Privacy Policy

‍

Effective Date: March 3, 2025 (Amended: [Insert Today's Date])

‍

This Privacy Policy describes how BrAIs ("we," "us," or "our") collects, uses, and shares information about users of our platform (the "Platform"). By using the Platform or our Services, you agree to the terms of this Privacy Policy. If you do not agree, please do not use the Platform.

‍

1. Information We Collect:

Document Information: You may upload documents to the Platform in PDF, Word (.doc, .docx), and .html formats. We do not scan or process the content of these documents for our own purposes. However, you are responsible for ensuring that any Personally Identifiable Information (PII) contained within your uploaded documents is anonymized or de-identified before uploading to comply with all applicable laws. We are not responsible for any PII you fail to remove before upload. We only store the document's metadata (file name, size, upload timestamp), a unique identifier, and the results of the language model processing.
Account Information: During registration, you provide your email address. Providing your organization name is optional. We also collect your username and password for authentication.
Usage Data: We collect timestamps of document uploads, a record of processed documents (linked to your account), and the specifications of each language model request (model name, parameters used). We collect this data to improve our services and for security purposes.
Third-Party Services: We use Google Cloud Platform (GCP) for data storage, which has a privacy policy specified here: https://policies.google.com/privacy. We utilize third-party generative AI tools such as Google Gemini for language model processing. Privacy information regarding Google Gemini's data handling can be found in their service terms and conditions, available via https://ai.google.dev/gemini-api/terms. We do not use Google Workspace APIs for the development, improvement, or training of generalized AI and/or ML models.
Third-Party Authentication and Payments: We utilize a third-party vendor, Outseta, for user authentication and payment processing. Your email address, name, and payment information will be provided to Outseta for these purposes.
No Cookies or Tracking Technologies: We do not use cookies or other tracking technologies on our Platform.

2. How We Use Your Information:

‍

We use your information to:

Provide the Platform's services.
Authenticate your account.
Improve the Platform's performance and security.
Comply with legal obligations.

3. How We Share Your Information:

Third-Party Language Models: The content of your uploaded documents is shared with third-party generative AI tools (e.g., Google Gemini) to perform the language model processing you request. We only share the necessary information for this purpose.
Legal Requests: We may disclose your information if required by law, legal process, litigation, or governmental requests, to protect our rights, or to protect the safety of our users or the public.
Google Cloud Platform: Your data is stored on Google Cloud Platform servers located within the United States. GCP adheres to strict security standards, and we employ additional security measures to protect your data. This transfer of data to the US is made in accordance with the requirements of PIPEDA.
Outseta: Your email address and name will be shared with Outsetta for authentication and payment processing.
No other data sharing: We do not share your data with other third parties beyond those explicitly stated above.

4. Data Retention:

‍

We retain your account information and usage data for one (1) year from the last date of account activity. After this period, your data will be deleted, unless otherwise required by law. You are responsible for deleting any documents you have uploaded that you no longer wish to be stored.

‍

5. Data Security:

‍

We use commercially reasonable security measures to protect your data from unauthorized access, loss, alteration, or destruction. These include encryption in transit, access control mechanisms via IAM best practices on GCP, and regular security audits. However, no method of transmission over the internet or electronic storage is 100% secure.

‍

6. Your Rights:

‍

Under the Personal Information Protection Act of Ontario (PIPEDA), you have the right to:

Access your information: Request access to the personal information we hold about you.
Rectification: Request correction of inaccurate information.
Erasure: Request deletion of your data.
Restriction of processing: Request that we limit the processing of your data.
Data portability: Not applicable as we do not conduct automated decision making.
Objection: Object to the processing of your data.

To exercise these rights, please contact us at sean@billings.technology. We will respond to your request within a reasonable timeframe.

‍

7. "Do Not Track" Requests:

‍

We do not currently respond to "Do Not Track" signals because there is no uniform technology standard for recognizing and implementing them.

‍

8. Contact Information:

‍

BrAIs (a subsidiary of Billings Technology Holdings)

Email: brais@billings.technology

‍

9. Changes to this Privacy Policy:

‍

We may update this Privacy Policy from time to time. We will post any changes on this page and update the effective date. We encourage you to review this Privacy Policy periodically. Your continued use of our Platform and Services confirms your acknowledgement and agreement to any updates or changes.

‍