient, and personalized experience. When you interact with our Service, you may provide details such as your name, email address, company name, business contact details, and authentication credentials. These details help us create your account, verify access, and tailor the Service to your needs.

Technical data, such as IP addresses, device identifiers, browser types, and usage patterns, may be collected automatically. This information helps us diagnose issues, improve performance, and maintain seamless functionality.

If you use paid features, we process necessary billing information, including payment details and transaction records, through secure and compliant systems.

Additionally, the content you share or process while using our platform — such as uploaded documents, knowledge base content, chat conversations, and AI agent interactions — may be processed as part of delivering the features you request.

All data collected aligns with the principles of necessity, relevance, and lawful processing.

5. Purpose of Processing

We process information to provide, support, and continuously improve our Service. Your data helps us create and maintain user accounts, authenticate access, deliver document processing and AI agent features, and enable a smooth operational experience.

Certain information ensures accurate billing, fraud prevention, and smooth financial transactions.

Your interactions with our support team allow us to address issues, assist with troubleshooting, and deliver timely customer care.

We also use certain data to enhance platform features, refine workflows, advance system performance, and introduce improvements that make our Service more intuitive and valuable to users.

Where appropriate, and only with your consent, we may communicate updates, newsletters, or promotional content. These communications are entirely optional and can be withdrawn at any time.

6. Understanding and Improving Our Services

To build a superior and evolving product, we study how users interact with our platform. We analyze aggregated usage data to understand navigation patterns, identify areas where users face friction, and detect opportunities for performance optimization.

This research-driven understanding helps us design better features, improve workflows, enhance speed and stability, and simplify the overall customer experience.

Whenever possible, the data used for analysis is aggregated or anonymized, ensuring that your personal identity remains protected.

7. Legal Basis for Processing

Our data-handling practices rest upon lawful foundations. Some processing activities are necessary to fulfill our contractual commitments to Customers, such as providing access to the Service.

Other activities are supported by legitimate interests, such as enhancing performance, improving security, or gaining insights into product usage.

For areas requiring explicit permission — such as marketing or optional data collection — we rely on user consent, which can be withdrawn at any time. We may also process data when required by law, regulatory authorities, or to protect legal rights and obligations.

8. Service Data Processing

When processing data on behalf of Customers, we perform the role of a Processor. We handle Service Data strictly according to Customer instructions and contractual terms.

Customers are responsible for ensuring that the data they submit, including documents and knowledge base content, is lawfully collected and compliant with privacy laws.

All Service Data is stored securely, protected with encryption, and deleted or anonymized upon account termination unless retention is legally mandated.

9. Disclosure of Personal Data

We do not sell or rent your Personal Data. However, certain circumstances may require us to share information responsibly and securely.

We may work with trusted service providers — such as hosting partners, analytics platforms, AI model providers, payment processors, and customer support tools — who assist in operating and improving our Service. These partners only receive the data necessary to perform their functions and must adhere to strict confidentiality and security obligations.

In situations involving mergers, acquisitions, restructuring, or asset transfers, Personal Data may be shared as part of the business transition, ensuring continuity of service and compliance with legal requirements.

We may also share information when required by law, court orders, or valid government authorities, or when necessary to protect the rights, safety, and integrity of our users, our platform, or the public.

10. Data Retention

We retain Personal Data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy. Retention periods may depend on account status, legal obligations, dispute resolution needs, and business requirements.

Upon account deletion or termination, we securely remove or anonymize Personal Data unless law or explicit customer request requires longer retention.

11. Security of Personal Data

Protecting your information is central to our operations. We employ a combination of technical, organizational, and administrative measures designed to safeguard data from unauthorized access, loss, misuse, or alteration.

These measures include encryption in transit and at rest, secure server environments, role-based access controls, continuous monitoring, and periodic security audits. While no system can guarantee absolute security, we are committed to continuously enhancing and updating our security practices.

12. Cookies and Tracking Technologies

Our website and application may use cookies and similar technologies to maintain sessions, remember user preferences, analyze usage patterns, and improve service functionality.

Most browsers allow you to manage cookie settings, including disabling them. However, disabling cookies may affect certain features or reduce platform performance.

13. International Data Transfers

As part of providing our Service, your data may be stored or processed in countries outside your own. Wherever transfers occur, we implement appropriate safeguards, such as contractual protections, industry-standard security controls, and compliance with global privacy regulations.

14. Children's Privacy

Our Service is not designed for individuals under the age of 18, and we do not knowingly collect Personal Data from minors. If we become aware that such data has been collected, we take steps to delete it promptly.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or business operations. Any updates will be posted with a revised "Last Updated" date. Continued use of the Service after such changes indicates acceptance of the updated Policy.